An algorithm is a precise, step-by-step set of instructions for solving a problem or completing a task. It must be unambiguous, finite (it stops eventually) and produce a correct result for all valid inputs. Algorithms can be shown as pseudocode, flowcharts or written descriptions.
AQA expects four core skills.
You need to be able to read, trace and write algorithms in AQA pseudocode and flowcharts, using sequence, selection (if/else) and iteration (for, while, do until). Trace tables are used to track variable values line by line as an algorithm runs, and are the standard way to check your understanding and find errors (bugs).
This topic is about how programs actually work under the hood: sequence, selection and iteration, the three core data types, arrays, string handling, file handling, SQL basics, and validation. AQA expects you to trace code by hand and to write short programs in pseudocode or your chosen language (Python is most common).
Computers are built from transistors that are either on or off, so they can only reliably store two states: 1 and 0. This is called binary (base 2). Everything a computer stores, text, numbers, images, sound, is ultimately just patterns of binary digits (bits).
Each bit position in an 8-bit binary number is worth a power of 2, reading left to right: 128, 64, 32, 16, 8, 4, 2, 1. To convert binary to denary, add up the place values where there is a 1. To convert denary to binary, subtract the largest place value that fits, repeatedly, marking 1s and 0s as you go.
Add binary numbers column by column like normal addition, carrying when a column totals 2 or more (1+1=10, carry the 1). If an 8-bit register cannot hold the result of an addition, this is called overflow, and it causes an error because the number is too big to store.
Hexadecimal (base 16) uses digits 0 to 9 then A to F (A=10 up to F=15). It is used because it is a much shorter way of representing binary, one hex digit exactly represents one nibble (4 bits), so a byte is always 2 hex digits. Hex is used for MAC addresses, colour codes (like #FF0000), and memory addresses because it is easier for humans to read than long strings of 1s and 0s.
Characters are stored using a code that maps each character to a binary number. ASCII uses 7 or 8 bits, giving 128 or 256 possible characters, enough for English letters, numbers and symbols. Unicode uses more bits (commonly 16), allowing over 100,000 characters, so it can represent every language and symbol in the world, including emoji.
A bitmap image is stored as a grid of pixels. Each pixel's colour is stored as a binary number. Colour depth (bits per pixel) determines how many colours are possible, more bits means more colours but a bigger file. Resolution (the number of pixels) also affects file size and image quality, higher resolution means more pixels and a larger file.
Sound is analogue in the real world, so it must be sampled to be stored digitally. Sample rate is how many samples are taken per second (measured in Hz). Bit depth is how many bits are used to store each sample. Higher sample rate and higher bit depth both improve sound quality but increase file size.
The CPU (Central Processing Unit) carries out instructions from programs, following the fetch-decode-execute cycle non-stop while the computer is on.
Common mistake: mixing up MAR (holds an address) and MDR (holds the actual data/instruction).
Most computers use Von Neumann architecture: one memory stores both data and instructions, and they travel along shared buses (address bus, data bus, control bus). The system clock generates pulses that pace the fetch-execute cycle.
Three main factors affect CPU performance:
Common mistake: assuming clock speed alone determines speed — cache and cores matter just as much, and software must be optimised to benefit.
An embedded system is a computer built into a larger device to perform one specific, dedicated task (e.g. a washing machine controller, a satnav, a microwave). They are usually cheap, small, and have limited processing power compared to general-purpose computers.
Common mistake: saying RAM is 'permanent storage' — RAM is temporary and volatile; only secondary storage and ROM keep data without power.
Secondary storage is non-volatile and holds data/software long-term when the computer is off. Three types with trade-offs on capacity, speed, portability and durability:
Data is stored in bits (0 or 1); 8 bits = 1 byte. Storage scales in these approximate steps: 1000 bytes = 1 kilobyte, 1000 KB = 1 megabyte, 1000 MB = 1 gigabyte, 1000 GB = 1 terabyte. Know how to compare file sizes and storage capacity, and calculate how many files fit in a given space.
A LAN (Local Area Network) covers one site, like a school or office, and is owned by one organisation.
A WAN (Wide Area Network) covers a large geographical area and links multiple LANs, often using infrastructure owned by third parties (the internet is the biggest WAN).
Key hardware: a switch connects devices within a LAN and sends data only to the correct device using MAC addresses; a router connects different networks together and directs data between them using IP addresses; a wireless access point (WAP) lets devices connect without cables; a network interface card (NIC) lets a device connect to a network at all, wired or wireless.
Star topology: every device connects to a central switch. If one cable fails only that device drops off, but if the switch fails the whole network goes down. This is the standard setup in schools and offices.
Mesh topology: devices connect directly to many other devices, giving strong reliability with no single point of failure, but it is expensive and complex to set up.
Ethernet is the standard for wired connections; Wi-Fi is the standard for wireless. Wired is generally faster and more secure but less flexible.
TCP/IP is the protocol suite that governs how data is split into packets, addressed and reassembled across the internet.
Common application protocols: HTTP (unencrypted web browsing), HTTPS (encrypted web browsing, uses TLS), FTP (file transfer), SMTP/IMAP/POP3 (email sending and receiving).
The key common mistake is mixing up HTTP and HTTPS, or forgetting that HTTPS uses encryption via TLS, not just 's' for 'secure' with no mechanism behind it.
Malware includes viruses (attach to files, need a host to spread), worms (self-replicate across networks without a host), trojans (disguised as legitimate software) and ransomware (encrypts files and demands payment).
Social engineering exploits human weakness rather than technical flaws: phishing (fake emails/links to steal data) and shoulder surfing are the classic exam examples.
Brute-force attacks try every possible password combination; SQL injection inserts malicious SQL code into input fields to access or damage a database; DoS (Denial of Service) attacks flood a server with traffic to take it offline.
Firewalls monitor and filter incoming and outgoing traffic based on rules.
Encryption scrambles data so it is unreadable without a key, protecting data in transit.
Strong passwords, user access levels and biometric authentication reduce unauthorised access.
Physical security (locked server rooms) and regular software updates/patches close known vulnerabilities.
A common exam mistake is calling a firewall 'anti-virus' -- they are different: anti-virus detects and removes malware already on a device, a firewall controls network traffic.
Computing has huge impact on individuals, society and the environment. AQA expects you to discuss issues sensibly, giving both benefits and drawbacks, and to know the key laws that regulate computer use in the UK.
When asked to 'discuss', always give a balanced answer with at least one benefit and one drawback, and use precise legal or technical terms rather than vague statements.