PDF (New 2026) Actual CIPS L6M7 Exam Questions [Q13-Q29]

NO.13 In order to keep data secure, which three things should be considered?

NO.14 Alicia is aware of the dangers of IT hacking and has therefore created a risk assessment to assess how susceptible her business is to this threat. In her risk assessment, she has considered her employees and suppliers. Is this the correct thing to do?

NO.15 In relation to cyber security, what would be the benefit of a public sector organisation joining a Group Purchasing Organisation (GPO)?

NO.16 Below are details of five companies that have security issues related to their IT network or data storage. Each company is proposing a remedy to resolve the issue.
Instructions:
Drag and drop the correct Security Issue and Remedy into the table for each company. Some options may not be used.

NO.17 Henry is the Head of IT at Purple Rain Ltd and is presenting a case to the Senior Leadership Team to ask for more investment in the company’s IT strategy. Henry believes the company has an issue with data resilience and is asking for more money to be invested in this. He has completed a Business Impact Assessment (BIA) to better understand what data the company holds. Jon is the Head of Procurement and has listened intently to Henry’s presentation. He has decided to go back to his department and complete a thorough risk assessment, as he is aware his team holds a lot of data on suppliers and contracts. The CEO of Purple Rain, Roger Nelson, has asked Henry about next steps in order to protect the company from further risks associated with the IT strategy. Data is currently stored on servers located at Purple Rain’s Headquarters. The server room is locked at all times of the day and is only accessible to staff members who have a key. The building itself is extremely secure with CCTV systems located both inside the server room and outside it. However, the server room is prone to overheating.
What is the biggest risk to the data?

NO.18 Which of the following measures prevents access to a system?

NO.19 Bruno is the newly appointed Head of Operations of a manufacturing organisation based in Coventry that makes children’s toys. The company was established in 1958 and has many years of records of toys sold. Some of the early records are paper-based, but data from the 1990s onwards is computer-based. Bruno believes that as the company acquired the data legally, it should be stored in the office and can be used for marketing purposes. Is this true?

NO.20 Henry is the Head of IT at Purple Rain Ltd and is presenting a case to the Senior Leadership Team to ask for more investment in the company’s IT strategy. Henry believes the company has an issue with data resilience and is asking for more money to be invested in this. He has completed a Business Impact Assessment (BIA) to better understand what data the company holds. Jon is the Head of Procurement and has listened intently to Henry’s presentation. He has decided to go back to his department and complete a thorough risk assessment, as he is aware his team holds a lot of data on suppliers and contracts. The CEO of Purple Rain, Roger Nelson, has asked Henry about next steps in order to protect the company from further risks associated with the IT strategy. Data is currently stored on servers located at Purple Rain’s Headquarters. The server room is locked at all times of the day and is only accessible to staff members who have a key. The building itself is extremely secure with CCTV systems located both inside the server room and outside it. However, the server room is prone to overheating.
What is Henry’s primary concern?

NO.21 Which of the following is an International Standard in Security Management Systems?

NO.22 It is important for data to be quality controlled. One important aspect of this is for data to be contemporaneous.
What does this mean?

NO.23 Francis bought a car 4 years ago and is unsure if the company has any data on her. What can Francis do?

NO.24 Which of the following are benefits of using smart sensors in a manufacturing factory? Select ALL that apply.

NO.25 The speed at which data can be transferred and accessed over the internet is known as … ?

NO.26 Mo works in the finance department of Bubble Bear Ltd and is responsible for paying invoices to suppliers. He is conscious that the data he receives may include errors, omissions, and duplications. He wants to use IT to check the integrity of the data, as manual tests are time-consuming.
What action should Mo take?

NO.27 Henry is the Head of IT at Purple Rain Ltd and is presenting a case to the Senior Leadership Team to ask for more investment in the company’s IT strategy. Henry believes the company has an issue with data resilience and is asking for more money to be invested in this. He has completed a Business Impact Assessment (BIA) to better understand what data the company holds. Jon is the Head of Procurement and has listened intently to Henry’s presentation. He has decided to go back to his department and complete a thorough risk assessment, as he is aware his team holds a lot of data on suppliers and contracts. The CEO of Purple Rain, Roger Nelson, has asked Henry about next steps in order to protect the company from further risks associated with the IT strategy. Data is currently stored on servers located at Purple Rain’s Headquarters. The server room is locked at all times of the day and is only accessible to staff members who have a key. The building itself is extremely secure with CCTV systems located both inside the server room and outside it. However, the server room is prone to overheating.
What would Procurement’s main concern be?

NO.28 Identifying patterns in data using data from more than one source is commonly known as…?

NO.29 Jamila is the Head of Procurement at Big Smiles Ltd. A few years ago, e-procurement systems were introduced, which has led to huge efficiency and transparency gains for the organisation. The tools that Jamila’s team use include a PO system and supplier KPI monitoring system, which are accessed through a web portal. Which of the following statements are true?