Examiner’s comments

Criterion	A	B	C	D	Total
Marks available	4	6	8	8	26
Marks awarded	4	4	6	3	17

General comments

In criterion B the step-by-step process needs more detail beyond that given in the article. The relationship between the IT system and the concern needs to be explained.

Criterion C marks could be improved with more depth on concerns and further evaluation of the impact of the issue on the stakeholders.

Criterion D should focus on one solution, explain it in more depth and then evaluate its effectiveness.

Criterion A: The issue and stakeholder(s)

The issue of privacy has been described in relation to this IT system.

The patient has been identified as a primary stakeholder and there is a description of how the patient interacts with the IT system.

Criterion B: The IT concepts and processes

The student has shown some understanding beyond the material in the article. Appropriate components of the IT system and the relationship between the IT system and the concern have been identified.

Criterion C: The impact of the social/ethical issue(s) on stakeholders

The student has considered both stakeholders, focusing mainly on the advantages of the IT system. Unauthorized access is mentioned and could be developed further. There is evidence of analysis and evaluation. There is knowledge of relevant IT concepts.

Criterion D: A solution to a problem arising from the article

There is a description rather than an explanation of password protection. Firewalls and SSL have not been described. Further explanation is needed.