Strategic Business Leader · Cloud, mobile and smart technology

Mobile Technology and Mobile Business for ACCA SBL

Updated 11 October 2026 · Fact-checked

Mobile technology means smartphones, tablets and apps that let people work, buy and communicate from anywhere. Mobile business (m-business) uses them to change working practices, engage customers and cut costs. In SBL you must weigh benefits against risks such as data loss and BYOD security, then recommend controls tied to the scenario.

Understand Mobile Technology and Mobile Business

Mobile technology covers portable devices (smartphones, tablets, laptops, wearables), the networks that connect them (4G, 5G, Wi-Fi) and the apps that run on them. Its core feature is that people can use information and services at any place and time, not only at a desk.

Mobile business (m-business) is the use of mobile technology to run the organisation. M-commerce is the narrower part: buying and selling through mobile devices, such as shopping apps, mobile banking and mobile wallets. An accountant should see it as another channel with its own costs, revenue and risks.

Mobile changes three areas. Working practices: staff can work remotely, approve transactions, access systems and collaborate in real time. Field staff record data at the point of work, which cuts delay and rekeying errors. Customer engagement: apps give 24/7 access, personalised offers, push notifications, easy payment and data about behaviour and location. Value comes from convenience, speed and loyalty, and from the data the organisation gains. Organisational risk: devices are easily lost or stolen, connect to insecure networks and mix personal and business use.

BYOD (bring your own device) lets employees use personal devices for work. Benefits: lower hardware cost, staff satisfaction, familiar tools. Risks: less control over security, mixed personal and corporate data, malware, difficulty wiping data when someone leaves, and data protection breaches. A BYOD policy sets the rules. Alternatives are company-owned devices, or company-owned personally enabled (COPE) devices.

In SBL, the examiner wants more than a list. Link mobile to the organisation's strategy, stakeholders, risk appetite and governance. Show professional skills: judge whether the benefits justify the risks for this organisation, and recommend practical, proportionate action.

Key rules to remember

Benefit-risk evaluation: Net value of mobile = benefits (cost, speed, reach, engagement) − costs and risks (security, compliance, support, reputation); A judgement framework, not a numerical formula. Always conclude on whether it is worthwhile for the scenario.
Risk assessment: Risk exposure = likelihood × impact; Use it to prioritise mobile risks such as device loss or data breach. Rank the risks, then match controls.
Mobile security control groups: Policy + technical controls + people controls + monitoring; Use this checklist for BYOD answers: policy and acceptable use; encryption, passwords, remote wipe, MDM; training; audit and review.

How to solve Mobile Technology and Mobile Business questions

Use this method for any question on mobile technology, apps or BYOD.

1Read the requirement and note the verb (identify, assess, advise, recommend). Note the role you are playing and who the report is for.
2Pick out scenario facts: type of business, customers, staff location, data handled, regulation, risk appetite.
3Explain the mobile issue briefly: what the technology allows in this organisation.
4Cover benefits by area: working practices, customer engagement, cost and efficiency, data and insight. Tie each to a scenario fact.
5Cover risks by area: security, data protection and privacy, loss of control, compliance, reliability, user behaviour, reputation.
6Recommend controls: BYOD policy, mobile device management, encryption, access rules, training, monitoring, with cost and practicality in mind.
7Reach a judgement: is mobile adoption worthwhile here, and under what conditions? Make a clear recommendation.
8Check professional skills: structure, scepticism about claimed benefits, commercial awareness and a clear tone for the audience.

Quickest way: Benefit, risk, control in three blocks

When to use it: When time is short, or a part-question for 8 to 12 marks asks for benefits, risks or a policy on mobile or BYOD.

Write three headings: Benefits, Risks, Controls or recommendation.
Give two or three points under each, every one tied to a named scenario fact.
Prefer one developed point (point, explain, apply) over several bare list items.
Finish with a one-sentence judgement and one clear recommendation.
Spend any spare time adding a scenario-specific consequence, such as a regulatory fine or lost customer trust.

Common mistakes in Mobile Technology and Mobile Business

Listing generic benefits and risks with no link to the scenario.
Students memorise lists and write them out.
Fix: Add a scenario fact to every point, such as 'its sales staff travel, so mobile access speeds up orders'.
Treating BYOD as only a security problem.
Security is the most obvious risk.
Fix: Also cover cost savings, staff satisfaction, legal ownership of data, support burden, and data protection on leaving.
Recommending a ban on mobile or BYOD with no reasoning.
Students see risk and avoid it.
Fix: Weigh risk against benefit and the organisation's risk appetite. Usually recommend managed use with controls.
Confusing m-commerce with e-commerce or m-business.
The terms overlap.
Fix: E-commerce is online trading generally. M-commerce is trading through mobile devices. M-business is all mobile use in the organisation.
Listing controls without saying how they address a risk.
Students name tools like encryption and stop.
Fix: Match each control to a risk: remote wipe for lost devices, training for phishing, MDM for separating work and personal data.
Ignoring professional skills and ending without a conclusion.
Students run out of time after the content.
Fix: Leave a minute to write a clear recommendation in the form asked for, such as a short memo.

Worked examples

Example 1

A regional retail chain plans to launch a mobile shopping app. The board is concerned about cost. As a finance adviser, explain how the app could create value for customers and for the company, and identify two risks. (10 marks)

Show the solution

Customer value: the app gives shopping at any time and place, faster checkout and saved payment details, which saves time and effort.
Customer value: personalised offers and loyalty points through the app make customers feel rewarded, which supports repeat purchases.
Company value: app data shows what customers buy and when, so the chain can target promotions and manage stock better.
Company value: a direct channel to customers reduces marketing costs and may raise sales and loyalty. Store traffic may also be lower cost to serve.
Risk one: payment and personal data could be breached, causing fines, loss of trust and reputation damage. Recommend encryption, secure payment providers and testing.
Risk two: development and maintenance costs may exceed benefits if few customers adopt the app. Recommend a phased launch with clear usage targets.
Judgement: the app is worthwhile if adoption is strong and data is secure, so approve it subject to budget limits and review points.

Answer: The app creates customer value through convenience, speed and personalisation, and company value through data, loyalty and lower marketing cost. Key risks are data breach and poor adoption against high cost. Recommend a phased, secure launch with measurable targets.

Example 2

A professional services firm allows staff to use personal phones and tablets to access client files by email and a shared drive. A partner asks you to advise on the risks and on what a BYOD policy should contain. (12 marks)

Show the solution

Risk: lost or stolen devices could expose confidential client data, breaching confidentiality duties and data protection rules.
Risk: personal devices may lack updates or have malware and unsafe apps, and staff may use public Wi-Fi, creating a route into firm systems.
Risk: client data may sit in personal apps or backups, so the firm loses control, and it is hard to remove data when staff leave.
Risk: supporting many device types raises IT cost and complexity, and monitoring personal devices raises privacy concerns for staff.
Policy content: scope and approved devices and operating systems, with minimum security such as passcodes, encryption and up-to-date software.
Policy content: mobile device management to separate work and personal data and enable remote wipe of firm data, with staff consent to this.
Policy content: acceptable use rules, a ban on storing client files outside approved apps, a duty to report loss at once, and an exit procedure to remove data.
Policy content: training, regular audits, and clear consequences for breaches. Review the policy often.
Judgement: BYOD can lower cost and suit flexible working, but for a firm holding sensitive client data it should be allowed only with strong controls.

Answer: Main risks are data loss from lost devices, malware and insecure networks, loss of control over client data, exit problems and support cost. The policy should set device standards, use MDM with remote wipe, restrict data storage, require loss reporting, train staff and be audited. BYOD is acceptable only with these controls.

Exam tips

Always tie mobile points to the scenario: who uses the devices, what data they hold and which rules apply.
For BYOD requirements, give both sides, then a recommendation. A one-sided answer loses marks.
Use the three areas working practices, customer engagement and risk as a skeleton for broad questions.
Show scepticism: ask whether claimed benefits are realistic, and whether adoption and cost data support the case.
Write in the format asked, such as a memo or briefing note, and finish with a clear conclusion for the professional skills marks.

Practice questions from Cloud, mobile and smart technology

Mobile Technology and Mobile Business: frequently asked questions

What is the difference between m-commerce and e-commerce?

E-commerce is buying and selling over the internet by any device. M-commerce is the part done through mobile devices, such as apps, mobile banking and mobile wallets. M-commerce stresses location, convenience and instant access.

What are the main risks of BYOD?

The main risks are device loss or theft, malware, insecure networks, mixing of personal and corporate data, and difficulty removing data when staff leave. There is also support cost and privacy concerns. A clear policy and device management reduce these risks.

How do mobile apps create value for customers?

Apps give convenience, speed and personalisation. Customers can browse, pay and get service at any time, and receive relevant offers. The organisation gains loyalty and data about behaviour.

What should a BYOD policy include?

It should state approved devices, minimum security settings, acceptable use, rules on storing data and what happens on loss or when staff leave. It should also cover monitoring, training and consequences of breach. Staff must agree to it.