Advanced digital forensic professional

This document explains the requirements for end-point assessment (EPA) for the advanced digital forensic professional apprenticeship. End-point assessment organisations (EPAOs) must follow this when designing and delivering the EPA.

Advanced digital forensic professional apprentices, their employers and training providers should read this document.

A full-time advanced digital forensic professional apprentice typically spends 36 months on-programme. The apprentice must spend at least 12 months on-programme and complete the required amount of off-the-job training in line with the apprenticeship funding rules.

The EPA should be completed within an EPA period lasting typically 6 months.

The apprentice must complete their training and meet the gateway requirements before starting their EPA. The EPA will assess occupational competence.

An approved EPAO must conduct the EPA for this apprenticeship. Employers must work with the training provider to select an approved EPAO from the apprenticeship providers and assessment register (APAR).

This EPA has 2 assessment methods.

The grades available for each assessment method are below.

Assessment method 1 - dissertation including presentation with questions:

• fail

• pass

• distinction

Assessment method 2 - professional discussion underpinned by a portfolio:

• fail

• pass

• distinction

The result from each assessment method is combined to decide the overall apprenticeship grade. The following grades are available for the apprenticeship:

• fail

• pass

• merit

• distinction

The EPA is taken in the EPA period. The EPA period starts when the EPAO confirms the gateway requirements have been met and is typically 6 months.

The EPAO should confirm the gateway requirements have been met and start the EPA as quickly as possible.

The apprentice’s employer must be content that the apprentice is occupationally competent. That is, they are deemed to be working at or above the level set out in the apprenticeship standard and ready to undertake the EPA. The employer may take advice from the apprentice's training provider, but the employer must make the decision. The apprentice will then enter the gateway.

The apprentice must meet the gateway requirements before starting their EPA.

They must:

• confirm they are ready to take the EPA
• have achieved English and mathematics qualifications in line with the apprenticeship funding rules

• submit a project brief for the dissertation including presentation with questions

• submit a portfolio of evidence for the professional discussion underpinned by a portfolio

Portfolio of evidence requirements:

The apprentice must compile a portfolio of evidence during the on-programme period of the apprenticeship. It should only contain evidence related to the KSBs that will be assessed by the professional discussion. It will typically contain 10 discrete pieces of evidence. Evidence must be mapped against the KSBs. Evidence may be used to demonstrate more than one KSB; a qualitative as opposed to quantitative approach is suggested.

Evidence sources may include:

• workplace documentation and records, for example:
• workplace policies and procedures
• witness statements
• annotated photographs
• Evidence of practical work undertaken
• video clips with a maximum total duration 10 minutes; the apprentice must be in view and identifiable

This is not a definitive list; other evidence sources can be included.

The portfolio of evidence should not include reflective accounts or any methods of self-assessment. Any employer contributions should focus on direct observation of performance, for example, witness statements, rather than opinions. The evidence provided should be valid and attributable to the apprentice; the portfolio of evidence should contain a statement from the employer and apprentice confirming this.

The EPAO should not assess the portfolio of evidence directly as it underpins the discussion. The independent assessor should review the portfolio of evidence to prepare questions for the discussion. They are not required to provide feedback after this review.

Gateway evidence must be submitted to the EPAO, along with any organisation specific policies and procedures requested by the EPAO.

The assessment methods can be delivered in any order.

The result of one assessment method does not need to be known before starting the next.

Overview

A project involves the apprentice completing a significant and defined piece of work that has a real business application and benefit. The project must meet the needs of the employer’s business and be relevant to the apprentice’s occupation and apprenticeship.

This assessment method has 2 components:

• project with a project output

• presentation with questions and answers

Together, these components give the apprentice the opportunity to demonstrate the KSBs mapped to this assessment method. They are assessed by an independent assessor.

Rationale

This assessment method is being used because:

• it allows for the assessment of KSBs that take place over a long period of time
• it allows for a broad set of KSBs to be evidence during the post-gateway period
• it assesses knowledge, skills and behaviour holistically it can produce something that is of genuine business benefit to the apprentice’s employer therefore is cost effective
• it allows the apprentice to directly demonstrate KSBs relating to communication and presentation
• it allows for the presentation of evidence and testing of responses where there are a range of potential answer
• it provides full integration of the degree
• it tests the ability to research and provide solutions to potential problems
• it is appropriate for a level 7 qualification
• it reduces over assessment
• it provides the opportunity to assess KSBs unable to be observed in the workplace as the work cycle is too long
• it provides the opportunity to demonstrate and evidence practical skills
• it tests the requirement for professionals to be at the forefront of research and development assessing the ability to utilise these techniques into the workplace
• the dissertation must be completed after gateway
• the dissertation is an assessment method therefore no further learning can be provided after gateway

Delivery

The apprentice must complete a project based on any of the following:

The continuous improvement review of a current digital forensic process, service or product to ensure it is fit for purpose and meets the current needs of the business.

The recommendation and implementation of an innovative digital forensic technique or process that would benefit across their team, department, or organisation.

Addressing an issue or concern raised through quality inspections to align practice to the regulators codes.

That includes the demonstration of practical skills.

A cross sector collaboration to address future challenges and technologies.

To ensure the project allows the apprentice to meet the KSBs mapped to this assessment method to the highest available grade, the EPAO must sign-off the project’s title and scope at the gateway to confirm it is suitable. The EPAO must refer to the grading descriptors to ensure that projects are pitched appropriately.

The project output must be in the form of dissertation.

The apprentice must start the project after the gateway. The employer should ensure the apprentice has the time and resources, within the project period, to plan and complete their project.

The apprentice may work as part of a team to complete the project, which could include internal colleagues or technical experts. The apprentice must however, complete their dissertation and presentation unaided and they must be reflective of their own role and contribution. The apprentice and their employer must confirm this when the dissertation and any presentation materials are submitted.

Component 1: A project with dissertation

The dissertation must include at least:

• introduction
• background
• aims and objectives
• research and methodology
• approach taken
• Including practical techniques utilised
• data selection, collection & pre-processing
• stakeholder engagement
• risks to consider
• outcomes
• discussion
• survey of potential alternatives
• implementation including performance metrics
• impact of the project
• business implications
• measure of success
• conclusions
• recommendations
• caveats & limitations
• statistical rigour - to include uncertainty, bias, error, caveats, limitations of data collected, research methods used, sample chosen and estimates

The dissertation must cover the use of different analytical development techniques in the workplace. The apprentice needs to explain how these techniques have identified gaps and opportunities for further analysis. How they engaged with clients, their own organisation and other interested parties and should explain their critical thinking in both their analysis and generation of their overall findings and recommendations.

The dissertation must have a word count of 8000 words. A tolerance of 10% above or below the word count is allowed at the apprentice's discretion. Appendices, references and diagrams are not included in this total. The apprentice must produce and include an appendix, showing how the output evidences the KSBs mapped to this assessment method.

The apprentice must complete and submit the dissertation and any presentation materials to the EPAO by the end of week of the EPA period.

Component 2: Presentation with questions

The presentation with questions must be structured to give the apprentice the opportunity to demonstrate the KSBs mapped to this assessment method to the highest available grade.

The apprentice must prepare and deliver a presentation to an independent assessor. After the presentation, the independent assessor must ask the apprentice questions about their project, dissertation and presentation.

The presentation should cover:

• an overview of the project
• the project scope (including key performance indicators)
• summary of actions undertaken by the apprentice
• project outcomes and how these were achieved

The presentation with questions must last 90 minutes. This will typically include a presentation of 30 minutes and questioning lasting 60 minutes. The independent assessor must use the full time available for questioning. The independent assessor can increase the time of the presentation and questioning by up to 10%. This time is to allow the apprentice to complete their last point or respond to a question if necessary.

The independent assessor must ask at least 10 questions. They must use the questions from the EPAO’s question bank or create their own questions in line with the EPAO’s training. Follow up questions are allowed where clarification is required.

The purpose of the independent assessor's questions is:

• to verify that the activity was completed by the apprentice
• to seek clarification where required
• to assess those KSBs that the apprentice did not have the opportunity to demonstrate with the dissertation, although these should be kept to a minimum
• to assess level of competence against the grading descriptors

The apprentice must submit their presentation materials to the EPAO at the same time as the dissertation - by the end of week 26 of the EPA period. The apprentice must notify the EPAO, at that point, of any technical requirements for the presentation.

During the presentation, the apprentice must have access to:

• audio-visual presentation equipment
• flip chart and writing and drawing materials
• computer
• work products
• notes
• interactive boards
• videos
• interactive demonstrations

The independent assessor must have at least 4 weeks to review the dissertation and any presentation materials, to allow them to prepare questions.

The apprentice must be given at least 2 weeks’ notice of the presentation with questions.

Assessment decision

The independent assessor must make the grading decision. They must assess the project components holistically when deciding the grade.

The independent assessor must keep accurate records of the assessment. They must record:

• the KSBs demonstrated in the dissertation and presentation with questions
• the apprentice’s answers to questions
• the grade achieved

Assessment location

The presentation with questions must take place in a suitable venue selected by the EPAO for example, the EPAO’s or employer’s premises. It should take place in a quiet room, free from distractions and influence.

The presentation with questions can be conducted by video conferencing. The EPAO must have processes in place to verify the identity of the apprentice and ensure the apprentice is not being aided.

Question and resource development

The EPAO must develop a purpose-built assessment specification and question bank. It is recommended this is done in consultation with employers of this occupation. The EPAO must maintain the security and confidentiality of EPA materials when consulting with employers. The assessment specification and question bank must be reviewed at least once a year to ensure they remain fit-for-purpose.

The assessment specification must be relevant to the occupation and demonstrate how to assess the KSBs mapped to this assessment method. The EPAO must ensure that questions are refined and developed to a high standard. The questions must be unpredictable. A question bank of sufficient size will support this.

The EPAO must ensure that the apprentice has a different set of questions in the case of re-sits or re-takes.

EPAO must produce the following materials to support the project:

• independent assessor EPA materials which include:
  • training materials
  • administration materials
  • moderation and standardisation materials
  • guidance materials
  • grading guidance
  • question bank
• EPA guidance for the apprentice and the employer

The EPAO must ensure that the EPA materials are subject to quality assurance procedures including standardisation and moderation.

Overview

In the professional discussion, an independent assessor and apprentice have a formal two-way conversation. It gives the apprentice the opportunity to demonstrate the KSBs mapped to this assessment method.

The apprentice can refer to and illustrate their answers with evidence from their portfolio of evidence.

Rationale

This assessment method is being used because:

• it assesses KSBs holistically and objectively
• it allows for the assessment of KSBs that do not occur on a predictable or regular basis
• it allows for assessment of responses where there are a range of potential answers
• it can be conducted remotely, potentially reducing cost
• it is part of the occupation to engage in detailed technical discussions and present findings and recommendations, so this assessment method mirrors day-to-day work

Delivery

The professional discussion must be structured to give the apprentice the opportunity to demonstrate the KSBs mapped to this assessment method to the highest available grade.

An independent assessor must conduct and assess the professional discussion. Questions based on the following themes:

• digital forensic science: investigation, legislation, ethics and quality assurance
• complex data capture and processing
• complex data analysis and reporting

The EPAO must give an apprentice 2 weeks' notice of the professional discussion.

The independent assessor must have at least 4 weeks to review the supporting documentation.

The apprentice must have access to their portfolio of evidence during the professional discussion.

The apprentice can refer to and illustrate their answers with evidence from their portfolio of evidence however, the portfolio of evidence is not directly assessed.

The professional discussion must last for 90 minutes. The independent assessor can increase the time of the professional discussion by up to 10%. This time is to allow the apprentice to respond to a question if necessary.

The independent assessor must ask at least 10 questions. The independent assessor must use the questions from the EPAO’s question bank or create their own questions in line with the EPAO’s training. Follow-up questions are allowed where clarification is required.

The independent assessor must make the grading decision.

The independent assessor must keep accurate records of the assessment. They must record:

• the apprentice’s answers to questions
• the KSBs demonstrated in answers to questions
• the grade achieved 

Assessment location

The professional discussion must take place in a suitable venue selected by the EPAO for example, the EPAO’s or employer’s premises.

The professional discussion can be conducted by video conferencing. The EPAO must have processes in place to verify the identity of the apprentice and ensure the apprentice is not being aided.

The professional discussion should take place in a quiet room, free from distractions and influence.

Question and resource development

The EPAO must develop a purpose-built assessment specification and question bank. It is recommended this is done in consultation with employers of this occupation. The EPAO must maintain the security and confidentiality of EPA materials when consulting with employers. The assessment specification and question bank must be reviewed at least once a year to ensure they remain fit-for-purpose.

The assessment specification must be relevant to the occupation and demonstrate how to assess the KSBs mapped to this assessment method. The EPAO must ensure that questions are refined and developed to a high standard. The questions must be unpredictable. A question bank of sufficient size will support this.

The EPAO must ensure that the apprentice has a different set of questions in the case of re-sits or re-takes.

The EPAO must produce the following materials to support the professional discussion underpinned by a portfolio:

• independent assessor assessment materials which include:
  • training materials
  • administration materials
  • moderation and standardisation materials
  • guidance materials
  • grading guidance
  • question bank
• EPA guidance for the apprentice and the employer

The EPAO must ensure that the EPA materials are subject to quality assurance procedures including standardisation and moderation.

Performance in the EPA determines the overall grade of:

• fail

• pass

• merit

• distinction

An independent assessor must individually grade the dissertation including presentation with questions and professional discussion underpinned by a portfolio in line with this EPA plan.

An independent assessor must individually grade the

• Dissertation including presentation with questions An independent assessor must individually grade the
  • Professional discussion underpinned by a portfolio

  The EPAO must combine the individual assessment method grades to determine the overall EPA grade.

  If the apprentice fails one assessment method or more, they will be awarded an overall fail.

  To achieve an overall pass, the apprentice must achieve at least a pass in all the assessment methods. All EPA methods must be passed for the EPA to be passed overall. Apprentices must gain at least a pass in all assessment methods to achieve a pass overall. Apprentices must gain at least a pass in one assessment method and a distinction in the other assessment methods to gain a merit overall. Apprentices must gain a distinction in all assessment methods to gain a distinction overall. There is equal weighting of assessment methods. Grades from individual assessment methods should be combined in the following way to determine the grade of the EPA as a whole:

  Grades from individual assessment methods must be combined in the following way to determine the grade of the EPA overall.

  Aggregation of the degree-apprenticeship

  The outcome of the EPA must be aggregated with the degree to enable the degree-apprenticeship to be awarded. Once the overall EPA grade has been determined in accordance with this EPA plan, aggregation can be achieved in a variety of ways. This will be determined during the creation of the degree-apprenticeship. Examples of how this aggregation can work include:

  • each assessment method grade, and therefore the overall EPA grade, can be converted to marks or percentages however these must be an absolute figure and not a range
  • alternatively, the overall EPA grade can be used directly

  HEPs can explore other ways of aggregating the EPA with the degree outcomes in-line with the latest IfATE degree-apprenticeship policy.

The outcome of the EPA must be aggregated with the degree to enable the degree-apprenticeship to be awarded.

Once the overall EPA grade has been determined, aggregation can be achieved in a variety of ways. This will be determined during the creation of the degree-apprenticeship. Examples of how this aggregation can work include:

• each assessment method grade, and therefore the overall EPA grade, can be converted to marks or percentages however these must be an absolute figure and not a range
• alternatively, the overall EPA grade can be used directly

HEPs can explore other ways of aggregating the EPA with the degree outcomes in line with the latest IfATE degree-apprenticeship policy

If the apprentice fails one assessment method or more, they can take a re-sit or a re-take at their employer’s discretion. The apprentice’s employer needs to agree that a re-sit or re-take is appropriate. A re-sit does not need further learning, whereas a re-take does. The apprentice should have a supportive action plan to prepare for a re-sit or a re-take.

The employer and the EPAO should agree the timescale for a re-sit or re-take. A re-sit is typically taken within 1 months of the EPA outcome notification. The timescale for a re-take is dependent on how much re-training is required and is typically taken within 6 months of the EPA outcome notification.

If the apprentice fails the project assessment method, they must amend the project output in line with the independent assessor’s feedback. The apprentice will be given 2 weeks to rework and submit the amended Dissertation.

Failed assessment methods must be re-sat or re-taken within a 6-month period from the EPA outcome notification, otherwise the entire EPA will need to be re-sat or re-taken in full.

Re-sits and re-takes are not offered to an apprentice wishing to move from pass to a higher grade.

The apprentice will get a maximum EPA grade of if pass they need to re-sit or re-take one or more assessment methods, unless the EPAO determines there are exceptional circumstances.

The EPAO must have reasonable adjustments arrangements for the EPA.

This should include:

• how an apprentice qualifies for a reasonable adjustment
• what reasonable adjustments may be made

Adjustments must maintain the validity, reliability and integrity of the EPA as outlined in this EPA plan.

Special considerations

The EPAO must have special consideration arrangements for the EPA.

This should include:

• how an apprentice qualifies for a special consideration
• what special considerations will be given

Special considerations must maintain the validity, reliability and integrity of the EPA as outlined in this EPA plan.

Internal quality assurance refers to the strategies, policies and procedures that an EPAO must have in place to ensure valid, consistent and reliable EPA decisions.

EPAOs for this EPA must adhere to the requirements within the roles and responsibilities table.

They must also appoint independent assessors who:

• have recent relevant experience of the occupation or sector to at least occupational level 7 gained in the last 2 years or significant experience of the occupation or sector

Affordability of the EPA will be aided by using at least some of the following:

• utilising digital remote platforms to conduct applicable assessment methods

• using the employer’s premises

This apprenticeship aligns with:

• The Chartered Institute of Information Security for Chartered

This apprenticeship aligns with:

• Institute of Cyber Digital Investigation Professionals for Chartered