Assessment Method: Professional Discussion underpinned by a portfolio


Plain-English Explanation

K8 is about understanding how to reduce the risk of losing data and ensuring it remains secure, accurate, and available when needed. This is often called the CIA triad:

  • Confidentiality: Keeping data private and only accessible to authorized people

  • Integrity: Making sure data is accurate and not tampered with

  • Availability: Ensuring data is accessible when needed, even during disruptions


Examples of How Apprentices Demonstrate This at Work

  • Setting strong passwords and enabling multi-factor authentication to protect confidentiality

  • Using version control or checksums to maintain data integrity

  • Ensuring backups are in place so data is available after a system failure

  • Creating a Power Automate flow to alert when a critical file is changed

  • Applying mailbox rules to prevent sensitive data from being sent to the wrong person


Common Gaps and Misconceptions

  • Thinking risk mitigation is only about backups—security and access control are equally important

  • Believing that cloud storage alone guarantees data safety without proper permissions

  • Ignoring the need for testing recovery plans

  • Assuming integrity checks are unnecessary for small datasets


Links to Resources and Tools


Why It Matters

  • Protects sensitive information from breaches

  • Ensures business continuity and trust

  • Reduces financial and reputational risk


Portfolio Evidence Ideas

  • Screenshots of:

    • A backup schedule or recovery test

    • A Power Automate alert flow for file changes

    • Mailbox rules preventing data leaks

  • A short write-up explaining how you applied confidentiality, integrity, and availability principles in your role


EPA-Style Questions

  • What does the CIA triad stand for and why is it important?

  • How do you ensure data remains confidential and accurate?

  • Can you give an example of how you mitigated the risk of data loss?


Embedded Topics

  • Equality & Diversity: Ensuring fair access to data for authorized users

  • Sustainability: Reducing reliance on physical storage by using secure digital solutions

  • British Values: Responsibility and accountability in protecting data