Cyber Apprenticeships & the Cyber Security Technical Professional Degree Apprenticeship Mark Heholt (mark.heholt@thetechpartnership.com) and Dr Paul Thorlby (JPTHORLBY@qinetiq.com)

What is an apprenticeship? A paid job, minimum hourly rate: Under age 18: £4.00 18 – 20: £5.55 21+: £6.95 But average pay in STEM much higher (typically £18k plus) Lasts at least 12 months Can be fixed or permanent contract (90% of apprentices stay with the employer on completion) Apprentice spends about 80% of time learning on the job. Minimum 20% is off- the-job (at a training provider / FE college / university) Government (through the Skills Funding Agency) subsidises the cost of the training

Benefits of taking digital apprentices Attract new talent: recruit and develop ambitious school leavers with the skills and experience to excel in your workplace Increase retention and productivity: apprentices can help support existing staff to develop and progress Tailor to your business and roles: from online training to part-time study, a programme can be created around your training needs Cost-effective: the average apprentice increases business productivity by £214 per week Bring fresh ideas: having an apprentice who is learning about the industry can give a unique insight on projects Learning at all levels: from level 2 to MSc, apprenticeships can train learners of all levels and abilities Support from high-quality training providers: accredited training providers can help employers through the entire process from hiring to completion

Map of Digital Apprenticeship Standards Generalist Specialist a Cyber Intru sion Analyst Tech and Digital Apprenticeship Standards Each tier represents a set of job roles available (see over) and also gives the opportunity to progress onto a higher standard upon completion Software Developer Data Analyst BSc Digital & Technology Solutions Professional Network Engineer Unified Communications Trouble shooter Cyber Security Technologist Software Tester Contact Centre Operator Digital Marketer So ftware Development Technician IT Technical Sales person Infrastructure Cyber Security Technical MSc Specialist IT Business Support Administrator Network Cabling Installer Marketer BSc Digital User Experience (UX) D igital IT Solutions Specialist   Indicates standards in development

Typical job titles for each Apprenticeship Standard (examples) IT Support Administrator Digital Contact Centre Operator Cyber Security Technologist IT Business Analyst IT Helpdesk Support Contact Centre Agent Cyber Operations Manager Business Systems Analyst IT Administrator Digital Service Agent Security Architect Website Administrator Call Centre Operator Penetration Tester Business Analyst Customer Service Advisor Security Risk Analyst Digital Administrator BSc Cyber Security Technical Professional Systems Operator Network Cabling Installer Cyber Intrusion Analyst Cyber Risk Manager IT Office Manager Data Cabling Installer Secure Operations Centre (SOC) Analyst Cyber Systems Analyst Administrator Data Cantre Technician Intrusion Analyst Cyber Solutions Architect Installation Technician Network Intrusion Analyst Cyber Deep Techncial Analyst Unified Communications Technician Incident Response Centre (IRC) Analyst Software Development Technician BSc Digital User Experience (UX) Professional Telecommunications Technician Software Technician Data Analyst UX Researcher Software Engineer UX Designer IT Technical Salesperson Software Diagnostic Tester Data Manager UX Developer Sales Associate Data Scientist UI Designer Technical Telesales Network Engineer Data Modeller Front End Designer Junior Account Manager Network Technician Software Tester BSc Digital & Technology Solutions Professional Digital Marketer Systems Engineer Social Media Executive Network Administrator Software Test Analyst Digital Marketing Assistant Cyber Professional Digital Marketing Technologist Unified Communications Trouble Shooter Software Developer Operations Management Professional Campaign Executive Unified Communications Desk Engineer Web Developer Service Management Professional Unified Communications Field Engineer Infrastructure Technician Voice Field Engineer Applications Developer MSc Digital & Technology Solutions Specialist Help Desk Technician Microsoft Consultant Software Engineering Specialist First Line Support IT Solutions Technician Business and Enterprise Architect Specialist Second Line Support Cyber Security Technology Specialist Network Support Web Content Manager Operations Management Specialist IT/Digital Futures Management Specialist

Digital Industries Apprenticeships: current position, November 2016 Standard Status Typical duration Current funding band and max value Proposed new funding band and max value from April 2017 Software Developer – L4 Updated standard approved and published 24 months Band 5 £27k Band 12 £18k Network Engineer – L4 Updated standard approved and published - without BCS certifications Band 5 £27k Band 12 £18k Infrastructure Technician – L3 Published 12 months Band 11 £15k Digital Marketer – L3 18 months Band 3 £9k Band 9 £9k Cyber Intrusion Analyst – L4 Unified Communications Trouble Shooter – L4 Band12 £18k Data Analyst – L4 Software Tester – L4 Cyber Security Technologist – L4 BSc Digital & Technology Solutions Professional - L6 Approved and published – approved for new specialisms to be added 36 months Band 15 £27k IT Technical Salesperson – L3 Approved and published – funding appeal successful and moved from Band 2 to Band 4 Band 4 £12 Yet to be proposed

Current funding band and max value Standard Status Typical duration Current funding band and max value Proposed new funding band and max value from April 2017 Software Development Technician – L3 Standard approved and published. Assessment Plan being held until external QA model inserted 18 months Band 5 £27k TBC Unified Communications Technician – L3 Standard approved and published. Assessment Plan being held until external QA model inserted 24 – 30 months. Digital Contact Centre Operator – L3 Developed and rejected. New EOI submitted. EOI rejected Not allocated TBD “IT Generalist” – L2/3 In development IT Business Analyst – L4 Standard and assessment plan approved, including external QA, subject to a few changes. Allocated Band 4 – employers likely to appeal Digital Business Administrator – L2/3 BSc Cyber Security Technical Professional - L6 3 – 5 years BSc User Experience (UX) Professional – L6 EOI approved MSc Digital & Technology Solutions Specialist – L7 Network Cabling Installer – L3

Funding: how it works under the Apprenticeship Levy Levy payers (pay bill over £3m): pay 0.5% over £3m: - Levy money available to pay for the training (within the allocated funding band) until it is all used up Non-Levy payers (pay bill less than £3m) or Levy payers whose funding has all been used up: - Employer pays 10% of the cost of the training (Government pays 90% within allocated funding band)

Funding limits– how they work Need to format with headings WITHIN THE FUNDING BAND LIMIT OVER THE FUNDING BAND LIMIT Funding limits– how they work Example funding band limit = £6,000 Price you negotiate with your training provider = £5,000 The cost is within the funding band limit Example funding band limit = £6,000 Price you negotiate with your training provider = £7,500 The cost is above the funding band limit With enough funding in your account Without enough funding in your account With enough funding in your account Without enough funding in your account £5,000 will be deducted from your digital account over the life of the apprenticeship. If you have £0 in your account Gov will pay 90% (£4,500) and you will need to pay 10% (£500). If you have digital funds available, these will be used first, and then Gov will pay 90% of the remaining costs, and you will pay 10%. £6,000 will be deducted from your digital account over the life of the apprenticeship. You will be responsible for paying £1,500. This payment can’t be made from your digital account If you have £0 in your account Gov will pay 90% (£5,400) and you will need to pay 10% (£600). This is the maximum payable within the limit of the band. You will also be responsible for paying the additional £1,500. This payment can’t be made from your digital account

Additional funding support Funding for 16-18 year olds Gov will pay £1,000 to employers, and a further £1,000 to training providers if they train a 16-18 year old apprentice. Disadvantaged young people Gov will pay £1,000 to employers, and a further £1,000 to training providers if they train 19-24 year olds leaving care or who have a Local Authority Education and Healthcare Plan. .   Funding for additional learning support Gov will training providers up to £150 a month to support learners with special needs. Funding for English and Maths training  Gov will pay training providers £471 to help apprentices gain the minimum standard of Level 2 in English the same amount to reach Level 2 in and maths (if not already attained).

Documents The Standard: published by DfE. It sets out minimum and mandatory requirements The Occupational Brief: NOT published by DfE. It sets out detail of the Standard (only available to accredited universities for degree apprenticeships) The Assessment Plan: published by DfE. It sets out how Assessment Organisations will undertake end point assessment and award a grade

On-programme assessment The focus is on end-point assessment, but employers wanted: knowledge to be tested during the apprenticeship to include vendor qualifications (in some cases) to give employers choice This is why employers have defined on-programme assessment.

On-programme assessment con’t Any Ofqual registered organisation can develop and deliver the Knowledge Modules The knowledge modules/vendor qualifications MUST be passed before end point assessment takes place

End-Point Assessment End Point Assessment is made up of four things a summative portfolio: evidence of best work during the apprenticeship a synoptic project: undertaken in controlled environment an employer reference: doesn’t count toward the grade an interview: a structured, exploratory discussion with the independent assessor NOTE: for degree apprenticeships, the assessment is done by the university and the grades are as for standard degrees.

Interview Synoptic Project Summative Portfolio Employer Reference Grading Decision

Assessment and Grading: who does it (non-degree apprenticeships)? Any Ofqual registered Awarding Organisation can develop and offer the Knowledge Modules Any organisation on the SFA Register of Assessment Organisations – for that Standard, can undertake end-point assessment and grading In both cases, their approach must satisfy the employers specification

Assessment and grading for a degree apprenticeship External Examiners In-course module assessment. Range of modules to develop skills, knowledge and behaviours progressively against the standard. Suggested formative assessments increasingly weighted toward end performance. Final Synoptic Assessment Two methods of synoptic assessment – project and presentation The work based project takes place near the end. It is a substantial piece of work typically lasting 6 months and covers the skills, knowledge and behaviours defined in the standard. The presentation covers the project problem domain, approach, outcomes and the skills, knowledge and behaviours demonstrated. Both elements are assessed in partnership by employer and university. Informs final grading Formative Module Assessments Final Synoptic Assessment

An employer led approach to creating the apprenticehips standards Mark Heholt (mark.heholt@thetechpartnership.com) and Dr Paul Thorlby (JPTHORLBY@qinetiq.com)

Cyber security roles offered by employers A general cyber security occupation/job/role taxonomy Guiding principles Relevant to employers Attractive to applicants Enduring and future proof Distinctive Strengthen UK competitiveness

Structuring a set of learning outcomes ”Cyber Security Higher Apprenticeship Skills and Learning Outcomes”, January 2014 The LO design centres on the security case; the lower LO support the ability to develop and those above the ability to apply

Cyber Security Occupation/Job/Role Taxonomy Cyber Technologist [Risk] (L4) Positioning the Level 4 apprenticeships Cyber Intrusion Analyst (L4) Cyber Technologist [Technology] (L4)

Cyber Security Occupation/Job/Role Taxonomy Positioning the Cyber Security (Level 6) Degree Apprenticeship

Mapping knowledge & skills to generic roles as rationale for the degree apprenticeship standard Business Role: Cyber Risk Management Security management standards Security policy Legal & compliance Threat vulnerability & risk analysis System modelling of risk, vulnerability & impact Relate cyber risk to the business/operational context Identify, justify, & apply appropriate mitigations & controls Business Role: Cyber Risk Research & Analysis Threat vulnerability & risk analysis System modelling of risk, vulnerability & impact Risk – cost analysis and trade-off Intelligence analysis IT Technology Role: Cyber System Analysis Technology underpinnings -Big data, Cryptography, Networks, Databases Foundations of programming/coding Computer hardware System reconnaissance Common vulnerabilities, threat & attack techniques Able to use exploits & toolkits Lawful intercept techniques Ethics & legal framework of hacking Logging and data event monitoring IT Technology Role: Cyber Incident Management Intrusion detection & response methods Intrusion response management & handling Interact with CERT & appropriate authorities Engineering Role: Cyber Deep Technology Analysis Programming & coding, low level coding Electronics, computer hardware OS fundamentals (how they are constructed & work) Malware development, ethical & legal constraints Common vulnerabilities, threat and attack techniques Algorithms & protocol analysis Complex problems & heuristic development IT Technology Role: Cyber Solution/System Architect Architecting secure systems Software development lifecycle System engineering and lifecycle Principles of secure programming Formal approaches to secure system development Common vulnerabilities, threat and attack techniques Available security technology & components

Some employers already doing cyber apprenticeships