IT Security for Users
This element covers the fundamental practices users must adopt to protect IT systems and data from security threats. Learners will explore practical methods such as password management, physical security measures, and safe online behaviours, ensuring they can apply these in real-world digital environments to minimize risks.
Assessment criteria
Topic Overview
The SQA Level 1 Certificate for IT User Skills (ITQ) is a foundational qualification designed to equip learners with essential digital skills for the modern workplace and everyday life. It covers core areas such as word processing, spreadsheets, email, internet safety, and file management. This qualification is part of the Qualifications Scotland Occupational Framework and is widely recognised by employers and further education providers as evidence of basic IT competency.
This certificate matters because digital literacy is now a fundamental requirement in almost every job role. By completing this course, you will gain practical, hands-on experience with common software applications and develop the confidence to use technology effectively. The skills you learn here form the building blocks for more advanced IT qualifications and are directly applicable to real-world tasks like creating documents, analysing data, and communicating online.
Within the wider subject of Digital Skills & IT, this Level 1 certificate serves as an entry point. It aligns with the UK government's digital skills agenda and provides a stepping stone to higher-level ITQ awards or other qualifications such as National Progression Awards in Digital Literacy. The course is structured around bite-sized units, allowing you to focus on specific areas of interest or need.
Key Concepts
Core ideas you must understand for this topic
- →File management: organising, saving, and retrieving files using folders and appropriate naming conventions.
- →Word processing: creating, formatting, and editing documents, including text alignment, bullet points, and tables.
- →Spreadsheets: entering data, using basic formulas (SUM, AVERAGE), and creating simple charts.
- →Email and online communication: sending, receiving, and organising emails, attaching files, and understanding netiquette.
- →Internet safety: recognising phishing attempts, creating strong passwords, and understanding data protection principles.
Learning Objectives
What you need to know and understand
- Select and use appropriate methods to minimise security risk to IT systems and data
Assessment Criteria
Key criteria assessors look for in your portfolio
- Award credit for demonstrating the creation and use of strong passwords that meet complexity requirements (e.g., length, character mix).
- Award credit for evidence of locking a workstation when unattended, including mention of physical security practices.
- Award credit for correctly identifying and describing at least two methods to protect data from malware (e.g., antivirus software, regular scans).
- Award credit for showing an understanding of the importance of backing up data and describing a basic backup routine.
- Award credit for explaining safe email and internet practices, such as not opening suspicious attachments or links.
Assessment Guidance
Guidance for achieving higher grades
- 💡When completing practical assessments, narrate your actions clearly to show the assessor your decision-making process for security choices.
- 💡In written tasks, use real-life examples to illustrate security risks and solutions, such as describing a phishing email you might encounter.
- 💡Always link your answers back to the learning outcome by explicitly stating how a method minimizes a specific security risk.
- 💡For performance-based evidence, provide screenshots or logs of activities like password changes, software updates, or backup confirmations.
- 💡Pay close attention to the assessment criteria for each unit. For example, in word processing, you may need to demonstrate inserting headers and footers or using spell check. Practice these specific skills.
- 💡In the spreadsheet unit, ensure you can create a chart from data and label axes correctly. Examiners look for accurate data entry and appropriate chart types (e.g., bar chart for comparisons).
- 💡For internet safety, be prepared to explain why you should not share passwords and how to identify a secure website (https). Use real-world examples in your answers to show understanding.
Common Mistakes
Common errors to avoid in your coursework
- Using personal information (e.g., pet names, birthdays) as passwords, making them easy to guess.
- Sharing passwords with colleagues or writing them down in plain sight.
- Leaving devices logged in and unattended, assuming physical security is not part of IT security.
- Clicking on links or downloading attachments from unknown sources without checking their legitimacy.
- Assuming that antivirus software alone provides complete protection, ignoring the need for regular updates and user vigilance.
- Failing to back up data regularly, underestimating the risk of data loss or ransomware.
- Misconception: 'I don't need to learn file management because I can just search for my files.' Correction: Effective file management saves time and prevents data loss. Searching can be slow and unreliable if files are not named or stored logically.
- Misconception: 'Spreadsheets are just for accountants.' Correction: Spreadsheets are used in many roles for tasks like budgeting, tracking inventory, and analysing survey results. Basic skills are valuable across all sectors.
- Misconception: 'If an email looks official, it must be safe.' Correction: Phishing emails often mimic legitimate organisations. Always check the sender's address, look for spelling errors, and never click suspicious links.
Frequently Asked Questions
Common questions students ask about this topic
Pass / Merit / Distinction Evidence Checklist
How your portfolio evidence is graded for QUALIFICATIONS SCOTLAND IT Security for Users
Every vocational unit is marked against named criteria rather than an exam percentage. Your tutor's brief lists the exact codes for this unit — here is what each band is asking you to do.
Demonstrate baseline knowledge, accurate terminology, and core practical application.
Provide detailed analysis, structured explanations, and clear workplace reasoning.
Deliver thorough evaluation, original problem solving, and fully justified recommendations.
Before You Start
Prior knowledge that will help with this topic
- •Basic familiarity with using a computer, mouse, and keyboard.
- •Ability to open and close applications and navigate the desktop or start menu.
- •No formal IT qualifications are required, but a willingness to learn and practice is essential.
Coursework AI Review
Paste your assignment brief and check your draft against its P/M/D criteria
Key Terminology
Essential terms to know
- Select and use appropriate methods to minimise security risk to IT systems and data
Ready to learn?
AI-powered learning tailored to this unit