Most Recent CIPS L4M3 Exam Questions & Answers

BS 7373-1:2001 Product specifications. Guide to preparation gives guidance on layout, preparation and management. The subject has been treated in a generic way and guidance can be used in the preparation of all types.

BS 5864:2019 is the standard for installation and maintenance of gas-fired ducted air heaters of rated heat input not exceeding 70 kW net (2nd and 3rd family gases). Specification

BS 5975:2019 is the standard for code of practice for temporary works procedures and the permissible stress design of falsework.

BS EN 60601-1-11:2015 is the standard for medical electrical equipment. General requirements for basic safety and essential performance. Collateral Standard: Requirements for medical electrical equipment and medical electrical systems used in the home healthcare environment.

- BSI website

- CIPS study guide page 90-92

LO 2, AC 2.1

The difference between cost and price is profit. According to Michael E. Porter, the profitability of an industry is shaped by five forces:

1. Competition in the industry

2. Potential of new entrants into the industry

3. Power of suppliers

4. Power of customers

5. Threat of substitute products

The Question:

accepted.

LO 3, AC 3.3

Information Assurance (IA)

Information Assurance (IA) is the practice of managing information-related risks and the steps involved to protect information systems such as computer and network systems. The IA transformation is a partnership that stretches across the Department of Defense (DoD), Office of National Intelligence, Committee on National Security Systems, National Institute of Science and Technology (NIST), and the Office of Management and Budget.

The US Government's definition of information assurance is:

''measures that protect and defend information and information systems by ensuring their availability, integrity, authentication, confidentiality, and non-repudiation. These measures include providing for restoration of information systems by incorporating protection, detection, and reaction capabilities.''

Information Assurance (IA) is essentially protecting information systems, and is often associated with the following five pillars:

- Integrity

- Availability

- Authentication

- Confidentiality

- Nonrepudiation

The following pillars can be applied in a variety of ways, depending on the sensitivity of the information, or information systems within your organization. Currently, these five pillars are used at the heart of the US Governments ability to conduct safe and secure operations in a global environment.

1. Integrity

Integrity involves assurance that all information systems are protected and not tampered with. IA aims to maintain integrity through means such as anti-virus software on all computer system, and ensuring all staff with access to know how to appropriately use their systems to minimize malware, or viruses entering information systems.

2. Availability

Availability simply means those who need access to information, are allowed to access it. Information should be available to only those who are aware of the risks associated with information systems.

3. Authentication

Authentication involves ensuring those who have access to information, are who they say they are. Ways of improving authentication involve methods such as two-factor authentication, strong passwords, bio-metrics and other devices. Authentication may also be used to not only identify users, but also other devices.

4. Confidentiality

IA involves the confidentiality of information, meaning only those with authorization may view certain data. This step is closely mirrored by the six data processing principles of the General Data Protection Regulation (GDPR), where by personal data must be processed in a secure manner 'using appropriate technical and organizational measures' ('integrity and confidentiality').

5. Nonrepudiation

The final pillar simply means someone with access to your organizations information system cannot deny having completed an action within the system, as there should be methods in place to prove that they did make said action.

- What is Information Assurance (IA)?

- CIPS study guide page 99-100

LO 2, AC 2.1

A framework agreement is an agreement with one or more suppliers/providers which sets out terms and conditions under which individual contracts (call-offs) can be made throughout the term of the agreement.

A framework agreement itself is not a contract, but the call-offs made from it are.

Framework arrangements create a streamlined and flexible process for procuring goods, works or services

Where a framework for the same goods, works or services is awarded to several suppliers, there are three possible options for awarding call-off contracts: direct award (or direct call-off), mini-competition or a combination of both.

Option 1 -- Apply the terms of the framework agreement (direct award).

Where your requirements match the terms and/or specification of the framework agreement (in the event of any query, you should clarify the situation with the organisation that established the framework), a particular call-off should be awarded without re-opening competition. The call-off should be awarded to the provider who is identified as the most economically advantageous tender based on the award criteria used at the time that the framework was established (i.e. the supplier ranked no. 1). Randomly selecting a supplier off a framework is not permitted.

Option 2 -- Hold a mini-competition between capable suppliers.

If your requirements do not match the terms and/or the specification of the framework, you should conduct a mini-competition exercise. Whilst it is not permitted to substantially change the basic terms or specification of the framework, in running a mini-competition it is possible to supplement or refine the basic terms of the framework prior to making a call-off. Examples of such terms are:

- The particular goods/services/works required;

- Particular delivery timescales;

- Particular invoicing arrangements and payment profiles;

- Associated services such as installation, maintenance and training;

- Quantity;

- Functional specification.

Under no circumstances should brand names or brand-specific descriptions of goods be used e.g. BIC Biro Pen, Hewlett-Packard Printer, Dell computer. Descriptions should give reference to the characteristics and outputs of the product or service. Where no other description is possible, any reference should be qualified by adding the words 'or equivalent'.

When a mini-competition exercise is held, all suppliers appointed to the framework that are capable of meeting the requirement must be invited to submit a tender. (This might just relate to suppliers within a particular 'lot'). You must not limit the mini-competition exercise to selected providers. A time limit for submitting the tender must be set and advised to competing suppliers. This time limit must be reasonable, taking account of the complexity of the requirement.

The call-off must be awarded on the basis of the framework award criteria and new criteria cannot be added, although, where permitted, the weightings may be varied to take account of a particular requirement. However, in adjusting the weightings, care must be taken to ensure that any such changes do not have an adverse effect on competition.

Option 3 - Combination of direct award and mini-competition

To use a combination approach, the procurement documents must state that this route may be used. The procurement documents will also specify which terms may be subject to the re-opening of competition.

- Guidance on the Use of Framework Agreements

- CIPS study guide page 60-62

LO 1, AC 1.3

Ad-hoc purchase is the item bought for a single and non-recurring use or purpose.

A call-off contract, also known as a blanket order, is a purchase order which enables bulk orders over a period of time.

Operational procurement refers to the procurement of goods and services that are required to sustain an organization's day-to-day business operations.

LO 1, AC 1.3