Strategic Business Leader · Cloud, mobile and smart technology

Smart Technology and the Internet of Things in ACCA SBL

Updated 11 October 2026 · Fact-checked

Smart technology means devices that sense, process and communicate data, often with some automated decision-making. The Internet of Things (IoT) is a network of such devices that collect and exchange data over the internet. In SBL, link applications to strategy and value, then weigh data, security and privacy risks against them.

Understand Smart Technology and the Internet of Things

A smart device is a physical object with a sensor, a processor and a network connection. It can detect something (temperature, location, movement), process it, and send or act on the result. A smart meter, a connected delivery van and a wearable fitness band are all examples.

The Internet of Things (IoT) is the network that links these devices to each other and to central systems. Sensors capture data. Connectivity (Wi-Fi, mobile networks, short-range radio) moves it. Platforms, often in the cloud, store and analyse it. Actuators or people then act on the result, for example by adjusting a machine or sending an alert.

IoT matters because it creates a continuous stream of detailed, real-time data. That data is a core source of big data. Analytics turns it into insight, such as predicting when a machine will fail or showing how customers use a product. So IoT is usually linked with cloud computing and data analytics in exam scenarios.

Business applications fall into a few groups:

Operations: predictive maintenance, remote monitoring, tracking stock and vehicles, energy saving.
Customer value: connected products, usage-based pricing, personalised service, after-sales support.
New business models: selling a service rather than a product, or charging per use.
Control and safety: monitoring cold chains, worker safety, compliance records.

The risks are just as testable. Many devices have weak security and widen the attack surface for hackers. Large volumes of personal data raise privacy and data-protection duties, and customers may not understand what is collected. Data quality, system integration, cost, reliance on suppliers and network failure also matter. Ethical questions arise too, such as monitoring staff or customers without clear consent.

In SBL you are not asked to explain the engineering. You are asked to advise: does this technology fit the organisation's strategy, what value can it create, what could go wrong, and what should the board do about it.

How to solve Smart Technology and the Internet of Things questions

Use this method for any SBL requirement on smart technology or IoT. It keeps your answer tied to the scenario and earns professional skills marks.

1Read the requirement and note the verb: explain, evaluate, advise, recommend or assess. It sets the depth and the format (report, briefing note, email).
2Identify the organisation's strategy, industry and problem from the scenario. Note what devices or data it already has.
3Describe how the technology works in this business: what is sensed, what data is produced, who uses it and for what decision.
4List the opportunities that fit the scenario, such as cost saving, better service, new revenue or better risk control. Give each a scenario-specific example.
5List the risks: security, privacy and data-protection duties, data quality, cost, integration, supplier dependence and ethical concerns. Tie each to the facts given.
6Weigh the two sides and take a position. Consider suitability to strategy, acceptability to stakeholders and feasibility.
7Recommend specific actions, such as a pilot, security standards for devices, data governance, consent and staff training.
8Write in the requested format, with a clear structure and a professional tone, and finish with a conclusion.

Quickest way: Sense, Data, Value, Risk, Action

When to use it: Use it when time is short or you need a plan for a 10 to 15 mark requirement in under two minutes.

Sense: what do the devices measure in this business?
Data: what data results, and how will it be analysed?
Value: which two or three benefits fit the strategy?
Risk: which two or three risks hit hardest (security, privacy, cost)?
Action: what should management do first? Give a practical recommendation.

Common mistakes in Smart Technology and the Internet of Things

Defining IoT in general terms and stopping there.
Students recall notes and forget the exam rewards application to the scenario.
Fix: Give one sentence of definition at most, then use the company's own products, sites and customers.
Listing only benefits and treating technology as automatically good.
Technology sounds like progress, so the downside is skipped.
Fix: Always balance. Include at least two risks and a conclusion on whether the benefits justify them.
Treating security and privacy as the same issue.
Both relate to data protection, so they get blurred.
Fix: Security is about stopping unauthorised access or attack. Privacy is about how personal data is collected, used and shared, and whether people consented.
Giving generic recommendations such as 'improve security'.
Students run out of time or ideas under pressure.
Fix: Be specific: change default passwords, encrypt data, segment the network, update device software, set data retention rules and obtain clear consent.
Ignoring the link to big data and cloud.
Topics are studied separately.
Fix: Explain that IoT generates the data, the cloud stores and processes it, and analytics turns it into decisions. Mention this chain where relevant.
Writing an essay instead of the requested format.
Students rush to content and forget professional skills marks.
Fix: Set up the report or email format first, use headings and short paragraphs, and keep a suitable tone for the reader.

Worked examples

Example 1

A regional manufacturer of industrial pumps sells to water utilities. The board is considering fitting sensors to its pumps so that performance data is sent to a cloud platform. Advise the board on the opportunities this offers. (10 marks)

Show the solution

Explain the idea briefly: sensors record data such as vibration, temperature and flow. It is sent over a network and analysed in the cloud.
Opportunity 1, predictive maintenance: analytics can spot signs of wear before a pump fails. This cuts unplanned downtime for customers and emergency repair cost for the company.
Opportunity 2, new revenue: the company can sell monitoring and maintenance contracts, moving from one-off sales to recurring service income.
Opportunity 3, product improvement: real usage data shows how pumps behave in the field. Engineers can fix weak parts and design better models.
Opportunity 4, customer loyalty: a company that monitors performance and acts early becomes harder for utilities to replace, which supports differentiation.
Opportunity 5, efficiency: data can show energy use, so customers can reduce running costs, a strong selling point.
Conclude that the opportunities fit a strategy of differentiation, but they depend on good data quality and security, which the board should check before committing.

Answer: The sensors would let the company offer predictive maintenance, sell recurring service contracts, improve its designs from real usage data, deepen customer loyalty and help customers cut energy cost. These support differentiation, subject to secure, reliable data.

Example 2

A retail chain plans to use in-store sensors and a smartphone app to track how customers move around its shops and what they browse, linking this to loyalty accounts. Evaluate the data, security and privacy issues the chain should address. (10 marks)

Show the solution

Data: the system will produce large volumes of location and behaviour data. Issues are quality (sensor errors, duplicate records), storage cost, and the skills needed to analyse it.
Security: sensors and the app add entry points for attackers. Weak device settings, unencrypted transmission or poor app security could expose customer records. A breach would cause fines, loss of trust and cost.
Privacy: linking movement to named loyalty accounts makes the data personal. Customers may not know they are tracked. The chain must have a lawful basis, clear notice and consent, and use data only for stated purposes.
Ethics: tracking can feel intrusive even if lawful. Profiling customers to influence purchases may harm reputation if seen as manipulative.
Responsibilities: the chain stays accountable for personal data even if a supplier or cloud provider holds it, so contracts and checks on suppliers are needed.
Recommendations: collect only the data needed, anonymise where possible, encrypt data, update devices regularly, give customers easy opt-out, appoint someone responsible for data protection, and train staff.
Conclusion: the benefits of better layout and personalised offers are real, but the chain should proceed only with strong controls and transparent communication.

Answer: The chain must manage data quality and volume, secure every device and the app, treat linked location data as personal data with consent and clear purpose, consider ethical perception, and stay accountable for suppliers. Minimising data, encrypting it, offering opt-out and assigning responsibility would let it proceed with acceptable risk.

Exam tips

Expect IoT to appear inside a broader scenario, such as a manufacturer, retailer, logistics firm or utility. Always tie the technology to that business.
Pair opportunities with risks in every answer. Markers reward a balanced, reasoned view and a clear conclusion.
Link IoT to big data, cloud and cyber security. Showing the chain from sensor to decision earns credit for integrated thinking.
Use professional skills: structure, commercial awareness and sensible recommendations for the board. Match the format requested.
Where personal data is involved, mention consent, purpose, security and accountability, but do not quote specific legal sections unless the scenario gives them.

Practice questions from Cloud, mobile and smart technology

Smart Technology and the Internet of Things in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

CS ProfessionalInternet of Things (IoT)

Smart Technology and the Internet of Things: frequently asked questions

What is the difference between smart technology and the Internet of Things?

Smart technology is the broader idea of devices that can sense, process data and sometimes act on their own. IoT is the network that connects those devices so they can send and receive data. A smart device on its own is smart technology. Many such devices linked together make an IoT system.

How does IoT generate data for analytics?

Sensors in devices record readings such as temperature, location or usage, often continuously. The readings are sent over a network to a central platform, usually in the cloud. There the data is stored and analysed to spot patterns, predict problems or support decisions.

What are the main risks of IoT in SBL answers?

The main risks are weak device security, which widens the attack surface, and privacy issues where personal data is collected. Others include poor data quality, cost, integration problems, supplier dependence and ethical concerns about monitoring. Always tie the risks to the scenario.

How much IoT detail do I need for the exam?

You need business understanding, not engineering. Know what the devices do, what data they produce, the benefits, the risks and how management should respond. Your task is to advise on strategy and risk.