Digital and technology solutions professional: the standard, decoded

Degree apprenticeship (integrated degree) · Digital route · Standard ST0119 v1.2

Level: 6
Typical duration: 48 months (about 4 years)
Max funding band: £27,000
End-point assessment: 3 months — how it works
Options: 6 — the specialisms
Universities: 36 registered — the list

Maintaining digital and technology strategies through technology leadership.

Every apprenticeship in England is defined by a published "standard" — the contract for what you'll be able to do by the end. This page is the ST0119 standard translated out of officialese, with the full assessed content underneath. It's genuinely worth reading before an interview: competency questions are usually written straight from these lists.

About the role

This occupation is found in organisations where digital technologies can be used to solve problems that exist across a range of functions. Whether looking for ways to reduce waste, increase productivity, ensure resilient and responsive customer service, or create a secure transactional environment, organisations turn to digital and technological solutions to achieve these aims. Wherever these activities take place Digital and Technology Solutions Professionals (DTSPs) are influencing outcomes and making things happen.

DTSPs are found in small, medium and large organisations across all industries such as banking and finance, digital and technology, communications, construction, education, utilities, engineering, law, manufacturing, health, government and public services pharmaceutical, retail and transport.

The broad purpose of the occupation is to evaluate, initiate, create and support business solutions using digital technology. DTSPs use data to evaluate the commercial and security risks and benefits of potential digital and technology solutions before making recommendations for strategies that may have far reaching consequences.

DTSPs are influencers in their organisations with a clear focus on delivering business improvements through digital and technological solutions. They have a passion for digital technology; keeping in touch with emerging trends and developments .

DTSPs have a broad set of skills and knowledge across the main areas of the digital and technology landscape. This enables them to understand the complexity of information systems, systems development, data, cyber security, business organisation, IT project management and computer and network infrastructures . They view all of this with a rigorous approach to commerciality and budget to deliver quality solutions.

In addition to this broad set of skills and knowledge they specialise in one of the following areas:

Option 1: Software Engineer
Option 2: IT Consultant
Option 3: Business Analyst
Option 4: Cyber Security Analyst
Option 5: Data Analyst
Option 6: Network Engineer

For example:

In a manufacturing company DTSP Software Engineers could be developing solutions to support the construction of physical products.
In a utility company DTSP IT Consultants could be on a remote site to implement a solution for improving energy usage or reducing outages through the application of new technologies.
In an engineering company DTSP Business Analysts could be reviewing a change to an engineering process to determine the impact on other processes within the organisation.
in a technology company DTSP Cyber Security Analysts could be working with clients to address security management issues in the clients’ processes.
In a pharmaceutical company DTSP Data Analysts could be working with large amounts of information to interpret the results of a field trial of a new medicine.

In a communications company DTSP Network Engineers could be involved in developing additions to an existing national network.

In their daily work DTSPs are excellent communicators and may interact with internal and external customers, team members and senior leaders. They can work independently and within multi-disciplinary teams . They may interact with decision-makers, strategists, and policymakers, often in senior roles in private or public sector organisations as well as with individuals and groups (internal and external) with a stake in the defined system, currently or in the future.

An employee in this occupation is likely to have some responsibility for budgets and/or resources, teams, and projects. In some organisations they may hold leadership positions. Work may typically be conducted in a desk-based environment, but that desk may be in an office or on a site depending on the solution being worked upon.

For example. a DTSP Software Engineer could be working on a client’s site during the development and implementation of a new client system.

An employee in this occupation will be responsible for working with little or no supervision and may be accountable for the supervision of others if the position requires it.

DTSPs are at the heart of problem solving, bringing an innovative, multi-disciplined approach to bear where there are unpredictable and variable influencing factors. They may have a remit to commission work from others and hold them accountable for outputs of a technical nature. Their professional position within a business means they fulfil a leadership role within their technical specialism demonstrating a strong ethical awareness of technological trends.

A description of each specialism follows:

Option 1) Software Engineer
The primary role of the Software Engineer is to undertake all requirements during the solution development life-cycle from gathering requirements to analysis, design, code, build, test, implementation and support. They may also be required to supervise the work of junior software developers and others who may be working on elements of the solution and work with product managers and UX designers in implementing solutions. They will apply software engineering principles to all stages of the solution life-cycle, from gathering requirements, undertaking analysis and design, development of code and data requirements whilst also ensuring security feature are addressed. As well as creating new code, they can support existing code by troubleshooting, reverse engineering and conducting root cause analysis. They typically work as part of a large collaborative team and will have responsibility for significant elements of software solutions.

Option 2) IT Consultant
An IT consultant bridges the gap between users and technology: they reinvent the digital world of the future. They require a broad set of skills in business analysis , solutions development, network infrastructure, data, cyber security etc. They use their consulting skills to get to the root of a problem and advise clients, both externally and internally, on how to best utilise technology to meet their business objectives, overcome problems and increase productivity. They provide strategic guidance and training to clients, both externally and internally, about digital and technology solutions. They facilitate changing business processes, improved structure, and efficiency through enhancements to digital and technology solutions . They design, build and install innovative customer experiences using the latest technologies to win business for their organisation.

Option 3) Business Analyst
A business analyst is an interpreter between two worlds: business and IT, bridging the gap of understanding between business and technology teams. They analyse and understand business needs and define and manage business requirements . They oversee design and delivery of tested system solutions throughout a project life-cycle to ensure these meet business requirements . They are key communicators and drivers of collaboration throughout the development life cycle. They are focused on the customer and work closely with the IT delivery team. They are essential in the development of successful digital and technology solutions through their rigorous analysis of business requirements to inform their recommendations and insight.

Option 4) Cyber Security Analyst
A Cyber Security Analyst leads in the work to define, implement and maintain security products and systems within an organisation’s policies and service level agreements . They will need to analyse and understand the points of vulnerability within IT systems and a proactive and agile approach to maintain high levels of systems and organisational security. They will monitor security performance using tools, statistical reporting and analysis, using the output of monitoring to problem solve, propose improvements and implement changes to meet service level requirements. A Cyber Security Analyst leads technical implementation of security infrastructures and technical designs, including producing cost and timescale estimates and identifying risks. After implementation they take ownership for obtaining the information required to diagnose and resolve more complex problems and escalations such as security incidents and business recovery. They engage with third parties to jointly resolve in-depth product issues where necessary and completing cyber risk assessments .

Option 5) Data Analyst
The primary role of a data analyst is to collect, organise and study data to provide new business insight to a range of stakeholders . They are responsible for leading the provision of up-to-date, accurate and relevant data analysis for the organisation. They are typically involved with managing, cleansing, abstracting and aggregating data across the network infrastructure. They look for opportunities to build data driven insights into decision makin g. They have a current understanding of data structures, software development procedures and the range of analytical tools used to undertake a wide range of standard and custom analytical studies , providing data solutions to a range of business issues. They are comfortable supporting teams and colleagues with analytics and report the results of data analysis activities making recommendations to improve business performance .

Option 6) Network Engineer
The primary role of a network engineer is to lead in the planning, design , installation, maintenance and support of communication networks within an organisation or between organisations. They take a proactive and agile approach to maintain high levels of network performance and availability for their users, such as staff, clients, customers and suppliers. They understand network configuration, cloud, network administration and monitoring tools , and give technical advice and guidance to their users . As part of their role they analyse system requirements to ensure the network and its services operate to desired levels with security at the heart of everything they do . They understand data traffic and transmission across the network and have a major role to play in ensuring network security and resilience . They are the key problem solver when networks fail and respond with resilience under pressure.

How it compares

At 48 months (about 4 years), it runs longer than the average degree-level apprenticeship (39 months across all 172 Level 6+ standards) — this is one of the bigger commitments on the register, and also one of the most established: it has existed since 2015 and is among the most-delivered degree apprenticeships in England.

The funding band — the most an employer's levy can pay for the training — is £27,000, above the £21,500 average for degree-level standards. None of that money passes through you, and you pay no tuition either way.

It's an integrated degree: the BSc (Hons) and the apprenticeship are one award, assessed together — the degree cannot be completed without passing the end-point assessment.

Typical job titles

Business analyst
Computing data analyst
Cyber security professional
It consultant
Network engineer
Software engineer

Entry requirements

Set by each employer, not the standard — typically A-levels or equivalent qualifications, with the real selection happening through application sifts and assessment centres.

What you come out with

Digital and Technology Solutions Professional — Level 6 (integrated degree). In practice: a BSc (Hons) awarded by your university, integrated with the apprenticeship certificate.
Professional recognition: British Computer Society — Registered IT Technician (RITTech). Some universities additionally have the degree itself accredited — worth checking on the specific course page.
Four years of full-time, progressive work experience — the part no full-time degree can match.

The six options

The standard is core-and-options: everyone covers a shared core, then one of 6 specialisms shapes your later years and your end-point assessment. Usually you and your employer agree the option during the programme — see the specialisms page for what each one means.

Software engineering professional
IT consultant professional
Business analyst professional
Cyber security professional
Computing data analyst professional
Network engineering professional

The assessed content

The official standard defines 15 core duties, 68 knowledge areas, 63 skills, 8 behaviours. This is the actual contract of the apprenticeship — everything the degree modules and your workplace evidence ultimately map back to.

Core duties 15

Critically analyse a business domain to identify opportunities for improvement
Analyse business and technical requirements to select and specify appropriate technology solutions.
Identify organisational information requirements and model data solutions using conceptual data modelling techniques
undertake a security risk assessment for a simple IT system to identify, analyse and evaluate security threats and hazards to planned and installed information systems or services (e.g. Cloud services) and provide recommendations.
apply organisational theory, change management, marketing, strategic practice, human resource management and IT service management to technology solutions development.
follow a systematic methodology for initiating, planning, executing, controlling, and closing technology solutions projects using industry standard processes, methods, techniques and tools to execute and manage projects.
plan, design and manage computer networks with an overall focus on the services and capabilities that network infrastructure solutions enable in an organisational context. Identifies network security risks and their resolution.
communicate effectively with a range of stakeholders both technical and non-technical at all levels of influence and responsibility.
devise and engage in continuous professional development
conduct and present effective research using engaging, well-structured approaches
design, build and test high-quality software solutions.
apply engineering principles to all stages of the software development process, from requirements, analysis and design, development and data requirements
Apply skills and knowledge of systems development, cyber security, data, AI and infrastructure in the creation of digital solutions.
Analyse ethical and legal implications of digital and technology solutions and make recommendations as a result of this analysis. For example, with regard to artificial intelligence or the use of personal data.
Mentor others in the development and implementation of digital and technical solutions.

Knowledge 68

How organisations adapt and exploit digital technology solutions to gain a competitive advantage.
The principles of strategic decision making concerning the acquisition or development of digital and technology solutions. For example business architecture approaches such as capability models and target operating models.
Principles of estimating the risks and opportunities of digital and technology solutions.
Techniques and approaches involved in creating a business case for new digital and technology solutions. For example journey, product and capability mapping and value chains.
A range of digital technology solution development techniques and tools.
The approaches and techniques used throughout the digital and technology solution lifecycle and their applicability to an organisation’s standards and pre-existing tools.
The roles, functions and activities within digital technology solutions within an organisation.
How teams work effectively to produce digital and technology solutions.
The concepts and principles of leadership.
Management techniques and theories. For example, effective decision making, delegation and planning methods, time management and change management.
The nature and scope of common vulnerabilities in digital and technology solutions. For example, the risks of unsecure coding and unprotected networks.
The role of data management systems within Digital and Technology Solutions.
Principles of data analysis for digital and technology solutions.
A range of quantitative and qualitative data gathering methods and how to appraise and select the appropriate method.
Principles of estimating cost, and time resource constraints within digital and technology solutions activities.
Fundamental computer networking concepts in relation to digital and technology solutions. For example, structure, cloud architecture, components, quality of service.
Reporting techniques, including how to synthesise information and present concisely, as appropriate to the target audience.
Techniques of robust research and evaluation for the justification of digital and technology solutions.
Relevant legal, ethical, social and professional standards to a digital and technology solution. For example, Diversity, Accessibility, Intellectual Property, Data Protection Acts, Codes of Practice, Regulatory and Compliance frameworks.
Sustainable development approaches as applied to digital and technology solutions such as green computing.
How to operate at all stages of the software development life cycle and how each stage is applied in a range of contexts. For example, requirements analysis, design, development, testing, implementation.
Principles of a range of development techniques, for each stage of the software development cycle that produce artefacts and the contexts in which they can be applied. For example UML, unit testing, programming, debugging, frameworks, architectures.
Principles of a range of development methods and approaches and the contexts in which they can be applied. For example Scrum, Extreme Programming, Waterfall, Prince2, TDD.
How to interpret and implement a design, compliant with functional, non-functional and security requirements including principles and approaches to addressing legacy software development issues from a technical and socio-technical perspective. For example architectures, languages, operating systems, hardware, business change.
The factors affecting product quality and approaches for how to control them throughout the development process. For example security, code quality, coding standards.
How to select and apply a range of software tools used in Software Engineering.
Approaches to the interpretation and use of artefacts. For example UML, unit tests, architecture.
Approaches to effective team work and the range of software development tools supporting effective teamwork. For example, configuration management, version control and release management.
Principles of different consulting methodologies. For example issue-based, and hypothesis based.
How consulting interfaces with project management, business analysis and business management.
Principles of change management within organisations.
The barriers to solving digital and technology problems or maximising opportunities.
Approaches to presenting recommendations to stakeholders and influencing action.
Approaches to analytical and critical thinking to define business problems objectively and create value for the client.
Questioning strategies and active listening to ensure all requirements are gathered.
The ethical and legal requirements in client and provider relationships.
Elicitation and Collaboration approaches, including how to prepare for and conduct elicitation activities and confirm the results.
Approaches to Requirements Life Cycle Management including how to manage and maintain requirements and design information from inception to retirement of a product.
Principles of Strategy Analysis, including how to identify the business need, address that need, and align the change strategy within the organisation.
Solution Evaluation, including how to assess the performance of and value delivered by a solution and to recommend improvements on increasing values.
Legislation and industry standards relevant to Business Analysis in the organisation and sector.
The purpose and value of quality assurance techniques.
A range of Business Analysis investigative techniques.
Approaches to change control and requirements management.
Principles of cyber security tools and techniques.
Principles of quantitative and qualitative risk management theory including the role of risk stakeholders.
Concepts and approaches to cyber security assurance.
Key legislative frameworks and the regulatory landscape for cyber security including Data Protection Act 2018 , Network Information System Directive 2018, Regulation of Investigatory Powers Act 2000, ISO 27001.
Approaches to incident response and management including escalation and investigation of cyber security breaches and their root cause.
Ethical principles and codes of good practice of at least one significant cyber security professional body and the ethical responsibilities of a cyber security professional.
Principles of common security architectures and methodologies.
Approaches to deployment of cyber security technology components in digital systems to provide security functionality. For example hardware and software to implement security controls.
The barriers that exist to effective data analysis between analysts and their stakeholders and how to avoid or resolve these.
How to critically analyse, interpret and evaluate complex information from diverse datasets.
Data formats, structures, architectures and data delivery methods including “unstructured” data.
Sources of data such as files, operational systems, databases, web services, open data, government data, news and social media.
Approaches to data processing and storage, database systems, data warehousing and online analytical processing, data-driven decision making and the good use of evidence and analytics in making choices and decisions.
How Data Analytics operates within the context of data governance, data security, and communications.
How Data Analytics can be applied to improve an organisation’s processes, operations and outputs.
How data and analysis may exhibit biases and prejudice. How ethics and compliance affect Data Analytics work, and the impact of international regulations. For example, General Data Protection Regulation, Data Protection Act 2018.
The role and function of virtual or physical network components and functions and typical topologies and service architectures.
The main network protocols in use, their purpose, features and relationship to each other. For example, Ethernet, IP (Internet Protocol), TCP (Transmission Control Protocol), OSPF (Open Shortest Path First).
The benefits and risks of cloud computing and the common integration deployments (private, public, hybrid). Including the benefits and risks of virtualisation as a concept; key features of virtualisation and current cloud platforms available.
The main factors that affect network performance, and how to mitigate these on network performance by implementing changes to QoS. For example, Traffic Shaping, Policing, Queuing, Topology (physical and logical), and Network Policy (Traffic Analysis, DPI (Deep Packet Inspection).
Principles of failure modes in protocols. For example, why a protocol may ‘hang’ and the effect of data communication errors and approaches to addressing failures to optimise network performance.
Key security concepts. For example threats, vulnerabilities, exploits, detection and mitigation techniques, and security program elements such as user awareness, physical access control, multi-layer defence models.
SDN (Software Defined Networking) and Network Function Virtualisation Core Principles. For example, Control Plane Separation, flexibility, overlay networks, disassociation of software and hardware layers.
Key elements of mobile networks. For example RAN (Radio Access Network), EPC (Evolved Packet Core), IMS (IP Multimedia Subsystem) including some specific key functions such as S/P/U-Gateways and the concepts in communicating over free-space media such as interference, ground bounce, encryption and in mobile endpoint platforms such as tracking user location and roaming.

Skills 63

Analyse a business problem to identify the role of digital and technology solutions.
Identify risks, determine mitigation strategies and opportunities for improvement in a digital and technology solutions project.
Analyse a business problem in order to specify an appropriate digital and technology solution.
Initiate, design, code, test and debug a software component for a digital and technology solution.
Apply relevant standard processes, methods, techniques and tools. For example, ISO Standards, Waterfall, Agile in a digital and technology solution project.
Manage digital and technology solutions projects. For example, identifying and resolving deviations from specification, applying appropriate Project Management methodologies.
Work effectively within teams, leading on appropriate digital technology solution activities.
Apply relevant organisational theories. For example, change management principles, marketing approaches, strategic practice, and IT service management to a digital and technology solutions project.
Apply relevant security and resilience techniques to a digital and technology solution. For example, risk assessments, mitigation strategies.
Initiate, design, implement and debug a data product for a digital and technology solution.
Determine and use appropriate data analysis techniques. For example, Text, Statistical, Diagnostic or Predictive Analysis to assess a digital and technology solutions.
Plan, design and manage simple computer networks with an overall focus on the services and capabilities that network infrastructure solutions enable in an organisational context.
Report effectively to colleagues and stakeholders using the appropriate language and style, to meet the needs of the audience concerned.
Research, investigate, and evaluate innovative technologies or approaches in the development of a digital and technology solution.
Apply relevant legal, ethical, social and professional standards to a digital and technology solution.
Identify and define software engineering problems that are non-routine and incompletely specified.
Provide recommendations as to the most appropriate software engineering solution.
Use appropriate analysis methods, approaches and techniques in software engineering projects to deliver an outcome that meets requirements.
Implement software engineering projects using appropriate software engineering methods, approaches and techniques.
Respond to changing priorities and problems arising within software engineering projects by making revised recommendations, and adapting plans as necessary, to fit the scenario being investigated.
Determine, refine, adapt and use appropriate software engineering methods, approaches and techniques to evaluate software engineering project outcomes.
Evaluate learning points arising from software engineering work undertaken on a project including use of methods, analysis undertaken, selection of approach and the outcome achieved, in order to identify both lessons learnt and recommendations for improvements to future projects.
Extend and update software development knowledge with evidence from professional and academic sources by undertaking appropriate research to inform best practice and lead improvements in the organisation.
Analyse client needs and determine how to advise them strategically through improved business processes, new ideas, or technology solutions.
Effectively communicate value add to the client through a variety of media. For example, presentations, written reports, Storytelling in a professional setting through performing socio-technical process improvements in a range of environments.
Make evidence based recommendations taking into account risks, costs, and benefits.
Participate in walk-throughs for Information Technologies, to identify, document and evaluate key risks within a client’s organisation.
Perform stakeholder analysis to identify, determine and deepen understanding of system requirements and develop client relationships.
Effect change within an organisation through evaluation of a new system, process or initiative.
Ensure legal and ethical requirements are accommodated in the development of digital and technology solutions.
Evaluate the success of new systems, processes, or initiatives.
Use requirements elicitation, analysis and documentation to produce an acceptable solution for business problems or further opportunities.
Conduct Process Analysis, Definition, Mapping and Modelling within a business situation without supervision.
Produce Use Cases which are of value to all stakeholders of a system.
Use tools and benchmarking to support modelling and requirements gathering and recommend approaches to team members as required.
Produce a business case to scope a proposed project including business benefits and recommendations.
Use products of analysis in the design and development of a system.
Evaluate the impacts of model selection and how they inter-relate with each other when generating business analytics.
Recommend and use appropriate software tools to implement Business Analysis tasks and outcomes.
Discover, identify and analyse security threats, attack techniques and vulnerabilities and recommend mitigation and security controls.
Undertake security risk assessments for complex systems without direct supervision and propose a remediation strategy relevant to the context of the organisation.
Recommend improvements to the cyber security approaches of an organisation based on research into future potential cyber threats and considering threat trends.
Manage cyber security risk.
Use appropriate cyber security technology, tools and techniques in relation to the risks identified.
Lead cyber security awareness campaigns and evaluate their effectiveness.
Analyse cyber security requirements against other design requirements for systems or products, identify conflicting requirements and recommend appropriate solutions with clear explanation of costs and benefits.
Lead the design and build of systems in accordance with a security case to address organisational challenges.
Define Data Requirements and perform Data Collection, Data Processing and Data Cleansing.
Apply different types of Data Analysis, as appropriate, to drive improvements for specific business problems.
Find, present, communicate and disseminate data analysis outputs effectively and with high impact through creative storytelling, tailoring the message for the audience. Visualise data to tell compelling and actionable narratives by using the best medium for each audience, such as charts, graphs and dashboards.
Identify barriers to effective analysis encountered both by analysts and their stakeholders within data analysis projects.
Apply a range of techniques for analysing quantitative data such as data mining, time series forecasting, algorithms, statistics and modelling techniques to identify and predict trends and patterns in data.
Apply exploratory or confirmatory approaches to analysing data. Validate and and test stability of the results.
Extract data from a range of sources. For example, databases, web services, open data.
Analyse in detail large data sets, using a range of industry standard tools and data analysis methods.
Identify and collate stakeholder needs in relation to computer network requirements, plans and designs.
Plan, design, document, and develop the relevant elements of a computer network within an organisation or between organisations, taking into account customer requirements (performance, scale), constraints (budget, equipment availability), and define policies for their use.
Monitor performance and ensure networks are configured correctly and perform as expected by designers or architects. Undertake capacity management and audit of IP addressing and hosted devices.
Investigate, troubleshoot and resolve data network faults in local and wide area environments, using information from multiple sources, Physically or Remotely by console connection. Recommend and implement short term fixes to restore service and, or, quality of experience and recommend longer term changes to prevent recurrence or reduce impact of future occurrences.
Implement computer networks from a design including testing and validation. This includes populating variables in configurations, for example, IP addresses and subsequent application of configuration to equipment such as routers, switches, firewalls.
Secure network systems by establishing and enforcing policies, and defining and monitoring access. Support and administer firewall environments in line with IT security policy.
Research and evaluate emerging network technologies and assess relevance to current network requirements. Provide an objective opinion on how new features and technologies may be incorporated as required by the organisation.
Investigate security concerns or attacks. For example, Distributed Denial of Service (DDOS), port scanning, assessing key metrics and indicators, evidencing the chosen steps to mitigate.

Behaviours 8

Has a strong work ethic and commitment in order to meet the standards required.
Reliable, objective and capable of both independent and team working.
Acts with integrity with respect to ethical, legal and regulatory requirements ensuring the protection of personal data, safety and security.
Commits to continuous professional development; maintaining their knowledge and skills in relation to developments in digital and technology solutions that influence their work.
Interacts professionally with people from technical and non-technical backgrounds. Presents data and conclusions in an evidently truthful, concise and appropriate manner.
Participates in and shares best practice in their organisation, and the wider community for aspects relevant to digital and technology solutions.
Maintains awareness of trends and innovations in the subject area, utilising a range of academic literature, online sources, community interaction, conference attendance and other methods which can deliver business value.
Champions diversity and inclusion in their work ensuring that digital technology solutions are accessible.

Official sources

Official standard page (Skills England)
Registered training providers (Find apprenticeship training)
This standard on the main site — alongside all 172 degree-level standards

Occupational summary, duties, knowledge, skills and behaviours reproduced from the ST0119 apprenticeship standard (last updated 2023-09-01) — contains public sector information licensed under the Open Government Licence v3.0. There is also a Level 7 "specialist" version of this standard for experienced professionals.