This module is annually updated on an academic year basis and access to the module is included within your centre membership to The Exams Office

 

The content within this module covers JCQ requirements as set out in section 3 of their General Regulations for Approved Centres document and is available to all members of centre staff who access awarding bodies’ online systems 

CYBER SECURITY: ACCOUNT MANAGEMENT BEST PRACTICES

This module, comprising two units, provides staff who have responsibility for the administration or delivery of examinations with annual, up-to-date cyber security awareness training, which includes practical advice on protecting assessment systems and recognising attacks such as phishing or social engineering.

 

Content

Both units are designed to inform and measure the understanding of centre staff in relation to cyber security.

A range of videos are included within the section to further support centre staff in understanding best practice in cyber security.

Senior leaders should determine which members of centre staff should undertake this online training and assessment based upon their access to awarding bodies’ online systems.

 

Unit 1: Cyber security – Account management best practices

(Updated September 2026) Certificated training and assessment on the areas identified by JCQ as essential for managing systems and user accounts securely.

The content within this unit covers the JCQ requirements as set out in General Regulations for Approved Centres (section 3) which requires training to include:

  • The importance of creating strong, unique passwords for all accounts
  • Keeping all account details strictly confidential
  • The critical role of Multi-Factor Authentication (MFA) in protecting against unauthorised access
  • How to properly set up and use MFA for both centre and awarding bodies’ systems
  • An awareness of all types of social engineering/phishing attempts
  • The importance of staff quickly reporting any suspicious activity, events, incidents and encouraging a safe and supportive reporting culture

The areas covered within each section are detailed below.

Section 1

  • Creating strong and unique passwords
  • Account security: Keeping account details secret
  • Additional security settings
  • Updating expired or exposed passwords
  • Monitoring and reviewing account access

Section 2

  • Reviewing and managing connected applications
  • Social engineering/phishing attempts
  • Account recovery

 

Unit 2: Cyber security scenarios

(New for 2026/27) Certificated training and assessment on a range of cyber-related scenarios which support those members of centre staff who access awarding bodies’ online systems in protecting assessment systems and recognising attacks such as phishing or social engineering. The scenarios promote best practice in:

  • Password creation
  • Account security
  • Additional security settings
  • Updating expired or exposed passwords
  • Account recovery
  • Reviewing and managing connected applications
  • Reviewing and managing social engineering and phishing attempts
  • Monitoring and reviewing account access

How to complete this training and assessment

Refer to the (How to access and complete…) User Guide or follow these steps:

  • Step 1 – Access your account in The Exams Office Hub by clicking on the Login button below
  • Step 2 – You will then be logged in to your Dashboard (Welcome page). Select Assessments from the Resources menu on the left-hand side of the screen
  • Step 3 – Select the unit by clicking on CYBER SECURITY: ACCOUNT MANAGEMENT BEST PRACTICES
  • Step 4 – You will be presented with the sections to be completed
  • Step 5 – Click to Start and follow the instructions on how to complete each section
Login to The Exams Office Hub to access Assessments

The Exams Office takes no responsibility for any outcomes in centres as a result of the information provided on our website, The Exams Office Hub or within our documentation. It is the responsibility of centres to apply this information as they deem necessary within their own centre. You should always contact/refer to the relevant awarding body for the most accurate and up-to-date information regarding their qualifications.