Business and Technology · Technological factors
Responding to Technological Change and Its Risks in ACCA BT
Updated 11 October 2026 · Fact-checked
Technological change brings opportunities (lower costs, new products, wider markets) and threats (high spending, obsolescence, cyber attacks, data protection breaches, skills gaps). Organisations respond by scanning the environment, assessing costs and risks, investing selectively, securing systems, complying with data laws and training staff. In exams, match each risk to a sensible response.
Understand Responding to Technological Change and Its Risks
Technology is the T in PESTEL. It covers new products, new ways of working and new ways of reaching customers. It is an external factor. The organisation cannot control it, but it can choose how to respond.
Technology creates opportunities. Automation can cut costs. Online sales can reach new markets. Data analysis can help you understand customers. New products can create competitive advantage.
Technology also creates threats. Competitors may adopt it first and win customers. Your own systems can become obsolete, meaning too old to compete or be supported. New technology can be expensive to buy, install and run. Staff may lack the skills to use it.
Two risks are tested often. Cyber risk is the chance of attacks such as hacking, malware or phishing, which can cause theft, fraud or system shutdown. Data protection risk is the chance of breaking laws on how personal data is collected, stored and used. A breach can lead to fines, legal action and loss of customer trust.
A good response is planned, not panicked. The organisation monitors technology trends, tests the cost against the benefit, invests in security and controls, trains people and reviews systems regularly. It does not simply buy every new tool.
How to solve Responding to Technological Change and Its Risks questions
Use this method for any question on technology opportunities, threats or responses.
- 1Read the scenario and identify the technology and the organisation's situation.
- 2Decide if the question asks for an opportunity, a threat, a risk or a response.
- 3Name the specific factor: cost, obsolescence, cyber risk, data protection or skills.
- 4Link it to the scenario, for example who is affected and how.
- 5Choose the response that directly deals with that factor, such as security controls for cyber risk or training for skills gaps.
- 6Check the option is realistic and proportionate to the organisation's size and budget.
- 7For multiple response questions, select exactly the number asked and check each choice against the scenario.
Quickest way: Risk-to-response matching
When to use it: Use in Section A objective questions when time is short and the options list risks and responses.
- Find the keyword in the stem: cost, old, hacked, personal data or skills.
- Match it to its standard response: cost to cost-benefit appraisal; old to regular review and upgrade planning; hacked to firewalls, passwords and backups; personal data to compliance policies and access limits; skills to training or hiring.
- Cross out options that address a different risk.
- If two options remain, pick the one that prevents the problem rather than just reacting.
Common mistakes in Responding to Technological Change and Its Risks
Treating technology only as a threat.
Risk topics make students focus on what goes wrong.
Fix: Always check whether the question asks for opportunities too. Cost savings, new markets and better information are benefits.
Confusing cyber security with data protection.
Both involve data and often appear in the same scenario.
Fix: Cyber security is protecting systems from attack. Data protection is lawful handling of personal data. A hack can cause both, but the responses differ.
Recommending new technology without considering cost.
Students assume newer always means better.
Fix: Mention cost-benefit appraisal, affordability and fit with the organisation's objectives.
Ignoring staff skills and resistance.
Students think of technology as equipment only.
Fix: Include training, communication and change management when technology is introduced.
Giving generic answers that ignore the scenario.
Students memorise lists and repeat them.
Fix: Tie each point to the business described, such as a small retailer storing customer card details.
Worked examples
Example 1
A small online retailer stores customer names, addresses and payment details. Which ONE response BEST addresses its data protection risk? A) Buying faster delivery vans B) Restricting access to customer data and following data protection laws C) Cutting its advertising budget D) Changing its logo
Show the solution
- The risk is about personal customer data, so it is a data protection risk.
- Delivery vans, advertising and logos do not affect how data is held or used.
- Restricting access and complying with data laws directly reduces the risk of misuse or breach.
Answer: B
Example 2
A manufacturer is considering robotic equipment that would replace some manual tasks. Identify two risks of introducing the technology and a response to each.
Show the solution
- Risk 1 is high cost. The equipment needs a large purchase price plus installation and maintenance.
- Response 1: carry out a cost-benefit appraisal before buying and compare it to the expected savings.
- Risk 2 is a skills gap. Existing staff may not be able to operate or maintain the machines, and may resist the change.
- Response 2: provide training, communicate the reasons for the change and recruit specialists if needed.
Answer: Two risks are high cost and a skills gap. The responses are a cost-benefit appraisal and training with clear communication.
Exam tips
- Read the verb: identify, explain or recommend. Recommend means give a response, not only a risk.
- Look for scenario clues such as personal data, old systems or untrained staff, as they point to the intended risk.
- In multiple response questions, select exactly the number stated. Extra choices score nothing.
- Do not use outside knowledge of specific laws. Describe the principle in plain words.
Practice questions from Technological factors
- A company moves its customer database to a third-party cloud provider. Which risk is most directly increased by this decision?
- A travel agency's customers now compare prices online and book directly with airlines and hotels. Which impact of technology is this MOST li…
- Orla Foods uses 3D printing to make customised packaging in small batches for individual customers at almost the same unit cost as large run…
- A retailer introduces robotic process automation (RPA) software to match supplier invoices to purchase orders. What is the most likely effec…
- A firm's board wants to protect itself against the risk of cyber-attack following the introduction of online services. Which of the followin…
Responding to Technological Change and Its Risks: frequently asked questions
What are the main risks of technological change for organisations?
The main risks are high cost, obsolescence, cyber attacks, breaches of data protection rules and a lack of staff skills. Competitors adopting technology faster is also a threat. Exam questions usually focus on one of these in a scenario.
How should a business respond to technological change?
It should monitor trends, appraise costs and benefits, invest selectively and secure its systems. It should also follow data protection rules and train staff. The response should suit the size and objectives of the business.
Where does technology fit in PESTEL?
Technology is the T. It is an external factor that can create opportunities, such as new products or lower costs, and threats, such as obsolescence or cyber risk. PESTEL questions ask you to link it to the business.
What is obsolescence?
Obsolescence means a product, machine or system has become out of date and is no longer competitive or supported. Organisations manage it by reviewing technology regularly and planning upgrades.