Confirm the route before you plan.
Enquiry and guidance only. Confirm the HEP, mandated BSc, integrated assessment model, secure lab/evidence controls, approval, assessor competence, capacity, fees and dates.
Checked 20 October 2026: version 1.1 remains approved while revision is underway; the current record gives no replacement date. The mandated BSc and HE partnership remain essential.
View the official standard and assessment plan ↗What this occupation demonstrates
Cyber security technical professionals lead work that identifies, designs for, monitors and responds to security risk. The standard combines deep technical competence with legal, ethical, business and leadership judgement and mandates a BSc (Hons) Cyber Security Technical Professional degree. Procurement must therefore establish the higher-education, degree and integrated assessment model before any occupational service promise. Practice must remain inside authorised environments: no learner should probe a system, collect threat data or share security artefacts without documented permission.
Higher education providers and employers exploring an integrated Level 6 cyber-security degree partnership.
- Analyse cyber risk and justify proportionate technical and organisational controls.
- Design, test and operate secure systems within legal, ethical and business constraints.
- Lead incident, assurance and stakeholder decisions with clear evidence and accountability.
Prepare for a fair assessment
Use the applicable plan as your starting point. The following are preparation prompts, rather than additional gateway requirements or a substitute for the assessment specification.
- Agree the HEP, mandated BSc award, student registration, integrated EPA and decision rights before discussing delivery. The standard is under revision but has no implementation date shown.
- Use controlled labs or explicitly authorised employer environments. Do not use public targets, production credentials, exploit code, vulnerability details or incident evidence in Avenor's public tools.
- Prepare a portfolio that separates the apprentice's decisions from team operations and preserves risk, assurance, testing and incident reasoning without exposing defensive weaknesses.
Plan a useful handover.
Treat this as a degree and high-trust cyber partnership. Record the HEP, degree award, registration, curriculum ownership, practical-test environment, technical-discussion evidence, moderation, appeals and continuity. The employer must separately approve all system access, testing and incident evidence. Ask how assessors remain current across networks, software, risk and incident domains without rewarding a single tool stack. Require explicit conflicts, secure evidence, vulnerability disclosure and breach-response arrangements before an apprentice's portfolio is transferred.
A realistic evidence conversation
Illustrative, not prescribed: in an isolated lab, an apprentice assesses a synthetic service, creates a threat model, identifies a weakness, proposes controls, tests the change and records residual risk for a fictional owner. The portfolio contains sanitised architecture and decision evidence, no live identifiers or reusable credentials. Use the case to make partners explain who controls the lab, who judges degree and occupational outcomes, how practical outputs are secured and how unauthorised findings are escalated.
Handover checks
- HEP confirms the mandated BSc, registration and integrated assessment responsibilities.
- Employer security owner documents authority, lab scope, evidence classification and incident escalation.
- Partnership owner records moderation, conflicts, appeals, retention and revision monitoring.
Questions to ask before buying
- What verified HEP and degree arrangement supports ST0409 version 1.1?
- How are practical-test systems isolated and sensitive security outputs retained and reviewed?
- How will revision changes be monitored without disrupting registered cohorts?
Turn preparation into a working plan.
Use these free tools for this occupation’s preparation tasks. Keep confidential employer and apprentice information out of browser worksheets; the applicable plan and written agreement take priority.
Check cyber partnership readiness
Review HEP, lab, authority, security and revision responsibilities.
Map sanitised cyber evidence
Identify practical and discussion gaps without exposing vulnerabilities.
Practise security decisions
Rehearse authorised risk, architecture and incident reasoning.
Think it through.
Explain your decisions.
These are original learning prompts. They are not live assessment questions, an official mock paper or a prediction of your result.
1. A critical service cannot apply a security update immediately. How would you advise the owner?
Explore a response structure
Define exposure and business impact, validate affected assets, compare compensating controls, set a time-bound decision and monitoring plan, and record risk acceptance by the authorised owner.
2. A security test finds a serious weakness outside the agreed scope. What happens next?
Explore a response structure
Stop activity that could exceed authority, preserve minimal evidence, follow the agreed escalation route and avoid further exploitation. Explain legal, safety and disclosure considerations.
3. How would you defend a security architecture to technical and business reviewers?
Explore a response structure
Connect threats and assets to controls, residual risk, usability, cost and operational ownership. Identify assumptions and the evidence that would cause the design to change.
Questions about this standard
Which methods apply to version 1.1?
The official plan specifies a practical test and a technical discussion informed by a portfolio. Both must be passed. This integrated degree route also requires the mandated BSc arrangement.
Can learners test any internet-facing system for practice?
No. Testing requires explicit scope and authority. Use controlled labs or approved employer environments and keep sensitive artefacts out of public tools.
Can Avenor provide the degree independently?
No such claim is made. The HEP, degree-awarding, registration and integrated assessment partnership must be verified before any offer.
Sources and review
Guide updated 20 October 2026; official source reviewed 20 October 2026. Standard titles, versions and requirements can change. Always check the linked official record for the apprentice’s start date.
Skills England: Cyber Security Technical Professional (Integrated Degree) ↗