Free Practice CIPS L6M7 Exam Questions 2025

Henry is the Head of IT at Purple Rain Ltd and is presenting a case to the Senior Leadership Team to ask for more investment in the company's IT strategy. Henry believes the company has an issue with data resilience and is asking for more money to be invested in this. He has completed a Business Impact Assessment (BIA) to better understand what data the company holds. Jon is the Head of Procurement and has listened intently to Henry's presentation. He has decided to go back to his department and complete a thorough risk assessment, as he is aware his team holds a lot of data on suppliers and contracts. The CEO of Purple Rain, Roger Nelson, has asked Henry about next steps in order to protect the company from further risks associated with the IT strategy. Data is currently stored on servers located at Purple Rain's Headquarters. The server room is locked at all times of the day and is only accessible to staff members who have a key. The building itself is extremely secure with CCTV systems located both inside the server room and outside it. However, the server room is prone to overheating. What is the biggest risk to the data? 

One way that an organisation can protect itself from many cyber-attacks is simply by disconnecting critical machines from outside networks. This is known as what

Ramesh is Head of Procurement at Wiggle Waggle Ltd. He is using a tool for predictive modeling and statistical analysis to inform upon future strategic business decisions. Which of the following is he using?  

Bruno is the newly appointed Head of Operations of a manufacturing organisation based in Coventry that makes children's toys. The company was established in 1958 and has many years of records of toys sold. Some of the early records are paper-based, but data from the 1990s onwards is computerbased. Bruno believes that as the company acquired the data legally, it should be stored in the office and can be used for marketing purposes. Is this true?

One way that an organisation can protect itself from many cyber-attacks is simply by disconnecting critical machines from outside networks. This is known as what