INFORMATION SYSTEMS EXAMINATIONS BOARD

Transcription

1 INFORMATION SYSTEMS EXAMINATIONS BOARD Certificate in Data Protection Guidelines and Syllabus for Candidates March

2 C O N T E N T S 1 Introduction to ISEB 1.1 Background 1.2 The Data Protection Qualification 1.3 The Objectives of the Qualification 1.4 The Syllabus 2 Candidates 2.1 Entry to Accredited Courses 2.2 Format and Duration of the Course 2.3 Course Attendance 2.4 Eligibility for the Examination 2.5 Format and Duration of the Examination 2.6 Candidate Registration 2.7 General Arrangements for the Examination 2.8 Examination Dates 2.9 Marking and Notification of the Examination Results 2.10 Issue of Certificates 2.11 Candidate Feedback 2.12 Copyright of Examination Papers 2.13 Sample Paper 2.14 Appeals 2.15 Examination Fees 2.16 Special Needs 2.17 Complaints 2.18 Candidate Conduct 2.19 Examination Statistics 3 Contacts and Further Information - 2 -

3 PREFACE Introduction to ISEB The Information Systems Examinations Board (ISEB) is a division of the British Computer Society. ISEB was created in 1990 from the Systems Analysis Examinations Board (which was set up in 1967). ISEB administers examinations and issues certificates in a variety of subjects in the field of information systems engineering. A list of qualifications can be obtained from ISEB ISEB has the provision of a prestigious professional qualification as its main emphasis for each subject. To achieve this, ISEB adopts a two-fold approach to quality; firstly, the carefully considered accreditation of trainers, and secondly, the examination of candidates. Organisations wishing to offer courses leading to certificates have to be accredited by ISEB. There are no restrictions as to the nature of establishments which may apply for accreditation: education and training bodies, public and private, large or small are all eligible. Once accredited, Training Providers are monitored in a variety of ways to ensure standards are maintained. The procedures for the examination of candidates are designed to enable candidates to demonstrate their individual competence and, if successful, to obtain a practical professional qualification. The form of examination varies from award to award and may be composed of a course assessment, a written examination and/or an oral examination. Some awards are gained by means of direct entry to the examination process by an individual who has appropriate past experience in the relevant field, or, who has passed other examinations that qualify the candidate for exemption from part of the process. Accreditation is granted to a Training Provider for one or more course formats, with agreed course timetable(s). A Training Provider will be accredited by ISEB if they have shown the Certificate Panel that they have the ability to teach the appropriate syllabus material, using competent staff, good materials and an appropriate training environment. Details A list of the accredited Training Providers can be obtained from the web site. The Training Providers can give dates for planned courses Training courses will not normally involve less than 40 hours teaching/study time (including the examination assessment). 2. The Data Protection Qualification The ISEB Certificate in Data Protection has been developed to provide candidates with an industry recognised qualification that incorporates the latest changes and updates outlined in the Data Protection Act of It provides an entry point qualification for those with data protection responsibilities, as well as providing an effective conversion route for those needing to update their knowledge of and practice under the 1984 Data Protection Act. It also provides excellent training for those in other departments, such as personnel and marketing, where data protection issues are particularly important

4 2.1 Objectives of the Qualifications The Certificate meets the needs of everyone working with data, providing them with the ability to understand the wider issues of data protection. It incorporates the following key benefits: The syllabus acts as the benchmark for competence, ability and performance in data protection. The course is designed and driven by professional managers involved with data management. The contents cover 'softer' skills as well as technical competencies. The course is updated on a regular basis to coincide with the latest Government legislation. 3. Syllabus The syllabus comprises five parts: 1. Context - this will address the origins of and reasons for the Act together with consideration of privacy in general. (Total 1 hour coursework) 2. Law Data Protection Act - this will address the main concepts and elements of the Act and subordinate legislation. 3. Law Telecommunications Regulations - this will address the main concepts and elements of the Telecommunications Regulations and their relationship to the Act. 4. Law Associated Legislation - this will address other associated legislation. (Total 21 hours coursework) 5. Application - this will consider how compliance is achieved and how the Act works in practice

5 2 Candidates 2.1 Entry to the Course The qualifications are aimed at those practitioners working with, or responsible for Data Protection. No formal entry requirements will be required for this qualification. Although attendance to an ISEB accredited training course is strongly recommended it is not mandatory. 2.2 Format and Duration of the Course The training may be offered in a variety of formats, but is most commonly available as a one-week residential course covering a minimum of forty hours tuition. 2.3 Course Attendance The Panel approved the proposal that if a candidate were to be taken ill during a training course, they must have attended a minimum of 70% of the training course in order to be eligible to take the examination 2.4 Eligibility for the Examination In order to register for the examination candidates should normally have attended an ISEB accredited training course. However the Panel is willing to consider applications for exemption from the taught component of the process. Applications for exemption from accredited training must include documented evidence of other courses attended. In particular, information must be supplied as to the topics covered in the courses and the length of time devoted to individual subjects. This must correspond to at least 70% of the ISEB syllabus in terms of both topic and weighting. ISEB charge a fee for the review of this exemption. 2.5 Format and Duration of the Examination The examination will consist of three distinct sections and candidates will be given three hours to complete the paper. The examination is closed book meaning that no external material may be referred to by candidates. The pass mark is set at 50% of the total marks available. Section A will consist of 20 compulsory multiple-choice questions, each worth 1 mark. All questions must be attempted. The candidate will be asked questions on part 2C Law of the Data Protection. It is recommended that the candidate will take 30 minutes on this section. Section B will consist of 8 compulsory short answer questions, each worth 5 marks. These questions will be based on Part 2 Law and/or combined Part 2 Law and Part 3 Application of the DP Syllabus. All questions must be attempted. It is recommended that the candidate spend an hour on this section. Section C will give the candidate the choice of 4 questions out of 6. Each question - 5 -

6 will be worth 10 marks and will ask for an essay style answer based on combined Part 2 Law and Part 3 Application of the DP Syllabus. Questions will be phrased in such a way that candidates will be encouraged to draw upon their own work experiences or their general knowledge as members of society in addition to the specialist knowledge gained through the course on Data Protection. It is recommended that the candidate spend 90 minutes on this section. Candidates must write their answers legibly with particular emphasis being paid to sections B & C. Poorly presented papers will not be marked. Marks will be deducted by the examiners for significant inaccuracies or significant irrelevance when answering the questions. 2.6 Candidate Registration Those candidates applying via an accredited course will obtain and submit their registration form via their Training Provider. Those applying by a direct route should obtain the registration form from the BCS website, ( the form can be found under Exam Dates complete and return together with their examination fee to the ISEB Examinations Officer at least three weeks before the examination date. A fee is applicable for considering Direct Entry applications in addition to the examination fee. Current ISEB fee details can be obtained from the ISEB website; Please note that places for the Direct/Public Examinations are limited and the bookings work on a first come first served basis. 2.7 General Arrangements for the Examination ISEB will arrange for invigilators to attend the examination centres to invigilate the exams. ISEB provides secure delivery of the examination papers and answer booklets to and from the examination venues. The examination papers and answer booklets are confidential to, and remain the property of ISEB. All examination papers and answer booklets are to be retained within the examination room(s), and returned to ISEB and all copies are to be accounted for by the invigilator. 2.8 Examination Dates The examination dates are set for four times per year and are normally arranged by the Training Provider shortly after the conclusion of the course. In addition, ISEB will normally also arrange four central examinations per year. Details may be obtained from ISEB. Candidates may take a public examination sitting; these are generally held at the BCS Offices, 5 Southampton Street, London, WC2E 7HA on a quarterly basis. Please contact ISEB for confirmation of venue location on your chosen date. Any candidates wishing to take any of the above public date examinations should download and complete the registration form and return this and the exam payment by cheque made payable to The British Computer Society to the Data Protection Examinations Officer at least three weeks prior to the examination date. It is also possible to make payments via credit card by contacting ISEB direct

7 The preferred standard date should also be noted at the top of the form, although this will be subject to availability. Please visit the ISEB website for further details Marking of Examination Papers & Notification of Written Examination Results In the case of the multiple-choice part of the examination, papers are passed through an optical mark reader. The narrative and essay style questions are double marked by ISEB appointed examiners. Scripts will be marked by the ISEB Data Protection Panel. Results will take the form of one of the following outcomes: a) Distinction awarded to candidates who achieve 80% or more - A certificate will be awarded b) Pass awarded to candidates who achieve 50% or more - A certificate will be awarded c) Fail - No certificate will be awarded Examination results will be sent direct to candidates twelve weeks after the date of the examination. Under no circumstances will results be given over the telephone or by facsimile. A copy of the relevant results will also be sent to Training Providers Issue of Certificates Certificates will be sent directly to candidates. Certificates will not be issued until the relevant examination fees have been paid Candidate Feedback Brief diagnostic feedback will be available on request who were unsuccessful on taking the written examination for the certificate. No feedback is available for candidates who passed the examination. Candidates should request feedback within one calendar month of the date of the release of the relevant examination result. 2,12 Copyright of Examination Papers The Examination Papers and Answer Scripts are confidential to, and remain the property of ISEB. All Examination Papers and Answer Scripts are to be retained within Examination Rooms, and returned to ISEB and all copies are to be accounted for Sample Examination Papers A sample paper is available as Appendix A of this document

8 2.14 Appeals Should a candidate wish to lodge a complaint about the examination itself or their result, they should first consult the ISEB Appeals procedure, then: Provide a written request (including candidate number, full title of examination and date taken) giving reasons for the appeal to the ISEB Examination Manager not later than 4 weeks after the release of examination results. Enclose documentary evidence where appropriate (e.g. medical report). Enclose the correct fee. This will be refunded in the event that the appeal is upheld. The decision of ISEB is final Examination Entry Fees: Accredited Training Providers may include the examination fee as part of their charges for attendance on the course. A schedule of current fees may be obtained from the ISEB website Special Needs ISEB endeavours to accommodate the needs of candidates with a particular examination requirement, according to individual circumstances, ensuring such candidates are not disadvantaged or advantaged in relation to other candidates and that certificates accurately reflect candidate attainment. If you require special arrangements please contact your Training Provider and advise them of your requirements. The Training Provider will then contact us to make the necessary arrangements for the examination. The request for any reasonable adjustments in relation to the examination must be made in writing to ISEB (with supporting documentation) a minimum of four weeks prior to the examination date. Full details on the policy for special needs can be obtained from the Training Provider or ISEB s website Complaints Any complaints regarding ISEB operational matters should be addressed to the ISEB Examinations Manager Steph Venn at stef.venn@hq.bcs.org.uk. Any complaints regarding ISEB accreditation matters should be addressed to the ISEB Accreditation Manager Rachael Kavanagh rachael.kavanagh@hq.bcs.org.uk Candidate Conduct If ISEB has sufficient evidence to demonstrate that a particular candidate s behaviour is adversely affecting any remaining candidates during an assignment/examination, ISEB reserve the right to disqualify them and withhold their result. The candidate may then reapply and re-sit the examination at ISEB s discretion. A further examination fee will be applicable Examination Statistics - 8 -

9 ISEB will issue examination statistics showing the overall pass rate (updated each financial year). This information will be placed on the ISEB web site

10 3 Contact Details and Further Information Examination queries should be directed to the Data Protection Officer at Postal address: ISEB (Data Protection) Ground Floor, Block D North Star House North Star Avenue Swindon Wiltshire SN2 1FA Detailed syllabus information, and information on accredited Training Providers, exam dates and pass rates can be found on the ISEB web site ( ). This also contains information about other ISEB qualifications

11 Information Systems Examinations Board Certificate in Data Protection

12 SPECIMEN PAPER Section A Answer all of the 20 questions each question carries 1 mark Section B Answer all of the 8 questions each question carries 5 marks Please write your answers legibly; poorly presented papers will not be marked. Copying of this paper is expressly forbidden without the direct approval of ISEB

13 Section A Multiple-choice - 1 mark each Answer all questions NOTE: Choose only one answer per question 1 Which of the following is a data subject? a) Martin Luther King b) the BBC c) Tony Blair d) Homer Simpson 2 What is the minimum age for subject access in England & Wales? a) 11 b) 16 c) 21 d) none of the above 3 Which of the following is a disclosure? a) a pharmacist telling her neighbour about a prescription she gave the local vicar b) a bank statement found in the street c) Both d) Neither 4 Is an employee of the data controller a) a third party? b) a processor? c) a recipient? d) none of the above? Questions 5-20 consist of similar style questions

14 Section B Short bullet point type answers Answer all questions 1 Do parents have a right to see information held about their children by an organisation. Give reasons for your answer 5 marks 2 Can the police request and expect to receive information from an organisation about a suspect in a burglary. What procedures should be followed in such a case? 5 marks 3 The Commissioner has the power to fund private proceedings by individuals in a limited number of cases. Describe the circumstances in which the Commissioner can give such assistance and whether there are any restrictions on her powers. 5 marks Questions 4-8 consist of similar style questions

15 Section C Essay style answers Answer 4 of the following questions 1 A company implements a bespoke computer system which is networked throughout the organisation. The system incorporates a word processing module. X tells his line manager that Y is keeping detrimental comments about other staff in the word processing module, but the file has a password known only to Y. The line manager contacts the company's data protection officer for advice. What are the data protection implications and what advice would you expect the data protection officer to give? 10 marks Questions 2-6 consist of similar style questions END OF PAPER