1. Cyber Apprenticeships & the Cyber Security Technical Professional Degree Apprenticeship Mark Heholt and Dr Paul Thorlby

2. What is an apprenticeship?
A paid job, minimum hourly rate:
Under age 18: £4.00
18 – 20: £5.55
21+: £6.95
But average pay in STEM much higher (typically £18k plus)
Lasts at least 12 months
Can be fixed or permanent contract (90% of apprentices stay with the employer on completion)
Apprentice spends about 80% of time learning on the job. Minimum 20% is off- the-job (at a training provider / FE college / university)
Government (through the Skills Funding Agency) subsidises the cost of the training

3. Benefits of taking digital apprentices
Attract new talent: recruit and develop ambitious school leavers with the skills and experience to excel in your workplace Increase retention and productivity: apprentices can help support existing staff to develop and progress Tailor to your business and roles: from online training to part-time study, a programme can be created around your training needs Cost-effective: the average apprentice increases business productivity by £214 per week Bring fresh ideas: having an apprentice who is learning about the industry can give a unique insight on projects Learning at all levels: from level 2 to MSc, apprenticeships can train learners of all levels and abilities Support from high-quality training providers: accredited training providers can help employers through the entire process from hiring to completion

4. Map of Digital Apprenticeship Standards
Generalist
Specialist a
Cyber Intru
sion
Analyst
Tech and Digital
Apprenticeship Standards
Each tier represents a set of job roles
available (see over) and also gives the
opportunity to progress onto a higher
standard
upon completion
Software
Developer
Data Analyst
BSc
Digital
&
Technology
Solutions
Professional
Network
Engineer
Unified
Communications
Trouble shooter
Cyber Security
Technologist
Software Tester
Contact
Centre
Operator
Digital Marketer So
ftware
Development
Technician
IT Technical
Sales
person
Infrastructure
Cyber
Security
Technical
MSc
Specialist IT
Business
Support
Administrator
Network Cabling
Installer
Marketer
BSc Digital User
Experience (UX) D
igital
IT Solutions
Specialist
Indicates standards in development

5. Typical job titles for each Apprenticeship Standard (examples)
IT Support Administrator
Digital Contact Centre Operator
Cyber Security Technologist
IT Business Analyst
IT Helpdesk Support
Contact Centre Agent
Cyber Operations Manager
Business Systems Analyst
IT Administrator
Digital Service Agent
Security Architect
Website Administrator
Call Centre Operator
Penetration Tester
Business Analyst
Customer Service Advisor
Security Risk Analyst
Digital Administrator
BSc Cyber Security Technical Professional
Systems Operator
Network Cabling Installer
Cyber Intrusion Analyst
Cyber Risk Manager
IT Office Manager
Data Cabling Installer
Secure Operations Centre (SOC) Analyst
Cyber Systems Analyst
Administrator
Data Cantre Technician
Intrusion Analyst
Cyber Solutions Architect
Installation Technician
Network Intrusion Analyst
Cyber Deep Techncial Analyst
Unified Communications Technician
Incident Response Centre (IRC) Analyst
Software Development Technician
BSc Digital User Experience (UX) Professional
Telecommunications Technician
Software Technician
Data Analyst
UX Researcher
Software Engineer
UX Designer
IT Technical Salesperson
Software Diagnostic Tester
Data Manager
UX Developer
Sales Associate
Data Scientist
UI Designer
Technical Telesales
Network Engineer
Data Modeller
Front End Designer
Junior Account Manager
Network Technician
Software Tester
BSc Digital & Technology Solutions Professional
Digital Marketer
Systems Engineer
Social Media Executive
Network Administrator
Software Test Analyst
Digital Marketing Assistant
Cyber Professional
Digital Marketing Technologist
Unified Communications Trouble Shooter
Software Developer
Operations Management Professional
Campaign Executive
Unified Communications Desk Engineer
Web Developer
Service Management Professional
Unified Communications Field Engineer
Infrastructure Technician
Voice Field Engineer
Applications Developer
MSc Digital & Technology Solutions Specialist
Help Desk Technician
Microsoft Consultant
Software Engineering Specialist
First Line Support
IT Solutions Technician
Business and Enterprise Architect Specialist
Second Line Support
Cyber Security Technology Specialist
Network Support
Web Content Manager
Operations Management Specialist
IT/Digital Futures Management Specialist

6. Digital Industries Apprenticeships: current position, November 2016
Standard
Status
Typical duration
Current funding band and max value
Proposed new funding band and max value from April 2017
Software Developer – L4
Updated standard approved and published
24 months
Band 5 £27k
Band 12 £18k
Network Engineer – L4
Updated standard approved and published - without BCS certifications
Band 5 £27k
Band 12 £18k
Infrastructure Technician – L3
Published
12 months
Band 11 £15k
Digital Marketer – L3
18 months
Band 3 £9k
Band 9 £9k
Cyber Intrusion Analyst – L4
Unified Communications Trouble Shooter – L4
Band12 £18k
Data Analyst – L4
Software Tester – L4
Cyber Security Technologist – L4
BSc Digital & Technology Solutions Professional - L6
Approved and published – approved for new specialisms to be added
36 months
Band 15 £27k
IT Technical Salesperson – L3
Approved and published – funding appeal successful and moved from Band 2 to Band 4
Band 4 £12
Yet to be proposed

7. Current funding band and max value
Standard
Status
Typical duration
Current funding band and max value
Proposed new funding band and max value from April 2017
Software Development Technician – L3
Standard approved and published. Assessment Plan being held until external QA model inserted
18 months
Band 5 £27k
TBC
Unified Communications Technician – L3
Standard approved and published. Assessment Plan being held until external QA model inserted
24 – 30 months.
Digital Contact Centre Operator – L3
Developed and rejected. New EOI submitted. EOI rejected
Not allocated
TBD
“IT Generalist” – L2/3
In development
IT Business Analyst – L4
Standard and assessment plan approved, including external QA, subject to a few changes. Allocated Band 4 – employers likely to appeal
Digital Business Administrator – L2/3
BSc Cyber Security Technical Professional - L6
3 – 5 years
BSc User Experience (UX) Professional – L6
EOI approved
MSc Digital & Technology Solutions Specialist – L7
Network Cabling Installer – L3

8. Funding: how it works under the Apprenticeship Levy
Levy payers (pay bill over £3m): pay 0.5% over £3m:
- Levy money available to pay for the training (within the allocated funding band) until it is all used up
Non-Levy payers (pay bill less than £3m) or Levy payers whose funding has all been used up:
- Employer pays 10% of the cost of the training (Government pays 90% within allocated funding band)

9. Funding limits– how they work
Need to format with headings
WITHIN THE FUNDING BAND LIMIT
OVER THE FUNDING BAND LIMIT
Funding limits– how they work
Example funding band limit = £6,000
Price you negotiate with your training provider = £5,000
The cost is within the funding band limit
Example funding band limit = £6,000
Price you negotiate with your training provider = £7,500
The cost is above the funding band limit
With enough funding in your account
Without enough funding in your account
With enough funding in your account
Without enough funding in your account
£5,000 will be deducted from your digital account over the life of the apprenticeship.
If you have £0 in your account Gov will pay 90% (£4,500) and you will need to pay 10% (£500).
If you have digital funds available, these will be used first, and then Gov will pay 90% of the remaining costs, and you will pay 10%.
£6,000 will be deducted from your digital account over the life of the apprenticeship.
You will be responsible for paying £1,500. This payment can’t be made from your digital account
If you have £0 in your account Gov will pay 90% (£5,400) and you will need to pay 10% (£600). This is the maximum payable within the limit of the band.
You will also be responsible for paying the additional £1,500. This payment can’t be made from your digital account

10. Additional funding support
Funding for year olds
Gov will pay £1,000 to employers, and a further £1,000 to training providers if they train a year old apprentice.
Disadvantaged young people
Gov will pay £1,000 to employers, and a further £1,000 to training providers if they train year olds leaving care or who have a Local Authority Education and Healthcare Plan.
.  
Funding for additional learning support
Gov will training providers up to £150 a month to support learners with special needs.
Funding for English and Maths training 
Gov will pay training providers £471 to help apprentices gain the minimum standard of Level 2 in English the same amount to reach Level 2 in and maths (if not already attained).

11. Documents
The Standard: published by DfE. It sets out minimum and mandatory requirements The Occupational Brief: NOT published by DfE. It sets out detail of the Standard (only available to accredited universities for degree apprenticeships) The Assessment Plan: published by DfE. It sets out how Assessment Organisations will undertake end point assessment and award a grade

12. On-programme assessment
The focus is on end-point assessment, but employers wanted:
knowledge to be tested during the apprenticeship
to include vendor qualifications (in some cases)
to give employers choice
This is why employers have defined on-programme assessment.

13. On-programme assessment con’t
Any Ofqual registered organisation can develop and deliver the Knowledge Modules The knowledge modules/vendor qualifications MUST be passed before end point assessment takes place

14. End-Point Assessment End Point Assessment is made up of four things
a summative portfolio: evidence of best work during the apprenticeship
a synoptic project: undertaken in controlled environment
an employer reference: doesn’t count toward the grade
an interview: a structured, exploratory discussion with the independent assessor
NOTE: for degree apprenticeships, the assessment is done by the university and the grades are as for standard degrees.

15. Interview Synoptic Project Summative Portfolio Employer Reference
Grading Decision

16. Assessment and Grading: who does it (non-degree apprenticeships)?
Any Ofqual registered Awarding Organisation can develop and offer the Knowledge Modules Any organisation on the SFA Register of Assessment Organisations – for that Standard, can undertake end-point assessment and grading In both cases, their approach must satisfy the employers specification

17. Assessment and grading for a degree apprenticeship
External Examiners
In-course module assessment.
Range of modules to develop skills, knowledge and behaviours progressively against the standard.
Suggested formative assessments increasingly weighted toward end performance.
Final Synoptic Assessment
Two methods of synoptic assessment – project and presentation
The work based project takes place near the end. It is a substantial piece of work typically lasting 6 months and covers the skills, knowledge and behaviours defined in the standard.
The presentation covers the project problem domain, approach, outcomes and the skills, knowledge and behaviours demonstrated.
Both elements are assessed in partnership by employer and university.
Informs final grading
Formative Module Assessments
Final Synoptic
Assessment

18. An employer led approach to creating the apprenticehips standards Mark Heholt and Dr Paul Thorlby

19. Cyber security roles offered by employers A general cyber security occupation/job/role taxonomy
Guiding principles
Relevant to employers
Attractive to applicants
Enduring and future proof
Distinctive
Strengthen UK competitiveness

20. Structuring a set of learning outcomes ”Cyber Security Higher Apprenticeship Skills and Learning Outcomes”, January 2014
The LO design centres on the security case; the lower LO support the ability to develop and those above the ability to apply

21. Cyber Security Occupation/Job/Role Taxonomy
Cyber Technologist [Risk] (L4)
Positioning the Level 4 apprenticeships
Cyber Intrusion Analyst (L4)
Cyber Technologist [Technology] (L4)

22. Cyber Security Occupation/Job/Role Taxonomy
Positioning the Cyber Security (Level 6) Degree Apprenticeship

23. Mapping knowledge & skills to generic roles as rationale for the degree apprenticeship standard
Business Role: Cyber Risk Management
Security management standards
Security policy
Legal & compliance
Threat vulnerability & risk analysis
System modelling of risk, vulnerability & impact
Relate cyber risk to the business/operational context
Identify, justify, & apply appropriate mitigations & controls
Business Role: Cyber Risk Research & Analysis
Threat vulnerability & risk analysis
System modelling of risk, vulnerability & impact
Risk – cost analysis and trade-off
Intelligence analysis
IT Technology Role: Cyber System Analysis
Technology underpinnings
-Big data, Cryptography, Networks, Databases
Foundations of programming/coding
Computer hardware
System reconnaissance
Common vulnerabilities, threat & attack techniques
Able to use exploits & toolkits
Lawful intercept techniques
Ethics & legal framework of hacking
Logging and data event monitoring
IT Technology Role: Cyber Incident Management
Intrusion detection & response methods
Intrusion response management & handling
Interact with CERT & appropriate authorities
Engineering Role: Cyber Deep Technology Analysis
Programming & coding, low level coding
Electronics, computer hardware
OS fundamentals (how they are constructed & work)
Malware development, ethical & legal constraints
Common vulnerabilities, threat and attack techniques
Algorithms & protocol analysis
Complex problems & heuristic development
IT Technology Role: Cyber Solution/System Architect
Architecting secure systems
Software development lifecycle
System engineering and lifecycle
Principles of secure programming
Formal approaches to secure system development
Common vulnerabilities, threat and attack techniques
Available security technology & components

24. Some employers already doing cyber apprenticeships