Exam guide

1. Paper structure

Your syllabus grade comes from all three papers. The grade threshold tables put Paper 1 at about 40% of the weighted total and each practical paper at about 30%.

Changes over 2022–2026

• 2022 (May/June and Oct/Nov) was the last session of the old syllabus. Paper 1 was 2 hours and out of 100. Paper 2 was called "Data Manipulation" and included a mail merge task. Paper 3 was called "Data Analysis and Website Authoring".
• From 2023 the new syllabus applies. Paper 1 is 1 h 30 min and out of 80. Both practical papers are 2 h 15 min and out of 70. Mail merge has gone from Paper 2.
• The theory paper has moved away from software-skill topics. In 2022, 20–44% of Paper 1 marks were on document production, spreadsheets, databases, file management, proofing and similar areas. From 2023 to 2025 these areas took 1–15%. They rose to 20% in June 2026, through spreadsheet formulas, web page tables and anchors, and URLs.
• Oct/Nov has one variant of each practical paper (02 and 03). May/June has two (21/22 and 31/32).

What the practical papers contain (variant 2, every session):

• Paper 2:
  • Evidence Document: a word-processed file where you paste screenshots as proof of work. You print it at the end.
  • Document (22–28 marks): open a supplied .rtf file and save it in the software's own format. Add headers and footers with automated fields, and create, modify and apply paragraph styles to a corporate house style. Then enter titles, change page layout (columns, section breaks), insert, resize, crop or reflect and wrap images, and edit and format tables. Finish by spell checking and proofreading (no widows, orphans or blank pages).
  • Presentation (14–20 marks): edit a master slide, add and format slides, and insert an image. Build a chart from given data, with titles, labels and legend set as instructed. Print the slides or handouts.
  • Mail merge (8–9 marks, 2022 only).
• Paper 3:
  • Spreadsheet (29–48 marks): format and merge cells, add automated headers and footers, and create named ranges. Write formulas with absolute and relative references and replicate them. Functions in the mark schemes include IF, SUMIF and AVERAGEIF, SUM, MAX, MIN, AVERAGE and ROUNDDOWN, plus lookups (VLOOKUP, HLOOKUP, XLOOKUP). Some sessions also ask you to sort data, apply conditional formatting or make a chart. Print once showing formulae (row and column headings shown, landscape) and once showing values.
  • File management (about 1 mark): make a folder, copy only the listed files into it, and screenshot the folder showing file sizes and image dimensions.
  • Image editing (2023-MJ and 2026-MJ).
  • Web page (24–39 marks): build a page from a single table with a given cell structure and set width. Then place images, and video with controls and fallback text, enter text in set heading styles, and make hyperlinks (to another page, a new window, or an email with a subject line). Finally attach and edit an external stylesheet, use classes or inline styles, and paste the HTML source into the Evidence Document.

2. Topic weights

Shares are of all 760 sampled Paper 1 marks. The 2023+ column covers the seven new-syllabus papers (560 marks). "Sessions examined" counts sessions out of 9.

The six "computer systems" topics (applications, networks, types and components, systems life cycle, safety and security, input/output devices) carry about 80% of Paper 1 since 2023.

Biggest subtopics by marks (all sessions):

• security threats and prevention (phishing, pharming, viruses, shoulder surfing, anti-malware): 36 marks;
• user interfaces (GUI, CLI, gesture, dialogue-based): 29;
• direct data entry devices (bar codes, RFID, QR): 28;
• eSafety and data protection: 27;
• passwords and authentication (two-factor, biometrics, tokens): 24;
• systems design (data capture forms, file structures): 24;
• input devices: 23;
• cloud computing and file sharing: 23;
• types of computer (phablets, smartphones, laptops): 23.

3. Bankers

Examined in almost every session:

• Input and output devices (9/9), especially RFID vs bar codes and other direct data entry devices (6/9; RFID itself in 5). Also sensors, actuators, ADC and DAC (5/9) and choosing output devices for a scenario (5/9).
• Safety and security (9/9). Security threats (shoulder surfing, malware, phishing, pharming, viruses) came up in every session from 2024-MJ to 2026-MJ. Physical safety (trailing cables, electrocution, drinks near equipment) appeared in 3/9.
• Networks (9/9): network devices (switch, router, modem, NIC), LAN/WLAN/WAN, passwords and authentication, cloud computing, and electronic or web-conferencing.
• ICT applications (9/9): a different application each time, such as online booking (3 of the last 6 sessions), banking and ATMs, expert systems, robots, monitoring and control, satnav, 3D printing and ePublications.
• Types and components of computer systems (every 2023+ session): RAM and ROM, user interfaces (5/9) and types of computer (5/9; phablet vs smartphone twice).
• The systems life cycle (8/9): analysis methods, form and file design, validation checks, test data (normal, abnormal, extreme), implementation methods (parallel, direct, pilot), and technical documentation.
• Health problems from computer use (5/9) and validation and verification (verification or both together in 5/9).

4. Rarely tested

• Document production, layout, styles, images and databases: on Paper 1 only in 2022. They are now tested almost entirely on the practical papers.
• Spreadsheets (formula vs function): 2022-MJ and 2026-MJ only.
• Audience (software copyright): 2/9, 2 marks each time.
• File management (generic file formats: pdf, rtf, css): 2/9, but worth 5–6 marks when it appears.
• Intranet and extranet: once (2023-MJ). Computer modelling: not since 2023-MJ.
• Satellite systems, medical uses, internet shopping and the effects of IT on working patterns: once each.
• Emerging technologies (drones, VR/AR): 2023-ON and 2024-MJ only.
• Graphs and charts, presentations: never on Paper 1 in the sample.

5. Trends

• Safety and security is growing fast. It was worth 2–11 marks per paper up to 2024. It reached 20 marks in 2025-MJ, 12 in 2025-ON and 20 in 2026-MJ, a quarter of the paper. Expect phishing vs pharming, viruses, SSL, encryption, eSafety (social media, online gaming) and data protection.
• The systems life cycle was missing from 2026-MJ for the first time. It had been worth 6–21 marks every other session, so it is very likely to return.
• Software-skill topics are creeping back into the theory paper: web page tables and anchors, formula vs function, internet vs WWW and URL parts (16 marks in 2026-MJ).
• Topics repeat within a year or two:
  • robots: 2022-MJ, 2025-ON;
  • phablet vs smartphone: 2023-ON, 2024-ON;
  • dialogue-based interfaces: 2024-ON, 2026-MJ;
  • ePublications: 2023-MJ, 2024-ON;
  • expert systems: 2024-MJ, 2024-ON;
  • pharming: 2025-MJ, 2025-ON;
  • online booking: 2023-ON, 2025-ON, 2026-MJ.
• Fewer, longer questions in 2026: 24 parts (27–32 before), with 30 marks on parts worth 6 or more.
• The examiner reports often note "new topics" (for example why file structures and output formats must be tested, in 2025). Learn the whole syllabus, not just past questions.

6. Question styles

• Describe (about 23% of marks), Explain (19%), Discuss (15%) and State (15%) dominate. Identify, Give, Write down, Compare/Contrast, Evaluate, Circle and Tick make up the rest.
• Discuss and Evaluate questions are 6 marks (one 8-mark discuss in 2022). Typical forms: "benefits and drawbacks of using X rather than Y", or "advantages and disadvantages to the company". You need points on both sides, each expanded, and ideally a conclusion.
• Compare or contrast (4–6 marks), for example RFID vs bar code readers, input vs output devices, internal memory vs backing storage, GUI vs dialogue interface. You must give similarities and differences in sentences that link the two things.
• Short openers: "circle two", "tick one", or finish a sentence with the right device, check or term.
• Scenario items: split a URL into protocol, domain, folder and file name. Pick a validation check for each field of a table. Give extreme or abnormal test data with a reason.
• "State three/four" with numbered lines: only the first answer on each line is marked.

7. Common mistakes

From the examiner reports (2022-MJ, 2022-ON, 2023-MJ, 2025-MJ):

• Brand names. Answers that name a product instead of the generic type (spreadsheet, cloud storage) get no credit.
• Repeating the question. For example "SSL is secure socket layer" when that was in the stem, or "measurement software measures things".
• Vague one-word reasons like "quicker" or "cheaper". Add "because…" and a real consequence.
• Splitting a discuss or compare answer into two columns. Pros in one and cons in the other is not a comparison and loses marks. Write in prose.
• Not reading the scenario. Common slips:
  • answering about car satnav when the question was about walkers;
  • describing inputs and outputs when the ATM question asked for processing;
  • treating "trailing leads" as an internet scam;
  • writing about how to test instead of why.
• Verification confusion. It checks that data was copied correctly, not that it is correct. "Verification routines" are not a thing. Visual verification needs the source document. Neither validation nor verification can guarantee correct data.
• Network devices mixed up: hub vs switch, modem vs router, and bridges given where they do not fit.
• Cloud answers too vague. "Stored on the internet" or just "hacking" is not enough. Say online storage on remote servers, accessed through an account, with copies held in many places.
• Phishing vs pharming. Pharming is malicious code that redirects a typed URL to a fake site. Phishing starts with a genuine-looking email or link. Both aim to obtain your personal data.
• Extra answers beyond the number asked for, or written outside the lines, are ignored. Light blue ink and poor handwriting cost marks.
• Practical papers:
  • typing bold text inaccurately, including capitals, spaces and punctuation;
  • mixing up serif and sans-serif;
  • leaving your name and candidate details off printouts;
  • cropped or tiny screenshots;
  • attaching the stylesheet outside the <head> section;
  • choosing the wrong spreadsheet function;

8. Grade thresholds

Paper 12 (Theory) minimum raw marks

An A on the theory paper has needed only 37–51% of the raw marks. The practical papers need much higher raw marks for an A: Paper 22/02 needed 49–60 out of 70–80 and Paper 32/03 needed 43–59.

Overall syllabus thresholds (weighted marks; option with Papers 12, 22, 32 in May/June, or 12, 02, 03 in Oct/Nov)

An A* has needed about 69–75% of the weighted total. June 2026 had the highest C threshold of the period (124/280).

9. Revision priorities for Oct/Nov 2026 and 2027

1. Safety and security, in depth. This is now the largest single block:
   • phishing vs pharming (and smishing and vishing), viruses and malware, with the precautions for each;
   • SSL and how you can tell it is in use, encryption, digital certificates, firewalls;
   • eSafety on social media, online gaming and email;
   • data protection principles and personal data;
   • physical safety risks with their fixes.
2. The systems life cycle. It was missing in June 2026 and is due back:
   • analysis methods (observation, interviews, questionnaires, documents) with their pros and cons;
   • designing forms, file structures and validation routines;
   • test data with examples and why each element is tested;
   • implementation methods compared;
   • technical vs user documentation.
3. Input, output and storage devices in context: RFID vs bar codes, sensors and ADC/DAC, choosing output devices, RAM vs ROM, SSD vs magnetic vs optical, and backing storage vs memory.
4. Networks: what a switch, router, modem and NIC each do; WLAN, LAN and WAN; Wi-fi vs Bluetooth set-up; cloud storage; authentication methods; electronic conferencing.
5. ICT applications: prepare a balanced "benefits and drawbacks" answer for each of these:
   • online booking, banking and ATMs;
   • expert systems (the parts and how they work);
   • robots, monitoring and control, computer modelling;
   • satnav, recognition systems, 3D printing, ePublications.
6. Types of computer and user interfaces: GUI, CLI, dialogue-based and gesture-based interfaces; phablets, smartphones and laptops; VR vs AR.
7. Communication and website authoring basics: internet vs WWW, URL parts, search engines, email features (cc, bcc, groups, spam), the head and body sections, metatags, tables and anchors, and the three web development layers.
8. Exam technique: practise 6-mark discuss answers in prose, with both sides and a conclusion. Practise compare answers with linked similarities and differences. Use no brand names.
9. For the practical papers: practise full past papers under time. Above all, accurate data entry, styles, database reports with calculated fields and two-level sorts, IF and lookup functions, named ranges, formula printouts, and HTML tables with an external stylesheet.