Modelling Networks and Social Connections

Home Wi-Fi and a school group chat both depend on a network. You will plan one, draw it as a graph, protect privacy and test how well it works.

Enterprise information systems Stage 4 and Stage 5 · Years 7–10 Outcomes: CT5 (10 outcomes)
40Dot points
4Parts
4Years
10Outcomes
Syllabus Part 1 Identifying and defining

Why We Connect People and Systems

🎯 (CT5-THI-01)

📌 Describe the purpose of connecting people and systems

A network is a group of devices, or people, that are linked so they can share information. A school’s group chat is a network. Everyone in it can send a message, and everyone else can read it.

Connecting people and systems is useful for four main reasons:

  • To communicate. People can message, call or video chat, even when they are far apart. A grandparent in another city can see photos from a school concert.
  • To share information. A team can keep one shared spreadsheet of training times. Everyone sees the same numbers.
  • To share resources. Several laptops can print to one printer. This saves a school from buying a printer for every room.
  • To use services and control things. You can check a bank balance, book a bus ticket or lock a smart door from your phone.

Connecting also brings risks. Every connection is a path that someone could misuse. The rest of this topic looks at both the benefits and the risks, so you can make good choices.

Scenario Maya runs a pet-sitting side hustle with two friends. They use one shared online calendar to see who is looking after which pet. The calendar connects three people to one system. Without it, Maya would spend the day sending texts to check who is free.
Try this Write down three things you did online today. For each one, write what you connected to (a person, a device or a service) and why.

Inputs, Storage, Processes and Outputs

🎯 (CT5-THI-01, CT5-DAT-01)

📌 Describe inputs, storage, processes and outputs in connecting people and systems

Every connected system has four main parts. They are input, storage, process and output. The network is the link that carries data between these parts.

  • Input is the data that goes into the system. Example: you type a message and tap Send.
  • Storage is where data is kept so it can be used again. Example: a server keeps a copy of the message history. A server is a computer that stores data and shares it with other devices.
  • Process is what the system does with the data. Example: it finds the right person, checks the message and passes it on.
  • Output is what comes out of the system. Example: your friend reads the message, and their phone makes a sound.
Worked example Follow one homework file through a school portal.
  1. Input: the student uploads a document from a laptop.
  2. Network: the file travels from the laptop to the school server.
  3. Storage: the server saves the file in a folder for that class.
  4. Process: the portal checks that the file type is allowed and records the time it arrived.
  5. Output: the teacher’s screen shows the file as “Submitted”, with the time.

The same data can be an output in one step and an input in another. When the teacher types a mark into the system, that mark is an input.

Block diagram

One homework file, four parts

The homework file from the worked example, shown as input, storage, process and output. Arrows show the way the data travels; a dotted line is a network link.

What to notice
  • The data moves from left to right: input, then storage, then process, then output.
  • The dotted network link joins the laptop to the school server, so the file travels between two devices before it is stored.
  • The same data can be an output in one step and an input in another, as the text above explains.

Try thisDraw the four blocks for a message you send to a friend. Write one thing that goes in each block.

Years 9–10: go further Draw the four parts for an app you use. Then answer three questions. Where is the data stored: on your device, on a company’s server, or both? Who can see it while it moves across the network? What happens to it once the process is finished? Write one sentence on what your answers tell you about privacy.

Real-World Problems to Solve by Connecting

🎯 (CT5-DPM-01, CT5-THI-01)

📌 Define a real-world problem or need that can be solved by connecting people and systems, including breaking it down into manageable parts and describing the users of the solution

A problem statement says what is wrong, who it affects and what a good solution would do. You must define the problem before you design anything. A problem is not the same as a solution. “We need an app” is a solution. “Families miss training changes” is a problem.

To define a problem, follow three steps:

  1. Write the problem in one or two sentences.
  2. Break it down into smaller parts that you can solve one at a time. This is called decomposition.
  3. Describe the users, the people who will use the solution, and what each one needs. A stakeholder is anyone affected by the solution, even if they never use it.
Worked example A small netball club has a problem. The coordinator phones every family when a training time changes. This takes hours, and some families still miss the message.
  1. Write the problem: families miss training changes because the coordinator has to phone each one.
  2. Break it into parts: (a) how a change is recorded, (b) how families are told, (c) how the club can tell that a message has been seen.
  3. Describe the users: the coordinator adds changes and sends messages, so needs a quick, simple tool. Parents and carers read the messages on their phones, so they need short, clear messages. Young players may also want to check the time on their own phone.
  4. Write the need: the coordinator needs to send one message to every family at once. Families need to see it on their phone.
Watch out Do not choose a solution until you have described the users. If you skip this step, you may build something that a parent cannot use on their phone.
Try this Pick a problem from your own life, such as a canteen queue, a sports roster or a family group chat. Write it in one sentence. Break it into three parts. Then name two users and what each one needs.

Functional Requirements and Test Cases

🎯 (CT5-DPM-01, CT5-COM-01)

📌 Specify the functional requirements of a networked solution, including stating the purpose of a solution, describing use cases and developing test cases of input and expected outputs

A functional requirement says what a solution must do. Each one starts with “The system must” and is specific enough to test.

Specifying has four steps:

  1. State the purpose. Write one sentence saying why the solution exists.
  2. Describe a use case. A short, step-by-step story of one user doing one task.
  3. List the requirements. Number each one.
  4. Write test cases. Each has an input (what is typed or pressed) and an expected output (what should happen).
Worked example This continues the netball club problem.

Purpose: to let the coordinator send one message to every family on the club list, so each family sees changes on their phone.

Use case: send a training change. The coordinator logs in, chooses New message, types “Training moves to 5 pm on Friday.” and presses Send. Every family on the list receives the message.

Requirements:

  • FR1: The system must let the coordinator log in with a username and password.
  • FR2: The system must let the coordinator send one message to every family on the list.
  • FR3: The system must show a warning, and send nothing, if the message box is empty.

Here are four test cases.

TestInputExpected output
T1Log in with the right username and password.The message screen opens.
T2Log in with a wrong password.“Password not recognised” appears. The message screen does not open.
T3Press Send with the message box empty.“Please type a message first.” appears. Nothing is sent.
T4Send “Training moves to 5 pm on Friday.” to a test list of two phones.Both test phones show the same message, word for word.

Write each expected output before you run the test. Otherwise you may accept a wrong result simply because you got it.

Show what you know For Specify, a strong answer gives a purpose, a short use case, at least three numbered “must” requirements and two or more test cases, each with an input and an expected output. A common slip is to describe how the screen looks, such as “the screen should be bright”. That is a look-and-feel point, so it belongs in the non-functional requirements.
Years 9–10: go further Test the edges of a rule. Suppose, as a made-up limit, a message can be up to 500 characters. Test 1 character (should send), 500 characters (should send) and 501 characters (should show a warning and send nothing). These are boundary tests, and errors often happen at the edges.

Non-Functional Requirements of a Network

🎯 (CT5-DPM-01, CT5-DES-01)

📌 Specify the non-functional requirements of a networked solution

  • Cost of network hardware or data transfer.
  • Social benefit or facilitating social interactions.
  • Simple configuration and use for beginners.

A non-functional requirement says how well a solution must work, or what it must be like. It describes qualities, such as cost, how helpful it is to people and how easy it is to use. Where you can, write each one so that you can check it.

NESA gives three examples. Here is how each one could look for the netball messaging system.

Cost of network hardware or data transfer

The club has a set budget for the season. Some phone plans limit how much data you can use, so large files may cost families money. A possible requirement: the system must work on phones that families already own. A possible test: check the total cost of the solution against the committee’s budget.

Social benefit or facilitating social interactions

A good solution helps people feel connected. A parent might want to reply with a question, such as “Can we bring a lift?” A possible requirement: families must be able to reply to the coordinator, and the coordinator must see every reply. A possible test: send a reply from a test phone and check that the coordinator sees it.

Simple configuration and use for beginners

Some users are new to technology. Some coordinators use the system only once a season. A possible requirement: a parent who has never used the system must be able to read a message in three taps or fewer. A possible test: give the system to someone who has not used it before, and time how long they take.

Try this Choose an app you use. Write one functional and one non-functional requirement for it. Check that your non-functional requirement could be tested.
Watch out “The app should be easy to use” is hard to test. “A new user can open the app and read a message without help” can be tested.


Network Hardware: Wired, Wireless and Mobile

🎯 (CT5-DAT-01)

📌 Describe common network hardware for wired, wireless and mobile networks

Network hardware is the physical equipment that lets devices connect. Networks can be wired, wireless or mobile. Each type uses different hardware, but all of them send data between devices.

  • Wired networks use cables. A device connects with a network cable, often called an Ethernet cable.
  • Wireless networks use radio waves. There are no cables between the device and the router.
  • Mobile networks use the phone company’s network. A phone connects to nearby mobile towers. A SIM card is the small card in a phone that identifies it to the mobile network.

These are the common pieces of hardware you will meet:

  • A network interface card (NIC) is the part that lets a device connect to a network. Most laptops and phones have one built in.
  • A switch joins several wired devices so they can share a local network.
  • A router sends data between networks, such as your home network and the internet.
  • A modem connects your home to your internet provider’s line. Many home devices combine a modem and a router in one box.
  • A wireless access point lets wireless devices join a wired network.
Network typeCommon hardwareEveryday example
WiredNetwork cable, switch, network cardA desktop computer in a school computer lab.
WirelessWi-Fi router, wireless access point, Wi-Fi adapterA laptop in the library, connected to Wi-Fi.
MobilePhone with a SIM card, mobile towersA phone used on a bus, where there is no Wi-Fi.

Network map

A home network with wired, wireless and mobile links

A network map of one home. Every device is labelled. Solid lines are cables, dotted lines are radio links, and the zig-zag line is the mobile network.

What to notice
  • The modem connects the home to the internet line, and it links to the router.
  • The router sends data between the home network and the internet. The desktop computer and the switch are joined to it by cables.
  • The laptop and the tablet connect by radio waves, so they need no cable. The switch is drawn with only its link to the router.
  • The phone uses the mobile network. It connects to a mobile tower, not to the home router.

Try thisTrace a message from the tablet to the internet line. Write the devices it passes through, in order.

Show what you know For Describe, name the hardware, say what it does, then give one example. A common slip is to mix up a router and a switch. A router sends data between networks. A switch joins devices inside one network.

Network Security Risks and How to Reduce Them

🎯 (CT5-SAF-01, CT5-DAT-01)

📌 Describe common network security vulnerabilities and the mitigation strategies

A vulnerability is a weakness that could be used to harm a network, its devices or the people who use them. A mitigation is a step that lowers the chance of a problem, or the harm it could cause. Think of a bike. A missing lock is a vulnerability. A good lock is a mitigation.

VulnerabilityWhat it meansMitigation
Weak or reused passwordsEasy to guess, or the same password is used on many accounts.Use a long, unique password for each account. A password manager can store them safely.
Default passwordsThe factory password on a router or device, often printed on a label.Change it to a new strong password when you set the device up.
Out-of-date softwareOld software can contain known weaknesses.Install updates when they are offered.
PhishingA fake message that tries to trick you into giving details or clicking a bad link.Check the sender. Do not click unexpected links. Go to the official site yourself.
Unsecured Wi-FiA network with no password, or weak security settings.Use a strong Wi-Fi password and the strongest security setting the router offers.
Lost or stolen devicesSomeone else can open the device and its data.Use a screen lock and a device-finding feature.
MalwareHarmful software that can damage a device or steal information.Use a trusted security program, keep software updated and avoid unknown downloads.
Did you know Many routers come with a default password printed on a label. Changing it is one of the easiest ways to protect a home network.

Good protection uses layers. This is called layered defence. If one layer fails, another still helps. For example, a strong password, regular updates and two-factor authentication (a password plus a second check, such as a code sent to your phone) work together.

Watch out Never try to get into someone else’s network or device, even just to see if it works. Accessing a system without permission can be against the law in Australia. Only test a network you own, or one you have permission to test.
Years 9–10: go further Rank the vulnerabilities for a netball club’s messaging system. For each one, judge how likely it is and how much harm it would cause. Use both judgements to decide which mitigation the club should do first, and say why.

Graph Theory in Network Models

🎯 (CT5-THI-01, CT5-DAT-02)

📌 Apply features of Graph Theory to model computer networks

Graph theory is a part of mathematics. It studies graphs, which are pictures made of dots and lines. A network can be drawn as a graph, so graph theory helps you model it and ask questions about it.

In a network model, each device is a node, drawn as a dot. Each connection between two devices is a link (also called an edge), drawn as a line. A line shows that the two devices can send data to each other directly.

Worked example Model a small home network with five devices: a router (R), a phone (P), a laptop (L), a printer (Pr) and a tablet (T).
  1. Name the nodes. There are five: R, P, L, Pr and T.
  2. Find the direct links. Write each one as a pair: R–P, R–L, R–Pr, L–T and P–T. There are five links.
  3. Draw the graph. Draw a dot for each node and a line for each pair. Label every dot and line.
  4. Check your work. You should have five nodes and five links. Every link should join exactly two nodes.

This graph is a simplified model. It shows which devices can talk to each other. It does not show cables, rooms or distances. A model leaves out details you do not need for the question you are asking.

Once a network is a graph, you can ask useful questions. Which device has the most links? Can every device reach every other device? Which device would cut off the most others if it stopped working? Sections later in this part answer these questions with numbers.

Graph

The home network as a graph

The five devices from the worked example. Each circle is a node, and each straight line is a link that joins two nodes. Each link is labelled with its pair.

What to notice
  • There are five nodes and five links, as the worked example says. Every link joins exactly two nodes.
  • The router has three links, more than any other node, so it sits in the centre of the model.
  • The graph shows which devices can talk directly. It leaves out cables, rooms and distances.

Try thisAdd a smart speaker (S) that links only to the laptop. Draw it, then count the nodes and the links again.

NodeA dot in a graph. In a network, a node is a device or a person.
Link (edge)A line between two nodes. It shows that the two can connect or send data directly.
GraphA picture made of nodes and links.
ModelA simple picture of something real that leaves out the details you do not need.
NetworkA group of devices or people that are linked so they can share information.
Try this Draw the graph of the devices in your home on paper. Use one circle for each device and a line only where two devices can talk to each other. Use device names, not people’s names.

Node Degree and Paths Between Nodes

🎯 (CT5-DAT-02, CT5-COM-01)

📌 Calculate node degree and paths between nodes and explain their meaning

Once a network is a graph, you can measure it. Two useful measures are degree and path.

The degree of a node is the number of links that touch it. A link has two ends, so it counts towards the degree of two nodes.

A path is a route from one node to another, following the links. The length of a path is the number of links it uses. A shortest path is a path with the fewest links.

Worked example Use the home network graph from the last section.
  1. Find the degree of each node. Router R has three links (R–P, R–L and R–Pr), so its degree is 3. Phone P has two (R–P and P–T), so 2. Laptop L has two (R–L and L–T), so 2. Printer Pr has one (R–Pr), so 1. Tablet T has two (L–T and P–T), so 2.
  2. Check the total. Add the degrees: 3 + 2 + 2 + 1 + 2 = 10. Five links with two ends each give 5 × 2 = 10. The check works.
  3. List the paths from the printer to the tablet. Route 1: Printer – Router – Laptop – Tablet (3 links). Route 2: Printer – Router – Phone – Tablet (3 links).
  4. Find the shortest path. Both routes use 3 links, so the shortest path length is 3, and there are two shortest paths.

A high degree means a node is well connected, so the router, with the highest degree, is the most important node here. A degree of 1 means the node is at the end of a line. The printer’s only link goes through the router, so if the router fails, the printer is cut off.

Two paths mean the data has a backup route. If the router–laptop link breaks, data can still travel through the phone.

Graph

Two paths from the printer to the tablet

The home network graph with its two routes from the printer to the tablet in two colours. The degree of each node is written beside it: the number of links that touch that node.

What to notice
  • Each link touches two nodes. The degrees add to 10 (3 + 2 + 2 + 1 + 2), which is twice the five links.
  • The printer has degree 1 because its only link goes through the router. If the router stops working, the printer is cut off.
  • Two routes give the tablet a backup. If the link from the router to the laptop breaks, the data can still travel through the phone.

Try thisCover the laptop and its two links. Is there still a path from the printer to the tablet? Name it, and count its links.

Show what you know For Calculate, show each node’s count, check your total and explain what the numbers mean. A common slip is to forget that each link touches two nodes.
Years 9–10: go further A node is a single point of failure if removing it splits the network into separate parts. If you remove the router, the printer is alone, so the router is a single point of failure. If you remove the phone, the other four nodes stay joined through the router and the laptop. Explain why the two answers differ, using paths.

Without JavaScript this tool cannot draw or change the network, but the example is simple. The made-up starting group has six people, A to F, and six friendships: A and B, A and C, B and D, C and D, D and E, and E and F. Counting links, D has three, F has one and the others have two. The shortest path from A to F uses four links, for example A, B, D, E, F.


Social Networks as Graphs

🎯 (CT5-DAT-02, CT5-COM-01)

📌 Represent real-world social networks visually as a graph

  • Social networks of friends, such as suggesting friends of friends as new connections.
  • Kinship relationships of Aboriginal and/or Torres Strait Islander Peoples, with guidance from the local Aboriginal community.

A social network is a set of people and the connections between them. You can show it as a graph. Each person is a node, and each friendship is a link. This makes it easy to see who is connected to whom.

To represent a social network as a graph, follow four steps:

  1. Decide what a node is. Usually, it is one person.
  2. Decide what a link means. For example, “they are friends”.
  3. Draw one node for each person.
  4. Draw a link for each pair of people who are friends.
Try this Use letters, not real names, when you practise. This keeps other people’s details private. Draw the graph on paper or in a free diagramming tool.

Friends of friends

Here is a small friend group of six people, A to F. A is friends with B and C. B and C are both friends with D. D is friends with E, and E is friends with F.

A and D are not direct friends. But they share two friends, B and C. Friends that two people share are called mutual friends. A simple rule could say: if two people have two or more mutual friends, suggest that they connect. So A and D could be suggested as new friends.

Graph

Friends of friends in a small group

Six people as a graph. Each person is a node (circle), and each friendship is a straight link. A and D are shaded teal. B and C are their mutual friends, shaded amber.

What to notice
  • A and D have no link between them, so they are not direct friends.
  • A and D share two friends, B and C. Those shared friends are the mutual friends.
  • E and F are a chain from D: D is linked to E, and E is linked to F.

Try thisAdd a new friend G who is friends with A and D only. Draw the new link. How many mutual friends do A and D have now?

Kinship relationships

Kinship is the set of family relationships that show how people are connected. For many Aboriginal and Torres Strait Islander Peoples, kinship is central to identity and belonging. Kinship systems also differ between communities, so a kinship graph must be drawn with great care.

Kinship knowledge belongs to the community it comes from. This sits within Indigenous Cultural and Intellectual Property (ICIP). Indigenous Data Sovereignty is the idea that communities have the right to decide how their own data is collected, owned and used.

The syllabus asks you to work with guidance from the local Aboriginal community. Talk with the community before you draw, collect or share any kinship information. For practice, use a made-up group, not real family details.

Watch out A kinship graph can look like a neat family tree. Do not assume one picture fits every community, or that you can work out its relationships from the outside. Ask first.

Sociograms: Mapping Who Connects to Whom

🎯 (CT5-DPM-01, CT5-DAT-02)

📌 Evaluate the development of a sociogram model

A sociogram is a diagram of a group. Each person is a node. Lines or arrows show who is connected to whom. An arrow can show who chose whom, for example when a class is asked who they would like to work with.

The idea was developed in the 20th century by Jacob Moreno, a psychiatrist who studied how people in groups choose each other. Sociograms have changed since then. They were first drawn by hand, on paper. Today, software can draw one from a list of connections, and update it when the data changes.

Evaluate the development

To evaluate a sociogram, use criteria. Ask: Is it clear? Is it accurate? Does it respect people’s privacy? Does it help or harm people? Is the data up to date?

  • Strengths. A sociogram is quick to read. It shows who is in the middle of a group, and who is on the edge with no links at all.
  • Limits. It shows that two people are connected, but not why. It can be wrong if the data is out of date or the question was unclear.
  • Risks. A sociogram of people can hurt them. If it labels someone as unpopular, that person may feel left out.

Judgement: a sociogram is a useful model for understanding a group. It works best when people agree to take part, the results are kept private, and it is used to help the group rather than to rank or label people.

Graph

Who chose whom in a class of six

A sociogram. Each person is a node (circle), and an arrow runs from the person who chose to the person they chose. Letters stand in for people.

What to notice
  • Read an arrow as “chose”: A → B means A chose B.
  • A and B chose each other, so two curved arrows run between them.
  • F has no arrows in or out, so it is labelled isolated. This describes these choices only. Do not use it to label a real person.

Try thisAdd an arrow from F to the classmate F would most like to work with. Does F stop being isolated?

Watch out Do not share a sociogram of real students outside your class, and never post one online. Ask your teacher first if you are asked to make one.
Years 9–10: go further A computer can store the same connections as a list of pairs, or as a grid with a 1 wherever two people are connected. Explain one advantage of each for a computer. Then explain why a sociogram is still the better picture for a person to read.
Syllabus Part 2 Researching and planning

Changing Expectations of Security and Privacy

🎯 (CT5-SAF-01, CT5-EVL-01)

📌 Explore how people’s changing expectations and concerns for security and privacy have shaped computer technology

  • Identity verification in online environments, such as considering cyber safety before connecting with someone.
  • Using appropriate firewall settings, such as implementing cyber security to browser software.
  • Setting up a Virtual Private Network (VPN).
  • Researching the evolution and innovation of interactive sharing solutions.
  • Remote working and learning via collaboration applications.

Early on, people shared files by carrying a floppy disk or USB drive to another computer. Sharing then grew into email, chat, video calls and shared documents, and new worries came with it. Who can see my messages? Can I trust the person I am talking to?

Each worry pushed technology in a new direction. Concern about who is really online led to identity verification, which checks that a person is who they say they are. Concern about unwanted visitors led to firewalls. Concern about private work away from the office led to VPNs.

Identity verification

A code sent to your phone is one common way to verify identity. Before you connect with someone online, check who they are. Never share a password or verification code, even with someone who says they are from your school.

Firewall settings

A firewall checks the traffic going in and out of a device or network, and blocks anything its rules do not allow. Keep it turned on. Browsers have settings too, such as blocking pop-up windows.

Network map

A firewall as a gate at the edge of the home network

A home network behind a firewall, drawn as a gate. Allowed traffic has a tick and passes through the gap. Blocked traffic has a cross and stops at the solid wall.

What to notice
  • The firewall checks the traffic that goes in and out of the home network. It sits between the internet and the devices.
  • The page you asked for passes through the gap and reaches the laptop.
  • A request you did not ask for is blocked at the solid part of the wall. The text says to keep the firewall turned on, so the gate is always in place.

Try thisWrite two firewall rules in plain words: one that lets a page you asked for through, and one that blocks requests you did not ask for.

Virtual private networks (VPNs)

A virtual private network (VPN) makes a private, scrambled link between your device and a VPN server. Others on the same network cannot easily read it. A VPN does not make you invisible. The VPN provider can still see some information about your traffic.

Many people now work and learn through collaboration apps, which let people share files, chat and meet online.

Years 9–10: go further Compare a firewall with a VPN. A firewall decides which traffic may pass, using rules. A VPN scrambles data on the link while it travels. Explain why one tool does not replace the other.
Show what you know For Explore, a strong answer names a change in expectations, gives the worry behind it, links it to a technology and gives one example. A common slip is to describe a tool without saying what worry it answers.

Diverse Perspectives on Networks and Connections

🎯 (CT5-DES-01, CT5-SAF-01)

📌 Explore network and social connections considering the perspectives of diverse groups, including Aboriginal and Torres Strait Islander Peoples, culturally and linguistically diverse people, people of different ages and gender, and people with disability

A network that works for one group can fail another. A design that suits a Year 12 student may frustrate a grandparent. To explore different views, ask people from each group what they need. Who gains, and who is left out?

GroupThings to think aboutA question to ask
Aboriginal and Torres Strait Islander PeoplesCommunity guidance on what is shared and who sees it. Cultural knowledge belongs to the community (ICIP).What does the community want shared, and with whom?
Culturally and linguistically diverse peopleSome people read and write best in a language other than English.Can people use the app in their best language?
People of different agesSmall text is hard for some older users. Younger users may need simpler screens.Can a grandparent and a Year 7 student both use it?
People of different gendersSafety concerns online can differ, so ask rather than guess.Which people does the design leave out?
People with disabilityScreen readers, captions and large text all depend on good design.Can someone use this without seeing or hearing the screen?

As with kinship data in Part 1, the community decides how its information is used, not the designer.

Worked example A school library app shows book loans and due dates. Three people test an early version.
  1. A Year 7 student finds it fast, but cannot tell which book is due first. The dates are small and grey.
  2. An older volunteer cannot read the text on a small phone.
  3. A student with a hearing need never notices the sound alert.
  4. The team’s change: larger, darker text, a text-size setting and a visual alert as well as a sound.
Try this Pick an app you use. Add a row to the table for a group you know well, with one need and one question.
Show what you know For Explore, a strong answer names three or more groups, states a real need for each and shows more than one view. A common slip is to treat a group as if all its members think alike.

Access Control and Data Movement

🎯 (CT5-DAT-01, CT5-SAF-01)

📌 Investigate how hardware and software are used to manage, control and secure the movement of, and access to, data in networked digital systems

Access control decides who can see, change or send data. Data movement is how data travels between devices. Tools for both can be hardware (physical equipment) or software (programs).

ToolHardware or softwareWhat it controls or protectsExample
FirewallBothWhich traffic may enter or leave.Blocks unexpected incoming connections.
User accounts and permissionsSoftwareWho can open, edit or delete a file.Students view a class file; only the teacher edits it.
EncryptionSoftwareScrambles data so only the right person or device can read it.Some messaging apps encrypt messages.
VPNSoftwareProtects data while it travels.A worker reaches work files from home.
Worked example Follow a student’s marks through an imagined school portal.
  1. Who gets in: each user signs in with their own account and password. This is authentication.
  2. Who can do what: a student views their own marks. Only that class’s teacher can change them.
  3. How they travel: an encrypted connection stops someone on the same Wi-Fi reading them easily.
  4. Where they are kept: a server behind a firewall, plus a backup copy.

If one step is missing, the wrong person may see or change the marks.

Network map

A student’s marks on the way to the school server

A network map of the path the marks take in the imagined school portal. Every device is labelled, and a padlock marks an encrypted link.

What to notice
  • The padlock marks the encrypted link between the laptop and the firewall.
  • The firewall sits at the network edge and passes only allowed traffic.
  • At the server, a student can view their own marks but cannot change them.

Try this Cover one tool with your hand, then write what would go wrong with the marks.

Access controlThe rules that decide who can see, change or send data.
AuthenticationChecking who someone is before they are let in, such as with a password or a code.
EncryptionScrambling data so that only the intended device or person can read it.
Years 9–10: go further Data in transit is data moving between devices. Data at rest is data stored on a device or server. Name a tool from the portal for each state, and say what happens if it fails.
Show what you know For Investigate, name the tool, say what it controls, give an example and explain what would go wrong without it. A common slip is to list tools without saying what each one does.

End User Profiles and Attributes

🎯 (CT5-DES-01, CT5-THI-01)

📌 Investigate how the profile and attributes of end users are used by developers when creating products

  • Cultural connection, such as Aboriginal and/or Torres Strait Islander participants in a range of contexts.
  • Accessibility needs, such as vision and hearing.

A user profile describes the people who will use a product. Its attributes are the features of those people that matter for the design, such as age, goals, language, device, ability, culture and internet access. Developers use profiles to make choices. Should the text be large? Should it work on a slow connection?

Many teams write a short story about one typical user. This is called a persona. It helps a team picture a real person while they design.

Cultural connection

Cultural connection is how a person’s culture, language and community shape the way they use technology. For Aboriginal and Torres Strait Islander participants, this might affect which images, words and sharing choices feel respectful. Work with the community, not just for it. Use images or stories only with permission.

Accessibility needs

An accessibility need is something a person needs in order to use a product well. Two common examples:

  • Vision: large or adjustable text, strong contrast, and a screen reader that reads the screen aloud.
  • Hearing: captions on videos, and visual alerts as well as sounds.
Worked example Build a persona for a netball club app.
  1. Name and age: Sofia, 14, plays netball on Friday nights.
  2. Goal: she wants to see her training time before she leaves home.
  3. Device and setting: a small phone, often used on a crowded bus.
  4. Needs: Sofia is hard of hearing, so she relies on captions and visual alerts.
  5. Design choice: show the training time at the top of the home screen, in large text, with a visual alert when it changes.
Watch out A persona is a model, not a real person. Avoid stereotypes such as “older people cannot use phones”. Check each assumption with real people from the group.
Show what you know For Investigate, explain what a profile says, name at least two attributes and show how a developer used one in a design. A common slip is to describe the user without saying what the developer did with the information.
Syllabus Part 3 Producing and implementing

Iterative Project Management for Connections

🎯 (CT5-DPM-01, CT5-COL-01)

📌 Plan and manage a project that connects people and systems using an iterative approach, including access control, privacy and cybersecurity

To plan a project is to decide what you will make and in what order. To manage it is to check progress and change the plan when something goes wrong. Many teams use an iterative approach. This means building the project in small rounds, called iterations.

Each iteration follows the same steps:

  1. Plan one small goal for the round.
  2. Build that part.
  3. Test it against what you wanted.
  4. Review what worked and what did not.

Each round starts with what you learned, so problems show up early.

Plan these three things from the start, not at the end:

  • Access control decides who can see or change what. In the netball club, families can read messages, but only the coordinator can send them.
  • Privacy means keeping only the personal details you need, and keeping them safe.
  • Cybersecurity protects the system from misuse. Strong passwords are a simple example.
Worked example A plan for the netball club messaging system in three iterations.
  1. Iteration 1. Goal: send one message to a test list of two phones. Test: both phones show the same words.
  2. Iteration 2. Goal: only the coordinator can log in and send. Test: a wrong password is refused, and a parent’s login cannot open the send screen.
  3. Iteration 3. Goal: families cannot see each other’s phone numbers. Test: a test parent’s screen shows no other family’s number.

Keep the plan written down, with each iteration’s goal and test beside it.

Try this Plan a small class project, such as a quiz. Split it into three iterations, with one test each.
Show what you know For Plan and manage, a strong answer lists iterations, each with a goal and a test, and shows where access control, privacy and cybersecurity appear. A common slip is to plan every feature at once and test only at the end.
Years 9–10: go further Add a risk log to the plan. A risk is something that could go wrong, such as a parent losing their phone. For each risk, write one way to lower it. Check the log at the start of each iteration.

Alternative Designs and Final Choice

🎯 (CT5-DPM-01, CT5-THI-01)

📌 Generate alternative designs and evaluate them against the requirements to select a preferred design

A design is a plan for how a solution will work. An alternative design is a different plan for the same problem. Your first idea is rarely the only good one, so sketch at least two designs before you choose.

Work through these steps:

  1. Write your requirements, so you know what the design must do.
  2. Sketch at least two different designs.
  3. Compare each design against each requirement.
  4. Select the preferred design: the one that best meets your most important requirements.
Worked example Two designs for the netball club messages, compared against four requirements.
RequirementDesign A: group chatDesign B: web page with login
The coordinator can send one message to every family.YesYes
Only the coordinator can send messages (access control).No: as drawn, every member can post.Yes
Families’ phone numbers stay private.No: as drawn, members can see the numbers.Yes
A new parent can read a message with little help.YesPartly: a login comes first.

Judgement: Design B meets both must-have requirements, access control and privacy. Design A is quicker to start. Design B is the preferred design, and a simple guide to logging in can reduce its extra effort.

Show what you know For Generate and evaluate, a strong answer has two or more designs, a comparison against named requirements and a selection with a reason. A common slip is to choose a design first and then look only for evidence that supports it.
Years 9–10: go further Score each cell: Yes is 2, Partly is 1 and No is 0. Give the most important requirements a weight of 2, and the others a weight of 1. Add up the weighted scores for each design. Check whether the total agrees with your judgement. If it does not, explain which requirement changed your mind, and why.

Networks Between Multiple Devices

🎯 (CT5-DAT-01, CT5-DPM-01)

📌 Create a computer network between multiple devices and describe how nodes are connected

A node is any device on a network. A link is a connection between two nodes. When you build a network, you decide which nodes exist and how each one links.

Build a small network in this order:

  1. List the devices. Each device is a node.
  2. Decide how each device connects: by cable (wired) or by radio waves (wireless).
  3. Link each device to the router, or to a switch that links to the router. A switch joins several wired devices so they can share one local network.
  4. Name each node, so you can tell them apart.
  5. Test that the devices can reach each other.
Worked example A study-room network with four devices: a router, a laptop, a printer and a tablet.
  1. Nodes. There are four devices, so there are four nodes.
  2. Links. The laptop and the printer use network cables to the router. The tablet uses Wi-Fi to reach the router.
  3. Describe. The router is the central node. Each of the other three nodes has one link to it. This is a star network, because every device connects to one central device.
  4. Test. Print a test page from the laptop. Then check that the tablet can open a web page.

Network map

A star network in a study room

A network map of a small star network. Every device is labelled, solid lines are cables, and the dashed line is Wi-Fi.

What to notice
  • The router is in the centre, and every other device has one link to it.
  • Solid lines are cables; the dashed line is Wi-Fi.
  • In a star network, every device connects to one central device.

Try this Add a second tablet on Wi-Fi and draw it. How many links does the router have now?

Only build networks with devices you own or have permission to use. Ask your teacher before changing a school network.

Watch out A line on paper does not prove two devices can talk. Test each link.
Show what you know For Create and describe, name each node, say whether each link is wired or wireless, and say which node is central. A common slip is to draw lines between devices that are not linked, or to leave out the router.
Years 9–10: go further A made-up router has four cable ports, but eight computers need cables. Add a switch, which uses only one router port. Draw the network and explain how the four ports are used.

Internet of Things (IoT) Networks

🎯 (CT5-EVL-01, CT5-DAT-01)

📌 Create a network of connected devices to model the Internet of Things (IoT)

The Internet of Things (IoT) is a name for everyday objects that connect to a network and share data. Many IoT objects have a sensor, which detects something such as temperature or light. Some also have an actuator, which does something, such as opening a valve or turning on a light.

You can model an IoT system as a network of nodes:

  • Sensors send readings.
  • A hub receives the readings and decides what to do.
  • Actuators carry out the hub’s commands.
  • A user checks the system on a phone or computer.
Worked example A school garden should be watered only when the soil is dry. Model the system.
  1. Problem. The garden is watered every day, even after rain.
  2. Devices. One soil sensor, one hub, one water valve (an actuator) and one phone app.
  3. Data flow. The sensor sends a reading to the hub. A dry reading makes the hub send “open” to the valve. A wet reading makes it send “closed”.
  4. Test. Enter a made-up dry reading into the model. The valve should open. Enter a made-up wet reading. The valve should stay closed.

Network map

The garden watering model as a network

A network map of the garden model. Each box is one part of the system, and each line is labelled with the data that travels along it.

What to notice
  • The hub is the only part that decides. It sends “open” or “closed” to the valve.
  • A dry reading leads to “open”; a wet reading leads to “closed”.
  • The phone app shows the system status, which the user checks.

Try this Enter a made-up dry reading and follow the map to the valve. What command does it send?

Some IoT devices come with a default password. Change it, and install updates when they are offered.

Watch out Model the system on paper or in a teacher-approved simulation. If you build with real parts, use only low-voltage, battery-powered kits, with an adult present. Never connect anything to mains power.
Show what you know For Create, a strong model shows each device and its type, the links, the direction of the data and at least one test. A common slip is to leave out the actuator, so the model only collects data and never acts on it.
Years 9–10: go further Sending a reading every second uses more data and battery than sending one only when the value changes. Explain this trade-off, and choose one approach for the garden with two reasons.

Turning the Design into a Solution

🎯 (CT5-DPM-01, CT5-DAT-01)

📌 Implement a solution that connects people and systems using the preferred design

  • Connecting and configuring devices in a simple network.
  • Modelling and collecting data for a social network, such as kinship relationships of Aboriginal Peoples.

To implement a solution is to build the preferred design, step by step. Check each step before you move on, and note what you did.

NESA gives two examples.

Connecting and configuring devices in a simple network

To configure a device is to set its options, such as its name and password. Follow these steps for a made-up home or club network:

  1. Set up the router using the guide that came with it. Ask an adult to check the power and cables.
  2. Give the network a name and a new strong password. Change any default password.
  3. Connect each device and check it joins.
  4. Name each device, such as “Coordinator-Laptop”.
  5. Test: each device should reach the router, and the coordinator’s laptop should reach the printer.

Modelling and collecting data for a social network

NESA’s example is the kinship relationships of Aboriginal Peoples. This needs great care. Kinship knowledge belongs to the community it comes from. It connects to Indigenous Cultural and Intellectual Property (ICIP). It also connects to Indigenous Data Sovereignty. This is the idea that communities have the right to decide how data about them is collected, owned and used.

Before you collect anything, work with the local Aboriginal community. Your teacher can help you make contact. Ask what should be collected, why, who will hold it and who may see it.

For class practice, use a made-up group with neutral labels, such as Person A and Person B. Label each link “Link 1” or “Link 2”. The real labels must come from the community. Store the data privately, and share only what the community approves.

Watch out Never use real family information in class practice, and never post a family network online. A kinship graph can look like a neat family tree, but one picture does not fit every community. Ask first.
Show what you know For Implement, a strong answer follows the design steps in order and records each test, including any failure and the fix. A common slip is to build features that are not in the preferred design.

Interactive Pages for Sharing Information Online

🎯 (CT5-OPL-01, CT5-DES-01)

📌 Create interactive solutions for sharing information online using a visualisation library

An interactive solution reacts to what the user does. A button, a drop-down list or a filter can change what is shown. A visualisation library is a ready-made set of code for drawing charts. You reuse it, rather than building every chart from scratch.

Create an interactive page like this:

  1. Choose the information to share. Use made-up data, such as weekly attendance for three teams.
  2. Choose a visualisation tool or library your teacher approves. Read its licence first.
  3. Draw one chart from the made-up data. Add a title and a label for each axis (a line on the edge of a chart that shows the scale).
  4. Add one interaction, such as a drop-down list that shows one team at a time.
  5. Test each choice. Check that it shows the right numbers.
  6. Credit the library and its authors on the page.
Scenario A Year 9 class builds a page about a netball season. Visitors pick a team from a list, and a bar chart updates. The class checks that “Owls” shows the Owls’ numbers, not the Hawks’ numbers. They also test the page on a phone.

Keep personal data off the page. If the data is about real people, a public page can reveal it. Use team totals or made-up names instead.

Watch out Copying a library, image or chart from another site is not the same as having permission to use it. Check the licence first. Much online material is protected by copyright under the Copyright Act 1968 (Cth), even when it is free to view.
Show what you know For Create, a strong answer has a clear data source, at least one working interaction, a test that shows the right results and a credit. A common slip is to publish real personal data or to leave out the credit.

Data Collection, Ownership and Protection

🎯 (CT5-SAF-01, CT5-DAT-01)

📌 Specify what data is collected, who owns it, and how it will be protected, considering privacy and cybersecurity, including when interpreting data

A data specification is a written plan. It says what data you will collect and what you will do with it. It answers four questions: What data do we need? Why do we need it? Who owns it? How will it be protected? It also says how long the data will be kept.

Ownership means who has the right to decide how the data is used. Personal information describes a real person, who has privacy rights. The organisation that holds it must look after it.

Here is a specification for a class survey about favourite sports.

Data itemWhy we need itWho owns itHow it is protected
Favourite sport, chosen from a listTo find the most popular sportThe survey team, with the teacher’s approvalStored in a password-protected file
Year group (7, 8, 9 or 10)To compare year groupsThe survey team, with the teacher’s approvalShared only as totals
NameNot needed, so it is not collectedNot applicableNot applicable

Notice that the name is left out. If you do not need a piece of data to answer your question, do not collect it.

Be careful when you interpret the results. A survey of one class does not show what the whole school thinks. A small group can also mislead, because a few answers can change a percentage a lot.

Show what you know For Specify, a strong answer names each data item with a reason, an owner and one protection step. It also gives one limit on how the results can be read. A common slip is to collect data “just in case”.
Years 9–10: go further Collect only what your question needs. This is called data minimisation. Now check the survey results. If only one Year 10 student chose a certain answer, that student may be easy to identify, even without a name. Suggest one change that protects them, such as grouping small answers together.

Data Types, Storage and Transmission

🎯 (CT5-DAT-01, CT5-DAT-02)

📌 Represent, store and transmit data to facilitate computation, including selecting appropriate data types, understanding the limitations of data types and structuring data systematically

Computers store all data as bits. A bit is a single 0 or 1. Eight bits make one byte. To store data well, you choose a data type that fits it. A data type tells the computer what kind of value to expect.

Data typeWhat it holdsExampleLimitation
IntegerWhole numbers, positive or negative14 playersCannot hold a decimal part, such as 3.5
Real (decimal) numberNumbers with a decimal point21.5 degreesMay be rounded, so the value is not always exact
Text (string)Letters, numbers and symbols“Hawks”Numbers stored as text may not add up as expected
BooleanOnly True or FalseAttended = TrueOnly two values are possible
DateA day, or a day and a time10 OctoberNeeds a consistent format so dates can be sorted

The limitation is the important part. A product code such as 00742 looks like a number. If you store it as an integer, the computer drops the leading zeros and shows 742. Store codes like this as text instead.

# Numbers add; text joins
print(12 + 3)       # 15
print("12" + "3")   # 123, because the text is joined, not added

Store data in a table. Each column is a field, such as name or goals. Each row is one record, such as one player. Every value in a field should be the same type.

When data is sent across a network, it travels as bits. More bits take longer to send, so choosing a small, correct data type helps.

BitThe smallest unit of data, either a 0 or a 1.
ByteA group of eight bits.
Data typeThe kind of value a field holds, such as a whole number or text.
FieldA column in a table. It holds one kind of data for every record.
RecordOne row in a table, holding the data for one item.
Show what you know For Represent and store, name a data type, say why it fits and give one limit. A common slip is to store a code or a phone number as a number, so the leading zeros disappear.

How Data Compression Affects Transmission

🎯 (CT5-DAT-01)

📌 Explain simple compression of data and types of compression, including the impact on data transmission

Compression makes a file smaller. Smaller files take less time to send and use less of your data plan. There are two main ways to compress. Some methods find repeated patterns and write them more briefly. Others remove detail that you may not notice.

  • Lossless compression keeps all the information. The original file can be rebuilt exactly. It is used for text, school documents and computer code.
  • Lossy compression removes some information that people are unlikely to notice. The file gets much smaller, but the original cannot be rebuilt exactly. It is used for photos, music and video.

A simple lossless method is run-length encoding. It replaces each run of the same letter with a count and the letter. So WWWWWWBBBW becomes 6W3B1W.

# Run-length encoding: write each run as a count, then the letter
def compress(text):
    result = ""
    i = 0
    while i < len(text):
        count = 1
        # count how many times the same letter repeats in a row
        while i + count < len(text) and text[i + count] == text[i]:
            count = count + 1
        result = result + str(count) + text[i]
        i = i + count
    return result

print(compress("WWWWWWBBBW"))   # prints 6W3B1W

Compression changes how data is transmitted. A smaller file has fewer bits to send, so it usually arrives sooner. But compressing and decompressing takes work, so it is a trade-off.

Show what you know For Explain, say what compression does, name the type, and link it to transmission with a cause and an effect. A common slip is to say that all compression deletes information. Lossless compression does not.
Years 9–10: go further Choose a type for two files. A netball team’s score sheet must stay exact, so it needs lossless compression. A team photo sent to families on mobile data can use lossy compression, if a little detail loss is acceptable. Now name one other type of file, such as a song or a school essay. Say whether lossy or lossless compression suits it better, and give one reason.

Entities, Events and Relationships

🎯 (CT5-THI-01, CT5-DAT-02)

📌 Model entities, events and relationships within a network

An entity is a thing you store information about. It might be a person, a team, a device or a place. Its attributes are the details you record about it, such as a name or a training day.

An event is something that happens at a point in time, such as a message being sent or a training session being moved. A relationship shows how two entities or events are linked, such as “a player belongs to one team”.

Worked example Model the entities, events and relationships of the netball club.
  1. List the entities. Team, Player and Family.
  2. Choose attributes. Team has a team name and a training day. Player has a player ID, a first name and a team. Family has a family ID and a made-up contact.
  3. List the events. “Message sent”, with a date, a sender and the text. “Training changed”, with the old time, the new time and the date.
  4. Write the relationships. One team has many players, and each player belongs to one team. One family can have more than one player.

Concept diagram

Entities, events and relationships in the netball club

A concept diagram: boxes are entities (things we store information about) and events, and labelled lines show how they are related.

What to notice
  • Each box lists the details (attributes) stored about it.
  • Team and Player are linked in both directions: one team has many players, and each player belongs to one team.
  • The events box links back to the team and the player it involves.

Try this Add a Coach entity. Choose two attributes for it, and draw one labelled line to show how it links to Team.

Store only the details you need. A real phone number is not needed for a class model, so use made-up contacts.

Years 9–10: go further Describe the relationships as one to many (one team has many players) or many to many (a player can be in several teams, and each team has many players). A many-to-many relationship needs an extra table to link the two. Redraw the model for a player who plays in both a junior and a senior team.

Relational Data and Linked Tables

🎯 (CT5-DAT-02, CT5-DAT-01)

📌 Model the relationships between entities and events using relational data

Relational data is data stored in separate tables that are linked to each other. Each table holds one kind of entity or event. Storing data this way means you do not repeat the same information many times.

Two kinds of key make the link work:

  • A primary key is a field with a unique value for each record, such as a TeamID.
  • A foreign key is a field that holds the primary key of a record in another table, such as the TeamID in the changes table.
Worked example Link the team changes to the teams.
TeamIDTeamName
T1Hawks
T2Owls
ChangeIDTeamIDChangeWeek
C1T1Training moved to 5 pmWeek 3
C2T2Game moved to the gymWeek 4

To find which team’s training changed in Week 3, follow these steps. Find the row for Week 3, which is C1. Read its TeamID, which is T1. Look up T1 in the teams table. It is the Hawks.

Why not write the team name in every change row? You could. But if the name is typed wrongly once, the two copies disagree. A link with a key keeps one correct copy of the name.

Years 9–10: go further A foreign key should match an existing primary key. If a change row has TeamID T9, but no team T9 exists, the link is broken. Some database tools can check for this. Explain why a broken link is a data-validity problem, and suggest one check you would add.

Project Records and Iterative Design

🎯 (CT5-COL-01, CT5-DPM-01)

📌 Create a record of project development demonstrating iterative design and evaluation

A project record shows how your project changed over time. It is a log of what you planned, built, tested and changed, and why. A good record shows iterative design, where you improve the solution in rounds using test results. It also shows evaluation, where you judge each round against your requirements.

IterationGoalWhat I builtTest resultEvaluation and next step
1 (week 1)Send one message to two test phonesA simple message screenBoth phones received it. Pass.Works. Next: add the coordinator login.
2 (week 2)Only the coordinator can sendA login screenA wrong password was refused. A parent’s login could still reach the send screen. Fail.Fix the access check, then test it again in the next round.

To build your own record:

  1. Start the record on day one, not at the end.
  2. Write after each iteration, while you still remember what happened.
  3. Record failed tests as well as passed ones. Failures show what needs fixing, so they are strong evidence.
  4. Link each change to a test result or to a requirement.
Watch out Do not put real personal details in your record, such as real phone numbers or student names. Use made-up examples.

Specialist Terms in Context

🎯 (CT5-COM-01)

📌 Select and use specialist terminology in context

Specialist terms are words with a precise meaning in computing, such as node, query or lossy. Using them correctly shows that you understand the idea. Using them in a sentence shows what they mean in that context.

To use a term well:

  1. Know its meaning. Check the glossary page on this site if you are unsure.
  2. Use the term in a sentence that makes its meaning clear.
  3. Check that you have not used it for something else.
Worked example Improve these sentences.
  • Weak: The file got smaller because the computer squashed it.
  • Stronger: The file uses lossless compression, so no information was lost and the original can be rebuilt exactly.
  • Weak: The app keeps all the players in one big list.
  • Stronger: The app keeps players in a table. Each row is one record, and each column is one field.

A stronger sentence is not always longer. It is more exact. Words such as field and record have precise meanings that everyday words do not have.

Show what you know For Select and use terms, a strong answer uses the right term for the right idea, in a sentence that shows its meaning. A common slip is to use a general word where a specialist word is needed, such as “file” when you mean “table” or “record”.

Responsible Data Collection and Access

🎯 (CT5-SAF-01, CT5-DAT-02)

📌 Access datasets and collect data from users or the environment considering privacy and personally identifying information (PII)

A dataset is a collection of data put together for a purpose. You can access a dataset that someone else has published, or you can collect your own. Either way, think about privacy, which is a person’s right to control their own information.

Personally identifying information (PII) is any information that can identify a person. Examples include a full name, a home address, a date of birth, a photo and an email address. Be careful with combinations. A school name and a year group together can sometimes be enough to work out who someone is.

Worked example Collect data from classmates about favourite sport.
  1. Purpose. To show which sports the class likes most.
  2. Choose the data. One sport from a list. No name, age or address.
  3. Tell people. Explain what you are collecting and why. Let anyone skip the question.
  4. Collect. Use a simple paper or online form that does not ask for a login.
  5. Protect and share. Keep the answers in one private file. Share only the totals.

Data can also come from the environment. A temperature sensor in a school garden records readings. These readings hold no personal information, so the privacy risk is low.

If someone shares a dataset with you, check its licence or terms of use before you use or publish it.

Practise on this made-up dataset. It records visits to three pretend parks.

ParkDateCountWeather
Park 14 March12Sunny
Park 24 March3Cloudy
Park 15 March7Rain
Park 35 March20Sunny
Try this Check the table before you use it.
  1. Who made it? The table does not say. Write one question to ask its maker.
  2. When was it collected? The dates have no year. Is the data still useful?
  3. What does each column mean? Is “Count” people, dogs or bikes?
  4. Are you allowed to use it? Look for a licence. If there is none, ask first.
Try this If a form asks for more than you expect, stop. Tell a trusted adult or your teacher before you answer anything you are unsure about.
Show what you know For Access and collect, a strong answer names the data and its purpose. It says how people are told and can opt out, avoids or removes PII, and says how the data will be stored. A common slip is asking for a full name and school “in case it is useful”.

Data Validation and Invalid Data

🎯 (CT5-DAT-02, CT5-THI-01)

📌 Validate data is correct and investigate the impact of invalid data

Validation is a check that data follows a rule before it is accepted. Validation does not prove that data is true. It only checks that the data looks right. A score of 10 may pass a check and still be a typing mistake for 100.

Common checks include:

  • Presence check: is something typed in?
  • Type check: is it the right kind of value, such as a number?
  • Range check: is it between the allowed limits?
  • Length check: is it the right number of characters?
  • Lookup check: is it on an approved list, such as a list of team names?

This short program checks game scores. A made-up rule says a score must be from 0 to 100.

# A made-up rule: a game score must be from 0 to 100
def check_score(score):
    if score < 0 or score > 100:   # range check
        return "Invalid: score must be from 0 to 100"
    return "Valid"

print(check_score(45))    # Valid
print(check_score(450))   # Invalid: score must be from 0 to 100

Invalid data can cause real harm. A score of 450 instead of 45 makes a team’s average look far too high. A wrong phone number can send a private message to the wrong person. Check data before you use it to make a decision.

Show what you know For Validate, a strong answer names the check, tests one valid and one invalid value, and explains one effect of invalid data. A common slip is to test only the values you expect to pass.
Years 9–10: go further Validation can catch a value that is out of range. It cannot catch a value that is in range but wrong, such as 54 typed for 45. Describe one way to find this kind of error, such as checking against a paper record or a second person’s count. Explain why each method costs time.

Data Analysis, Decisions and Reports

🎯 (CT5-DAT-02, CT5-COM-01)

📌 Analyse data to make decisions and generate reports using a database

Analysing data means looking at it to find patterns, compare groups and answer a question. A report then presents your findings to an audience, such as a coach or a club committee. A database helps, because you can select exactly the rows you need.

The examples in this part use this made-up table of netball players. The table is called players. Each row is one record. Sessions means training sessions attended.

nameteamgoalssessions
AvaHawks189
BenOwls76
ChloeHawks2510
DevOwls128
EliHawks34

The coordinator asks: which players scored 10 or more goals this season? Ask the database with this query:

SELECT name, goals FROM players WHERE goals >= 10 ORDER BY goals;

The result is Dev with 12, Ava with 18 and Chloe with 25. The next section explains each word in the query.

Now read the result carefully. Three players scored 10 or more goals. But goals alone do not show how often each player was at training. Chloe attended the most sessions. Dev attended fewer sessions than Ava. A fair report would say so.

Write the report in a short, clear form: the question, the data used, the method, the finding, one limit and a suggestion. A decision about people should be fair, so use the whole season, not one game.

Show what you know For Analyse and generate reports, a strong answer asks a clear question, uses a query, states the finding and gives at least one limit. A common slip is to draw a big conclusion from one result.
Years 9–10: go further A report can mislead even when every number is correct. Write two short findings: one that ignores sessions, and one that includes them. Then explain which finding a fair coach should use, and why. Think about what the choice of question leaves out.

Database Queries and Their Clauses

🎯 (CT5-DAT-02, CT5-OPL-01)

📌 Filter, sort and limit database queries using SELECT, WHERE, ORDER BY and LIMIT clauses

A query is a question you ask a database. You write it in SQL, short for Structured Query Language. A query can filter rows, sort them and limit how many you see. Each keyword that shapes a query is called a clause. These are the words to know:

WordWhat it does
SELECTChooses the fields (columns) to show.
FROMNames the table to use.
WHEREKeeps only the rows that match a condition.
ORDER BYSorts the rows, smallest to largest by default.
LIMITShows only the first few rows.
AND, OR, NOTCombine or reverse conditions inside WHERE.

Inside WHERE, the symbols = (equal to), > (more than), < (less than) and >= (more than or equal to) compare values. Some database tools use a different word from LIMIT, so check your tool.

This query shows the name and goals of each Hawks player:

SELECT name, goals FROM players WHERE team = 'Hawks';

The result is Ava (18), Chloe (25) and Eli (3). Text goes in single quotation marks. Numbers do not.

This query finds the two players with the fewest goals:

SELECT name, goals FROM players ORDER BY goals LIMIT 2;

The result is Eli (3) and Ben (7). This query uses AND, so both conditions must be true:

SELECT name, team FROM players WHERE team = 'Owls' AND goals > 5;

The result is Ben and Dev. Without ORDER BY, rows may come back in any order.

Did you know Many tools also accept DESC after a column name, to sort from largest to smallest. DESC is not in this list of words, so check with your teacher before you use it.
QueryA question asked of a database, written in a language such as SQL.
SQLStructured Query Language, a language for asking and changing data in a database.
ConditionA rule that each row must pass to be shown, such as team = 'Hawks'.
SortTo put rows in order, such as smallest to largest.
Show what you know For Filter, sort and limit, a strong answer uses SELECT and FROM with WHERE, ORDER BY or LIMIT in the right order. It also checks the output. A common slip is to put WHERE after ORDER BY, or to leave out the quotation marks around text.

Keeping a Database Up to Date

🎯 (CT5-DAT-02, CT5-DAT-01)

📌 Load, insert and update data in a database

A database is only useful when it is up to date. You can load many records at once, insert one new record, or update records that have changed.

  • Load brings in data from a file, such as a list exported from a spreadsheet as a CSV file. A CSV file is plain text, with commas between the values.
  • Insert adds a new row.
  • Update changes the values in rows that already exist.

To load a file safely, follow these steps:

  1. Check that the columns in the file match the fields in the table.
  2. Check the types. A word in a goals column is a problem.
  3. Keep a copy of the original file.
  4. Load the file, then count the rows. The count should match the file.

To add Finn, who plays for the Owls with 4 goals and 5 sessions, use this command:

INSERT INTO players (name, team, goals, sessions) VALUES ('Finn', 'Owls', 4, 5);

To change Ben’s goals from 7 to 9, use this command:

UPDATE players SET goals = 9 WHERE name = 'Ben';

VALUES and SET are small extra words that these two commands need to be complete.

Watch out An UPDATE without WHERE changes every row. The command UPDATE players SET goals = 0; would set every player’s goals to 0. Before you update, run a SELECT with the same WHERE to see which rows will change.
Show what you know For Load, insert and update, a strong answer uses the right command and includes WHERE with every update. It checks the result by counting rows or looking at the table. A common slip is to forget WHERE.

Syllabus Part 4 Testing and evaluating

Solution Quality Against Requirements

🎯 (CT5-DPM-01, CT5-SAF-01)

📌 Evaluate solutions against the predetermined functional and non-functional requirements that meet social, ethical and legal responsibilities and cybersecurity principles

To evaluate a solution, compare what it does with what it must do. Use the requirements you wrote in Part 1. Turn each one into a test, run the test and record what happened. Then make a judgement about the result.

Write the expected result before you run the test. Then you cannot change your mind about what should have happened, just to match the result you got.

Worked example Four tests for the netball messaging app from Part 1. Each row has a result and a pass or fail.
RequirementTestResultPass or fail?
FR2: one message reaches every familySend to a test list of three phones.All three phones show the same message.Pass
FR3: an empty message is not sentPress Send with the message box empty.A warning appears, and nothing is sent.Pass
Non-functional: a new parent reads a message in three taps or fewerGive the app to a parent who has not used it. Count the taps.Four taps were needed.Fail
Privacy: details of a family who leaves are removedRemove a test family from the list, then check the stored details.The family’s details are gone.Pass

Judgement: the app meets its sending and privacy requirements. It fails the requirement for simple use, because a new parent needs too many taps. The team should change the screen so a message opens in three taps or fewer, then test again.

Show what you know For Evaluate, a strong answer lists clear criteria, shows the evidence from each test and ends with a judgement and one change. A common slip is to write “it works” with no test results to back it up.

Navigation Maps and Their Efficiency

🎯 (CT5-DPM-01, CT5-DES-01)

📌 Test and evaluate the efficiency of a network navigation map

A navigation map shows the screens in a solution and the links that take a user from one to another. It is a graph, like the ones in Part 1. Each screen is a node, and each link is a line.

Efficiency means reaching a goal in as few steps as makes sense for the user. A step is one tap, click or link. Fewer steps usually help, but only if the user can still find the way.

To test a map:

  1. Choose a task people do often, such as finding a training time.
  2. Find the path from the start screen to the goal on the map.
  3. Count the links on the path. This is the number of steps.
  4. Ask a real user to do the task. Count their taps and note where they hesitate.
Worked example The club app has seven screens: Home, Schedule, Training, Messages, Settings, Profile and Contact.
TaskPath on the mapStepsJudgement
Find Friday’s training timeHome → Training1Efficient
Reply to a messageHome → Messages, then tap Reply2Efficient
Change my phone numberHome → Settings → Profile → Contact3Long, and easy to get lost on

Suppose three test users each took a wrong turn at Settings. A direct link from Home to Contact would cut the third task to one step. Test again, and check that the other tasks still work.

Graph

The club app’s navigation map

A navigation map drawn as a graph: each screen is a node (a box), and each link is a line labelled with the taps it takes.

What to notice
  • Reaching Contact takes three taps from Home, through Settings and Profile. Those links are shown in green.
  • The dashed shortcut would make the same task one tap.
  • Every link is labelled, so the taps can be counted from the map.

Try this Follow the shortest path from Home to Profile and count its taps.

Years 9–10: go further The shortest path between two screens is the one with the fewest links. Find the shortest path from Home to Contact. Then explain why a designer might choose a longer path with clearer labels for a new user.
Show what you know For Test and evaluate, a strong answer names the task, shows the path, counts the steps from a real user and proposes one change. A common slip is to count steps by guessing rather than by watching a user.

Network Performance and Reliability

🎯 (CT5-DPM-01, CT5-DAT-01)

📌 Test, monitor and evaluate a network in terms of bandwidth, connectedness, compatibility, reliability and ease of use

A network can work on the day it is set up, then slow down or drop out later. To monitor a network, check it over time. Test these five measures.

MeasureA simple test to try
BandwidthRun a free speed test at different times of day, and record the results.
ConnectednessFrom one device, try to reach every other device. Note any that cannot be reached.
CompatibilityConnect an older phone, a new tablet and a laptop. Note which ones fail.
ReliabilityKeep a log for a week. Note each drop-out, with the date and time.
Ease of useAsk someone new to connect a device with no help. Time them and note where they get stuck.
BandwidthThe amount of data that can pass through a connection in a set time.
ConnectednessWhether every device can reach every other device, directly or through others.
CompatibilityWhether a device or program works with the network and with other devices.
ReliabilityWhether the network keeps working and delivers data correctly.
Worked example A club’s hall Wi-Fi works well most of the week. Its log shows drop-outs only on Tuesday nights, when the hall is full. Reliability has failed. A likely cause to test is bandwidth: many devices sharing one connection can use it all up. Run speed tests at the busy time, then test again after a change, such as a second wireless access point.

Speed alone is not enough. A fast connection that drops out every evening is not reliable.

Watch out Ask permission before testing any network, including a school network. Never test a device you do not own.
Years 9–10: go further Many computers have a ping command. On a network you may test, it sends a small message to another device and reports any reply and how long it took. A missing reply can also be caused by a firewall that blocks pings, so check the firewall before you blame the connection. Explain what a missing reply could tell you about connectedness.
Show what you know For Test, monitor and evaluate, name each measure, describe one test you ran, record the result and judge the network. A common slip is to name the measures without running a test.

Network Resistance to Attacks

🎯 (CT5-SAF-01, CT5-DAT-01)

📌 Evaluate the security of networks in terms of vulnerability to attacks and exploitation

A vulnerability is a weakness. Exploitation means taking advantage of a weakness to cause harm. To evaluate security, find the weaknesses, then judge how serious each one is. You do not need to attack anything to do this.

Start with a checklist. A network with all five in place is in a much better position than one with none.

  • The router’s factory password has been changed to a strong one.
  • Devices and software are kept up to date.
  • A firewall is turned on.
  • Important accounts use two-factor authentication.
  • Visitors use a separate guest network, if the router offers one.

Then judge each weakness by its likelihood (how likely it is to be used) and its harm (how much damage it could do). Together these give a risk, a judgement of how serious the weakness is.

Weakness in a club networkLikelihoodHarmPriority
One shared admin password, known to many peopleHighHighFix first
Router still uses its factory passwordMediumHighFix second
A visitor can see the club’s shared filesLowMediumCheck the settings

Judgement: the shared password is the most likely to be misused and would cause the most harm, so it comes first. A network is only as safe as its weakest point.

Watch out Only check your own network, or one you have permission to check. Trying to get into someone else’s network or device is never a test, and it can break the law.
Years 9–10: go further Score each weakness for risk. Give likelihood a score from 1 to 3 and harm a score from 1 to 3, then multiply them. Rank the weaknesses above, and name one limit of this method. The scores are judgements, so two people may score the same weakness differently.
Show what you know For Evaluate, name two or three weaknesses, rate how likely each is and how much harm it could do, and give a reasoned priority. A common slip is to list threats without judging how serious they are.

Careers in Connecting People and Systems

🎯 (CT5-EVL-01)

📌 Explore careers in connecting people and systems

Many jobs involve connecting people and systems. Some people build networks. Others keep them safe, design how people use them or study the data they produce. Your school’s careers adviser can tell you more about any of these roles.

RoleWhat the person doesLink to this topic
Network technicianSets up, checks and repairs routers, switches and Wi-Fi.Hardware, connectedness and reliability.
Cybersecurity analystLooks for threats and helps protect data and networks.Vulnerabilities, mitigation and risk.
App or web developerBuilds the software people use to connect and share.Requirements, test cases and iterative design.
UX designerPlans how people move through a product and whether it is easy to use.User profiles, navigation maps and accessibility.
Data analystChecks data for errors, finds trends and presents them clearly.Validation, queries and visuals.

Job titles and duties differ between employers. Treat this table as a starting point, and check each role before you decide. To explore a career, look at three things: what the work involves each day, what skills it needs and what study or training it may need.

Try this Pick one role from the table. Write three things the person does each day. Then write one question you would like to ask someone who does that job.
Show what you know For Explore, a strong answer names a role and describes the work. The answer links the role to one skill from this topic and gives one reason it might suit the student. A common slip is to state pay or job numbers with no source.