Options at 16: the Cyber Extended Project Qualification (CyberEPQ)
- Feb 19, 2024
- 6 min read
Updated: Jul 22
During your child’s time in Year 12 and Year 13, many schools and colleges offer the Extended Project Qualification (EPQ) alongside their A level or BTEC study. The CyberEPQ has many similarities to the standard EPQ, the main difference being that it gives students the chance to gain a holistic understanding of cyber security, learn how cyber security processes work in real life, gain inside knowledge of the cyber industry, and build the confidence to pursue a career in cyber.
The structure of the CyberEPQ
Rather than completing research and a written project on any subject (as with the standard EPQ), CyberEPQ students are given the learning content through an online platform called Moodle. Moodle takes students through 10 mandatory modules in cyber, and students then complete one of three specialist modules. The modules are made up of online learning sessions, quizzes, games and further reading.
The mandatory modules are:
an introduction to cyber
history of computing and cryptography
cybercrime
risk assessment, management and governance (parts 1 and 2)
security testing and vulnerability assessment
digital forensics
incident response management
identity and access management (authentication, authorisation and accountability)
security audit, compliance and insurance
The specialist modules are:
the human aspect of cyber security
pen testing
software security and architecture
CyberEPQ students work through these modules and, on completion, reflect in a journal on what they’ve learnt, any further reading they’ve done, any problems they’ve encountered and potential solutions. This journal helps the student create a title for their written project, for example by identifying the module they enjoyed most, one they could see a potential career in, or one they wanted to explore further.
How the CyberEPQ is assessed
The CyberEPQ is accredited by the exam board City & Guilds. Students are assessed through their journal, a production log documenting their journey, a 5,000-word written project, and a presentation about their project and overall experience, including their time and project management.
The final project is marked by a supervisor before submission, after which it goes through both internal and external moderation.
Students with specific educational needs can provide an artefact alongside a written report of 1,000 words, rather than solely a written project, but this must be agreed with CIISec at the start of the course.
The benefits of completing the CyberEPQ
Similarly to the standard EPQ, the CyberEPQ is a Level 3 qualification. This is equivalent to half an A level and worth up to 28 UCAS points. This means universities often lower their A level or BTEC grade expectation if they know a student is completing the CyberEPQ alongside their other subjects, so it’s a great way for your child to boost their UCAS points. As a recognised qualification, it’s a valuable addition to your child’s UCAS application and a great talking point in personal statements, CVs and interviews.
The CyberEPQ also develops many soft study skills that help students at the next stage. It’s mainly an independent task, bridging the gap between school and college work and the next steps towards university, apprenticeships and careers.
Moodle contains a Project Writing Assistance Area that aims to promote these skills. Here, online sessions teach students about:
university-standard essay writing skills
research skills
planning, organisation and time management skills
presentation skills
referencing skills and plagiarism
how to reflect on and improve work
Why should my child be interested in cyber and the CyberEPQ?
Your child doesn’t need to be studying computer science or convinced they want a career in cyber to complete the CyberEPQ. Cyber awareness matters in all career paths for adopting safe practices. That said, around 3.5 million workers are needed in the cyber industry, a number that keeps rising because of a skills gap.
The industry is looking to diversify, and particularly encourages women, neurodiverse people, people from lower socio-economic backgrounds and people of all races to recognise there’s a much-needed place for them in a cyber career. Because of the skills gap, 15% of cyber workers earn over £100,000 a year, while also getting the opportunity to help keep the nation safe.
There are misconceptions that cyber jobs are all about technical skills, but that isn’t the case. They require problem solvers, critical thinkers, and imaginative, creative people. The CyberEPQ captures and expands all these attributes while giving students a general taste of cyber to find where their passion lies. If cyber is your child’s passion, the CyberEPQ gets them ahead of the competition and shows their commitment to a career in the industry. Even if they don’t pursue a cyber career, the skills learned will be invaluable in most, if not all, other careers.
How does the CyberEPQ enhance my child’s access to the cyber industry?
The CyberEPQ is brought to you by the Chartered Institute of Information Security (CIISec), a membership organisation that helps individuals and organisations develop capability and competency in cyber and information security. CIISec was the first cyber and information security institution to be granted Royal Charter status and is dedicated to raising standards in the profession. It’s an independent, not-for-profit body governed by its members, and the natural home for the cyber professional community at every career stage, representing over 35,000 individuals, through programmes that support development, recognition and success.
After your child completes the CyberEPQ, whatever grade they achieve, they’re eligible for a one-year free membership of CIISec. Students achieving grades A* to B can also use the post-nominals AfCIIS, helping them stand out. Membership gives access to CIISec’s Early Development Team, with connections to academic partnerships at universities and apprenticeship training providers.
Through this membership, your child also gets access to online masterclasses for continued professional development, and invitations to networking events to meet and learn from industry professionals, with support throughout their cyber career.
On completion, students can join the LinkedIn CyberEPQ Alumni page to connect with like-minded people, including those from academia and industry across the UK, and graduates in the same position or further along. This creates a community of CyberEPQ champions who learn from each other and offer a helping hand. Opportunities and news are shared there too.
As well as individual membership, CIISec has many corporate members and is working towards sustainable funding of the CyberEPQ through them, creating talent pipelines so students can gain experience straight from industry partners.
What can my child do if they’re under 16?
CIISec delivers the Headstart programme for children under 16 as an introduction to cyber. It’s best completed around age 14, before children choose their GCSE options, as it encourages them to choose computer science and STEM subjects by dispelling misconceptions and creating enjoyment and excitement. During Headstart, your child goes through all the same modules as the CyberEPQ, gaining the same knowledge and understanding. All they need to complete is a journal reflection at the end of each module; there’s no written project or presentation.
There are no time pressures with Headstart; students work at their own pace, and even in groups. They get a certificate of completion and can transfer onto the CyberEPQ when they turn 16, having already gained a head start by knowing the content and completing their journal. It’s a fantastic way to spread the workload across your child’s education, building cyber knowledge from a younger age and moving on to their next steps with that extra qualification under their belt.
CyberEPQ in summary
The CyberEPQ presents a unique opportunity for students to explore cyber security while enhancing their skills and prospects. Here’s a breakdown of the key benefits:
Holistic understanding of cyber security: a comprehensive overview covering cybercrime, risk assessment, digital forensics, incident response and more.
Specialist modules: students choose from three specialist modules to explore specific areas of interest, such as the human aspect of cyber security, pen testing, or software security and architecture.
Assessment structure: a journal, a production log, a 5,000-word written project and a presentation, developing research, time management and presentation skills.
Recognition and accreditation: accredited by City & Guilds, adding value to UCAS applications and CVs. It’s equivalent to half an A level and worth up to 28 UCAS points.
Soft skill development: alongside technical knowledge, it builds critical thinking, problem-solving, organisation and time management.
Career opportunities: the fast-growing cyber industry has significant demand for skilled professionals, and the transferable skills boost employability across sectors.
Membership benefits: a one-year free CIISec membership, with professional development resources, networking and career support.
Community engagement: the LinkedIn CyberEPQ Alumni page connects students with peers, academics and industry professionals.
Industry partnerships: CIISec works with corporate members to create talent pipelines and real-world experience.
Overall, the CyberEPQ offers a valuable pathway to develop both technical knowledge and essential skills, preparing students for success in higher education, the workforce and the dynamic field of cyber security.
To find out more about CIISec, or about the CyberEPQ and Headstart programme, visit ciisec.org and cyberepq.org.uk.
If you have specific questions about the CyberEPQ or Headstart programme, get in touch at Emily.harfield@ciisec.org or Nicky.bodily@ciisec.org.
Not sure what your teen should do after their GCSEs?
Or if you’d like a hand at every stage of their journey, join Parent Club →
Comments