Business Management: Strategy, Structure and Performance
Core concepts
Understand the management functions of planning, organising, leading and controlling, and how these translate into organisational structure, span of control, delegation and accountability. Learn the strategic planning cycle: environmental analysis using PESTLE and Porter's five forces, internal appraisal using the value chain and resource-based view, SWOT synthesis, objective setting, and the choice between cost leadership, differentiation and focus. Know motivation theories, leadership styles, group dynamics, communication channels, and performance measurement frameworks such as the balanced scorecard and divisional metrics like ROI and residual income.
Traps
Questions blur the line between strategy formulation and implementation, or between a strength and an opportunity. Watch for ROI comparisons where divisions differ in asset age, and for residual income, which reduces the incentive to reject otherwise acceptable projects. Another trap is confusing a manager's authority with responsibility, or assuming a narrow span of control is always better.
Rule of thumb
Classify every factor as internal or external and as favourable or unfavourable before placing it in a SWOT quadrant; ambiguity usually signals a missing distinction.
Worked example
A division earns operating profit of 60,000 on assets of 400,000. ROI is 15 per cent. If the cost of capital is 12 per cent, residual income is 60,000 - (12% x 400,000) = 12,000. A new project returning 14 per cent would raise residual income but lower ROI, illustrating the conflict between the two metrics.
Ethics and Information Technology: Professional Conduct and Controls
Core concepts
Know the fundamental principles of professional ethics: integrity, objectivity, professional competence and due care, confidentiality and professional behaviour. Understand the threats framework (self-interest, self-review, advocacy, familiarity, intimidation) and the safeguards that reduce them, including independence for assurance engagements, conflicts of interest, confidentiality exceptions and the handling of gifts and hospitality. On the technology side, understand the components of an information system, general and application controls, input-process-output controls, access management, segregation of duties, backup and disaster recovery, and the risks of spreadsheets, cloud services and cyber threats such as phishing and ransomware.
Traps
Questions test whether confidentiality survives the end of an engagement (it generally does), whether disclosure is permitted when legally required, and whether independence rules apply to all engagements or only assurance ones. In IT, watch for confusion between general controls and application controls, and for questions where a detective control is offered when the scenario demands a preventive one.
Rule of thumb
Identify the threat, assess its significance, then apply the safeguard and document the judgement; if no safeguard reduces the threat to an acceptable level, decline or withdraw.
Worked example
An audit partner learns that a close family member has been appointed finance director of an audit client. This creates a familiarity threat that is significant, and no safeguard can reduce it to an acceptable level, so the firm must resign from the engagement. In contrast, a modest gift of branded stationery may be acceptable if trivial and permitted by firm policy.