S9: Apply the Principles of Data Security When Handling Digital Information

Assessment Method: Professional Discussion underpinned by a portfolio

Plain-English Explanation

S9 is about making sure that whenever you handle digital information—whether storing, sharing, or deleting it—you follow data security principles. This means protecting data from unauthorized access, keeping it accurate, and ensuring it’s only used for the right purpose.

Examples of How Apprentices Demonstrate This at Work

• Encrypting files before sending them via email or using secure file-sharing platforms

• Applying mailbox rules to prevent sensitive emails from being sent to the wrong recipient

• Using Power Automate to create approval workflows for sharing confidential documents

• Storing files in secure, access-controlled locations like SharePoint or OneDrive

• Following company policies for secure deletion of data

Common Gaps and Misconceptions

• Thinking that saving a file in a shared folder is always secure

• Believing that deleting a file from a folder means it’s gone (it may still exist in backups)

• Ignoring encryption for sensitive data transfers

• Forgetting to apply access controls or permissions

Links to Resources and Tools

• NCSC: Data Security Guidance

• Microsoft Learn: Security and Compliance

• Intro to Power Automate for Secure Workflows

• How to Create Outlook Mailbox Rules

• Podcast: Data Security in Practice (Insert your podcast link here)

Why It Matters

• Protects sensitive data from breaches and misuse

• Ensures compliance with legal and organizational requirements

• Maintains trust with customers and stakeholders

Portfolio Evidence Ideas

• Screenshots of:

  • A secure file transfer or encrypted email

  • A Power Automate approval flow for sensitive data

  • Mailbox rules for managing confidential communications

• A short write-up explaining how you applied data security principles in a real scenario

EPA-Style Questions

• How do you ensure data is handled securely in your role?

• Can you give an example of when you applied data security principles?

• Why is it important to follow secure deletion and storage practices?

Embedded Topics

• Equality & Diversity: Ensuring security measures do not disadvantage any user

• Sustainability: Reducing paper-based processes by using secure digital systems

• British Values: Promoting responsibility and accountability in data security