S3: Apply Information Security Principles, for Example: Information Transfer, Deletion, Storage, Usage and Communications That May Include Using Mobile Devices
Assessment Method: Professional Discussion underpinned by a portfolio
Plain-English Explanation
S3 is about applying security best practices when handling information. This includes how you transfer, store, delete, and use data securely—whether on a computer, mobile device, or through digital communication channels.
Examples of How Apprentices Demonstrate This at Work
Encrypting files before sending them via email or using secure file-sharing platforms
Applying mailbox rules to prevent sensitive emails from being sent to the wrong recipient
Using Power Automate to create approval workflows for sharing sensitive documents
Deleting files securely in line with company retention policies
Locking screens and using strong passwords on mobile devices
Common Gaps and Misconceptions
Thinking deleting a file from a folder means it’s gone (it may still exist in backups)
Believing mobile devices don’t need the same security as desktops
Ignoring encryption for sensitive data transfers
Forgetting to follow company policies for secure disposal of data
Links to Resources and Tools
Podcast: Keeping Information Secure in a Digital World (Insert your podcast link here)
Why It Matters
Protects sensitive data from breaches and misuse
Ensures compliance with legal and organizational requirements
Maintains trust with customers and stakeholders
Portfolio Evidence Ideas
Screenshots of:
A secure file transfer process or encrypted email
A Power Automate approval flow for sensitive data
Mailbox rules for managing confidential communications
A short write-up explaining how you applied security principles in a real scenario
EPA-Style Questions
How do you ensure information is transferred securely?
Can you give an example of when you applied security principles to protect data?
Why is it important to follow secure deletion and storage practices?
Embedded Topics
Equality & Diversity: Ensuring security measures do not disadvantage any user
Sustainability: Reducing paper-based processes by using secure digital systems
British Values: Promoting responsibility and accountability in data security