What School Management Software Can and Cannot Tell You

By almost any measure, American schools have already solved building security.

Federal survey data from 2021-22 shows 97 percent of public schools controlled access to buildings during school hours. Another 97 percent required visitors to sign in and wear a badge. Ninety-three percent had security cameras, up from 61 percent a little over a decade earlier. When the Government Accountability Office surveyed districts about their facility priorities, improving security came first, named by an estimated 92 percent.

These are saturation numbers. On paper there is no meaningful adoption gap left to close, and any vendor telling a district it needs to start taking building security seriously is describing a problem that was addressed years ago.

And yet the incidents that follow rarely involve a security measure being defeated. They involve one not being in effect.

The finding that complicates the picture

Researchers at the Advanced Law Enforcement Rapid Response Training Center recently reviewed 54 active shooter incidents in K-12 schools spanning 25 years, examining 66 documented interactions with doors.

The central finding was not that locks failed. It was that most attackers never had to defeat one. They entered through doors that were unlocked, propped, or otherwise unsecured. Exterior doors were the critical vulnerability, particularly at elementary schools, where attackers are most often outsiders rather than students.

The sample is small and the researchers were careful about what it can support. Sixty-six door interactions cannot establish that any particular policy works. But it points at something the adoption statistics obscure completely.

Policy is not the same as state

Here is the uncomfortable reconciliation. Ninety-seven percent of schools control access to buildings during school hours. That figure describes a policy. It does not describe the side door at 11:15 on a Tuesday, wedged open because a delivery is coming and someone will be back for it in a minute.

Nearly every system a school operates has this shape. It records an intention rather than a state.

A visitor policy records that guests are expected to sign in. It does not know about the person who walked in behind a parent during afternoon pickup. An attendance register records who was marked present at 8:40. It does not know who is in the building at 1:15. A staff roster records who is currently employed. It does not know whose badge still opens the gym.

These are not failures of diligence. They are the predictable result of records produced by human declaration at scheduled moments, which is how almost all school administrative data comes into existence.

The most thoroughly documented example

The Texas House committee investigation into the 2022 shooting at Robb Elementary School in Uvalde is, whatever else it is, the most detailed public account of this gap that exists.

Robb Elementary had an active shooter policy. That policy called for classroom doors to be locked during school hours. By the standard of the survey data above, the school would have counted as one of the 97 percent.

What the committee found was that employees routinely left interior and exterior doors unlocked, and that teachers propped doors open with rocks, wedges and magnets. Part of the reason was a key shortage. There was no single master key for the campus, which had been built in 1955 and extended later. Staff sometimes changed locks without telling the district police lieutenant, who himself carried more than fifty keys. On the day of the attack, none of the three exterior doors to the west building had been locked.

The door to Room 111 had been reported as not always latching. The teacher raised it with administrators more than once. No work order was ever issued, and the school's maintenance records for that year contain no trace of the complaint.

Some of this is contested, and the piece would be dishonest without saying so. The school's principal disputed the committee's characterisation, stating that a custodian had checked the lock the night before and found it working, and rejecting the finding that there was a culture of complacency. Her explanation of the latch is the part worth sitting with. In an aged building, she said, some doors have to be forced shut to engage the locking mechanism, and teachers know this and work around it.

Read as a defence, that is a reasonable description of an old building. Read as a description of a security system, it is the whole problem in one sentence. Whether or not the door was locked that day, the campus was running a model in which the lock's state depended on every adult remembering an undocumented workaround, every time, with no way for anyone to check.

Why the workaround always wins

It is tempting to read that as negligence, and the committee explicitly declined to. Its language was systemic failure rather than malice.

The mechanics are ordinary and they repeat everywhere. A door that requires force to latch will eventually be left unlatched by someone in a hurry. A school with too few keys will develop informal workarounds, because the alternative is a teacher standing outside a classroom waiting. A maintenance request that produces no work order teaches the person who filed it not to bother next time.

None of these are decisions anyone makes. They are what a building does to the policies written about it, and no amount of policy strengthening touches them, because the policy was already correct. Robb Elementary's doors-locked rule was not wrong. It simply was not a description of the building.

The response in Texas is instructive about scale. The state education agency announced it would check whether exterior doors are locked properly across the state before the next school year: more than 340,000 doors, across over 3,000 campuses and 1,200 districts. That is a serious undertaking, and it produces a snapshot. It tells you the state of 340,000 doors on the day each was inspected, and nothing about any of them the following Tuesday.

Checking state by hand does not scale, which is the entire reason the question belongs in a software conversation at all.

Where school management software sits in this

School management software is the most complete record of intention a school will ever own. Enrolment, timetable, attendance, examinations, fees, staff records, transport, parent communication. For the administrative life of the institution it is close to comprehensive, and nothing here argues against buying it well.

But its inputs are declarations. A teacher marks a register. An administrator enters an enrollment. A parent updates a phone number. Each of those is a person stating what is true at a moment someone else scheduled, and the platform stores it faithfully.

This is why a visitor module inside a school management platform behaves the way it does. It produces an excellent log. It cannot produce a decision at the door, because a decision requires knowing things the school has not declared: whether this person's identity matches their claim, whether they appear on a restricted or custody-flagged list, whether the door they are standing at is actually shut.

When a school management platform is evaluated against that expectation it will disappoint, and the disappointment is a category error rather than a product flaw. Nobody asks the finance module to describe the corridor.

What observing a state actually requires

The systems that know a building's state work on a different principle. A door position sensor knows whether a door is shut, continuously, without anyone deciding to report it. An access control system knows which credential opened which door at which second and can tell you at four in the afternoon that a badge belonging to someone who left in March was used this morning. Video that can be searched in seconds rather than scrubbed through for an afternoon, the difference AI video analytics makes over a passive recorder, turns recorded footage from an archive into something an administrator will actually consult while it still matters.

What they share is that no human has to remember to tell them anything. That is the only property distinguishing them, and it is the one that matters.

It is worth saying plainly that this is not an argument for buying more. A great many schools already have cameras on every corridor and access control on the main entrance. The gap is more often that these sit in separate systems with separate logins and no shared timeline, so answering a simple question about yesterday afternoon means opening three tools and reconciling clocks by hand.

Why the distribution is uneven

This is also where cost enters, and where the adoption figures stop looking so flat.

Seventy-three percent of schools had classrooms with locks operable from the inside, well below the 97 percent who controlled access on paper. The distribution is worse than the average suggests. Among schools where at least three-quarters of students qualify for free or reduced-price lunch, 69 percent had interior classroom locks, against 78 percent at schools where a quarter or fewer qualify.

Policy scales for free. A sign-in requirement costs a clipboard and a laminated sign, which is precisely why 97 percent of schools have one. Knowing the state of a building costs money, so it arrives unevenly, and it arrives last at the schools with the least to spend. Those two numbers, nine points apart, are that fact rendered as a statistic.

The question underneath the procurement

It has become normal to evaluate school systems by coverage. Does the platform have a visitor module, a safety module, a communications module. Coverage is easy to compare across a shortlist and easy to defend to a board, which is why software gets bought that way.

The better question is narrower and harder to ask. For each thing this system claims to handle, does it record what somebody intended, or does it observe what is actually true?

Both kinds are necessary. A school cannot operate without its record of intention, and that record deserves to be bought carefully and integrated properly. But a school that has bought only records of intention ends up with a complete and accurate account of what was supposed to happen, inside a building whose current condition nobody can describe.

That is the 97 percent problem. Not that schools failed to adopt security measures, but that the measures easiest to count turned out to be the ones that cost nothing to declare.