E1: Technology

Answer: B. An ERP system integrates core business processes — including finance, procurement, manufacturing, sales, human resources and supply chain — into a single system with a shared database, enabling real-time information flow across the organisation. It is far broader than a payroll application or a finance-only tool, and it is not a cybersecurity product. The integration it provides is its defining feature, eliminating duplicate data entry and providing a single source of truth.

Answer: C. Cloud computing delivers computing services — including software, storage and processing — over the internet via remote servers maintained by the provider, rather than on local hardware owned by the organisation. On-premise software runs on the organisation's own servers, a local area network connects devices within one location, and a legacy system is outdated software not necessarily related to how it is hosted. Cloud adoption has increased flexibility, reduced IT infrastructure costs and enabled access from anywhere.

Answer: D. RPA uses software robots (bots) that can replicate the actions of a human performing repetitive, rule-based tasks — such as entering data, matching invoices, running reports or processing transactions — much faster and with fewer errors. It does not involve physical robots, nor does it require the machine-learning capability of AI. While RPA can help detect anomalies, its primary purpose is task automation rather than cybersecurity. It is particularly impactful in finance where many processes involve structured, repetitive steps.

Answer: A. A blockchain is a distributed ledger technology in which transactions are recorded in blocks, each linked to the previous one (forming a chain) and replicated across a decentralised network of computers. Once recorded, entries are extremely difficult to alter, making the record highly transparent and tamper-resistant. It is not a centralised database controlled by one party, an advertising network, or a password tool. Blockchain has potential applications in finance for areas such as payments, smart contracts and audit trails.

Answer: B. Phishing attacks use deceptive emails, messages or websites that appear to come from a legitimate source (such as a bank or senior manager) to trick individuals into disclosing passwords, financial details or other sensitive information. Encrypting data and demanding payment is ransomware, overloading a server is a denial-of-service (DoS) attack, and intercepting communications is a man-in-the-middle attack. Phishing is one of the most common cybersecurity threats facing finance teams.

Answer: C. Artificial intelligence, particularly machine learning, can analyse large volumes of transaction data to identify patterns and flag anomalies that may indicate errors or fraud — a task that would be impractical for humans to perform manually at scale. Spreadsheet arithmetic, printing and emailing reports are standard IT functions with no AI component. AI in finance also includes natural language processing for contract review, predictive forecasting and automated report narrative generation.

Answer: D. The IoT is the network of physical objects — from factory sensors and smart meters to wearable devices and connected vehicles — embedded with sensors and software that allow them to collect and transmit data automatically. For finance, IoT enables real-time tracking of assets, inventory and energy usage, supporting more accurate and timely cost reporting. It is unrelated to websites, social media or internet regulation. The volume and speed of IoT data creates both opportunities and challenges for data management.

Answer: A. Ransomware is malicious software that encrypts files or entire systems, making them inaccessible, and demands a ransom (usually cryptocurrency) in exchange for the decryption key. It is distinct from phishing (which tricks users into revealing credentials), denial-of-service attacks (which overwhelm servers) and man-in-the-middle attacks (which intercept communications). Ransomware attacks can be extremely disruptive, particularly to finance systems where data continuity is critical.

Answer: B. Digital transformation is a wide-ranging change that embeds digital technology across an organisation's operations, culture and customer interactions — not merely upgrading hardware or going paperless. It involves reimagining processes, business models and ways of working using technologies such as cloud, AI, data analytics and automation. Simply replacing computers, switching to email or expanding the IT team are technical changes that fall well short of transformation. Digital transformation typically also requires cultural and capability changes, not just technology investment.

Answer: C. SaaS delivers software applications over the internet — the provider hosts and maintains the application on its own infrastructure and users access it through a web browser, typically paying a monthly or annual subscription. This contrasts with on-premise software, which the organisation installs and manages on its own servers. SaaS has grown rapidly because it reduces upfront IT costs, simplifies updates and enables access from any location. Many modern finance applications (accounting systems, planning tools) are delivered as SaaS.

Answer: D. Two-factor authentication requires a user to provide two distinct forms of verification before accessing a system — typically something they know (a password) plus something they have (a one-time code sent to their phone) or something they are (a fingerprint). This means that even if a password is stolen, the attacker cannot gain access without the second factor. 2FA significantly reduces the risk of unauthorised access and is widely recommended for financial systems holding sensitive data.

Answer: A. Social engineering manipulates people rather than technology — the attacker exploits trust, urgency or authority to trick individuals into taking actions that compromise security, such as changing payment details or transferring funds. It differs from ransomware (which uses malicious software), denial-of-service attacks (which overwhelm systems with traffic) and SQL injection (which exploits software vulnerabilities). Business email compromise and invoice fraud are common forms of social engineering targeting finance teams.

Answer: B. Technology has genuinely improved the finance function by automating high-volume, repetitive tasks (data entry, reconciliations, report generation), which reduces processing times, cuts errors caused by manual handling and frees finance professionals to focus on higher-value analytical and advisory work. It has not eliminated all errors (data quality and process design still matter), does not remove the need for professional judgement, and has not replaced all staff — though it has changed the skills mix required. Technology is an enabler of better finance, not a complete substitute for finance professionals.

Answer: C. Technology implementation carries real risks: data migrated from old to new systems may contain errors or be lost; staff may resist new ways of working, reducing the benefits realised; and new systems may not integrate smoothly with existing platforms, causing disruption. Technology projects also frequently run over time and budget, so there is definitely financial risk. Implementations require careful project management, training, testing and change management to realise the expected benefits.

Answer: D. Digital maturity reflects how effectively an organisation has embedded digital technologies into its operations to generate real benefits — not simply the cost of the software or the amount of technology deployed. A digitally mature finance function uses automation, analytics and cloud tools across its processes and has developed the people capabilities to exploit them, resulting in measurable improvements. Purchasing expensive software without changing processes, or reducing technology to payroll alone, would not constitute digital maturity.

Answer: A. An API defines how software applications can communicate — it is the interface that allows one system to send data to and receive data from another automatically, without manual intervention. In finance, APIs allow accounting systems, banking platforms, ERP systems and analytics tools to exchange data seamlessly, eliminating manual data re-entry and enabling real-time information flows. They are not hardware, regulatory bodies or administrative forms. Open banking, for example, uses APIs to allow third-party applications to access bank account data securely.

Answer: B. Open banking uses secure APIs to allow customers to share their banking data with authorised third-party providers (such as accounting software, budgeting apps or payment platforms), enabling services such as real-time bank feeds into accounting systems, automated reconciliation and new payment methods. It requires customer consent and is regulated. It does not make accounts publicly visible, remove fee regulation, or change bank ownership structures. Open banking has significant implications for how finance functions manage cash and payments.

Answer: C. E-commerce generates high volumes of digital transactions requiring fast, automated processing; creates new payment flows (digital wallets, card processing, buy-now-pay-later); and produces rich data on customer purchasing behaviour that finance can analyse. Finance must manage the revenue recognition, VAT and reconciliation challenges that e-commerce creates. E-commerce does not eliminate the need for finance, make reporting redundant, or create a need to manage physical stores. It does increase the pace and data intensity of finance work.

Answer: D. The principle of least privilege limits each user's access rights to only what is necessary for their role, minimising the potential damage if an account is compromised or an employee acts maliciously. Broad access rights create unnecessary risk — a finance clerk does not need access to HR records, and a purchasing officer does not need access to payroll. In finance systems, least-privilege access controls are an important internal control, complementing segregation of duties to prevent fraud and error.

Answer: A. Technology can significantly improve data quality by automating validation checks, enforcing data entry rules and reducing manual handling — but the principle of 'garbage in, garbage out' still applies. If underlying processes are flawed, data sources are unreliable or rules are badly designed, technology will process poor data faster without improving its quality. Data quality requires a combination of good process design, clear data ownership and appropriate technology. This is true across all sectors, not just manufacturing.

Answer: B. A smart contract is a computer programme stored on a blockchain that automatically executes predefined actions (such as releasing payment, transferring ownership or updating records) when specified conditions are satisfied, without requiring manual intervention or a third-party intermediary. It is distinct from a standard e-signature (which digitises a traditional contract but still requires human action) or an AI-negotiated contract. Smart contracts have potential applications in finance for automating payments, trade finance and audit trails.

Answer: C. Fintech (financial technology) describes the use of technology to improve, automate or disrupt the delivery of financial services — encompassing innovations such as mobile payments, peer-to-peer lending, robo-advisers, cryptocurrency exchanges and open banking platforms. It includes both new entrant companies challenging traditional financial institutions and technology adopted by established firms. It is not a regulatory body, a specific software product, or a financial instrument. Fintech is reshaping banking, insurance and investment management, with significant implications for how organisations manage their finances.

Answer: D. Traditional computing follows explicit rules written by programmers; machine learning systems instead learn patterns from large datasets and use those patterns to make predictions or decisions, improving as they are exposed to more data. This makes machine learning particularly powerful for tasks where rules are too complex to programme explicitly — such as detecting fraud patterns, forecasting demand or analysing unstructured text. Machine learning is not limited to finance and does not require special hardware. It is a subset of artificial intelligence.

Answer: A. Natural language processing allows computers to analyse, understand and produce human language — enabling applications such as automated narrative in financial reports, chatbots that answer finance queries, sentiment analysis of management commentary, and contract analysis tools that extract key terms from legal documents. It is not specifically about multi-currency payments, programming language translation, or replacing spreadsheets with speech. NLP is increasingly used in finance to extract insight from unstructured text data.

Answer: B. Cloud computing enables access to finance systems and data from any location with an internet connection, supporting remote and hybrid working, real-time collaboration between geographically dispersed teams and faster access to updated information. It does not eliminate cybersecurity risks (cloud systems face their own threats), is often less expensive than on-premise infrastructure (though this depends on scale and usage), and removes the need for organisations to manage physical servers (that responsibility shifts to the cloud provider). Reduced infrastructure burden and location-independent access are key benefits.

Answer: C. A data warehouse consolidates structured data from multiple source systems (such as ERP, CRM and HR systems), cleans and transforms it, and stores it in a format optimised for reporting and analysis rather than operational transaction processing. It is distinct from a data lake (which holds raw, unprocessed data), a backup service (which stores copies of files for recovery) and transaction processing systems (which handle live operations). Data warehouses underpin business intelligence and management reporting in many finance functions.

Answer: D. Technology governance defines how an organisation makes decisions about technology investment, monitors technology performance, manages technology risks (including cybersecurity and system failures) and ensures technology supports rather than undermines organisational objectives. It includes policies on acceptable use, data management, project approval and change management. It is not employee democracy, government regulation or physical security, though physical security is one element of the broader IT risk management governed by the technology framework. Finance plays a role in technology governance by evaluating investment proposals and monitoring IT costs.

Answer: A. Automation typically reduces the time and cost of performing routine tasks, creating capacity that can be redeployed to higher-value work rather than necessarily resulting in redundancy. In practice, organisations often use the capacity freed by automation to improve the quality and scope of analysis, reduce backlogs or develop new reporting capabilities. Automation does not mean work continues unchanged, and well-implemented automation is generally more reliable than manual processing due to reduced human error. People, process and technology together drive the realised benefit.

Answer: B. A DDoS attack floods a target's servers or network infrastructure with enormous volumes of internet traffic from many different sources (often a botnet of compromised computers), exhausting server capacity and making the service unavailable to genuine users. It is distinct from data theft (exfiltration), ransomware (encryption) and phishing (credential theft). For finance functions relying on internet-based systems for payments, reporting or ERP access, a DDoS attack can be highly disruptive. Resilience measures include traffic filtering, load balancing and incident response planning.

Answer: C. Digital payments accelerate settlement, often to real-time, and generate far higher volumes of individual transactions than traditional cheques or batch payments — requiring finance systems that can process, reconcile and report on them at speed. Faster payments also reduce float, changing cash management dynamics. Fraud monitoring becomes more critical as the speed of payment reduces the window to detect and stop fraudulent transactions. Treasury, reconciliation and financial controls remain important; digital payments change the tools and pace of those activities rather than eliminating them.