Marking scheme (Ethics and professional issues)

At this strategic professional level, the requirement is unlikely to be “identify” (i.e. what are they?) but “evaluate” – the evaluation of an issue/threat matter may be two or even three marks – so you are not looking to identify 8 issues – more likely 4.

To evaluate a risk/threat you have to go beyond identifying what it is – you need to find something to say relevant to its significance – e.g. if the entity is a PiE (listed). There’s no point looking for safeguards if something is prohibited – i.e. no safeguards could reduce the threat to an acceptable level (see Example 1 on page 27 of the notes). Nor does a threat which is evaluated as “low” need safeguards.

So although it might be relevant to say that although there is such-and-such a threat it can be reduced to an acceptable by such-and-such a safeguard, that is not a standard approach that can be applied to all threats.

You are most welcome!