S3: Apply Information Security Principles, for Example: Information Transfer, Deletion, Storage, Usage and Communications That May Include Using Mobile Devices

Assessment Method: Professional Discussion underpinned by a portfolio

Plain-English Explanation

S3 is about applying security best practices when handling information. This includes how you transfer, store, delete, and use data securely—whether on a computer, mobile device, or through digital communication channels.

Examples of How Apprentices Demonstrate This at Work

• Encrypting files before sending them via email or using secure file-sharing platforms

• Applying mailbox rules to prevent sensitive emails from being sent to the wrong recipient

• Using Power Automate to create approval workflows for sharing sensitive documents

• Deleting files securely in line with company retention policies

• Locking screens and using strong passwords on mobile devices

Common Gaps and Misconceptions

• Thinking deleting a file from a folder means it’s gone (it may still exist in backups)

• Believing mobile devices don’t need the same security as desktops

• Ignoring encryption for sensitive data transfers

• Forgetting to follow company policies for secure disposal of data

Links to Resources and Tools

• NCSC: Information Security Guidance

• Microsoft Learn: Security and Compliance

• Intro to Power Automate for Secure Workflows

• How to Create Outlook Mailbox Rules

• Podcast: Keeping Information Secure in a Digital World (Insert your podcast link here)

Why It Matters

• Protects sensitive data from breaches and misuse

• Ensures compliance with legal and organizational requirements

• Maintains trust with customers and stakeholders

Portfolio Evidence Ideas

• Screenshots of:

  • A secure file transfer process or encrypted email

  • A Power Automate approval flow for sensitive data

  • Mailbox rules for managing confidential communications

• A short write-up explaining how you applied security principles in a real scenario

EPA-Style Questions

• How do you ensure information is transferred securely?

• Can you give an example of when you applied security principles to protect data?

• Why is it important to follow secure deletion and storage practices?

Embedded Topics

• Equality & Diversity: Ensuring security measures do not disadvantage any user

• Sustainability: Reducing paper-based processes by using secure digital systems

• British Values: Promoting responsibility and accountability in data security