AI Opportunity Discovery — IT view | Lancing College

Your details

Your name

Your email

Your role

Are you in-house, MSP, or hybrid?

Date of completion

Section A — IT ownership

Q1Is IT delivered in-house, via MSP, or hybrid?

In-house only MSP (Managed Service Provider) only Hybrid (in-house + MSP) Other (specify in comments)

Comments (optional — name the MSP if applicable):

Q2Name, role and email of IT lead / decision maker

Name

Role

Email

Comments (optional):

Q3Approximate IT headcount (in-house + outsourced)

Comments (optional):

Q4Annual IT operating budget

Comments (optional):

Section B — Identity and productivity

Q5Primary productivity suite

Comments (optional):

Q6Identity provider

Microsoft Entra ID (formerly Azure AD) Google Identity Both, federated On-premise Active Directory (no cloud identity) Other (specify in comments)

Comments (optional):

Q7MFA (multi-factor authentication) coverage across staff

Comments (optional):

Q8SSO (single sign-on) coverage across business systems

Comments (optional):

Section C — Core systems

Q9Management Information System (MIS) — which?

Comments (optional — version, deployment model):

Q10Finance system

Comments (optional):

Q11HR system

Comments (optional):

Q12Admissions / CRM system

Comments (optional):

Q13Parent communications platform

Comments (optional):

Q14Estates / facilities management (CAFM)

Comments (optional):

Q15Other business-critical systems (with vendor names)

e.g. library system, catering, payroll, photography, alumni database, fundraising, governance.

Section D — Existing AI tooling

Q16AI tools currently deployed across staff

Comments (optional — which licences, for whom):

Q17AI licence coverage across staff

Comments (optional):

Q18Staff AI usage policy status

Formal policy in place Draft policy No policy Not sure

Comments (optional — date of last review if formal):

Section E — Integration and API readiness

Q19Which systems expose documented APIs or MCP-ready surfaces?

Tick all that have a documented API we could use, or where you know an MCP server / connector exists. Use comments for version / scope detail.

Comments (optional — versions, scope, any MCP / Graph connectors already in use):

Q20Integration layer in place

Comments (optional):

Section F — Security and compliance

Q21Cybersecurity framework in place

Comments (optional — date of last audit / finding summary):

Section G — Data architecture and governance

Q22Where does core data live (deployment model)?

Comments (optional — primary cloud provider(s)):

Q23Where is data geographically stored / processed?

Primary data residency:

Any data residency restrictions per data class (e.g. pupil data must stay in UK):

Q24Data classification and segregation

Is there a formal data classification scheme in place?

Formal scheme, applied across systems Informal / partial classification No classification scheme Not sure

How are these data classes segregated technically? (Tick all that apply.)

Comments (optional — e.g. how pupil-data systems are walled off from staff-data systems):

Section H — Roadmap

Q25Major system changes planned in the next 12 months

Any migrations, replacements, integrations or vendor decisions in flight.

Q26Top three current IT priorities