L6M4 Paper 1 — FREE

✅ Model answer outline

A distinction-level answer treats cyber threats as a strategic driver, not an IT issue, and traces cause-and-effect through the procurement function. It should structure the response around identifiable drivers, explain how each reshapes future requirements, and weigh tensions such as cost versus resilience before applying a worked example.

📌 Key concepts

• Supply-network complexity — interconnected digital supply chains widen the attack surface and demand new visibility.
• Resilient supply chains — designing redundancy, segmentation and rapid recovery against cyber disruption.
• Vertical/horizontal alignment — embedding cyber requirements into corporate risk appetite and cross-functional processes.
• Kraljic lens — treating cyber-critical suppliers as strategic or bottleneck items warranting deeper due diligence.

📊 Worked example

After the 2020 SolarWinds compromise, many buyers re-mapped their software supply networks, moved cyber assurance into supplier selection, and built resilience through multi-sourcing of critical digital services — a concrete shift in future procurement requirements.

❌ Common weaknesses

Weak answers merely list cyber risks descriptively and never explain how those drivers change the strategic requirements of the procurement function itself.

📋 LO: 1.1 — Assess the drivers that are shaping the future requirements of the strategic procurement and supply function

📑 Indicative content: dealing with complexity via supply-network strategies; resilient supply chains and networks

✅ Model answer outline

A distinction answer frames leadership capability as a blend of functional, interpersonal and strategic skills, then evaluates which matter most as cyber risk rises. It should move from internal operations toward external outcomes and judge where gaps are hardest to close.

📌 Key concepts

• External-outcome focus — shifting from internal operations to managing cyber risk across the wider supply base.
• Functional knowledge — cyber literacy, contract and assurance skills to specify security requirements.
• Interpersonal skills — influencing suppliers and boards on cyber investment.
• ESG and governance leadership — accountability for data protection and third-party cyber governance.

📊 Worked example

A CPO at a global bank who champions supplier cyber-assurance clauses and coaches category managers in threat-informed negotiation demonstrates the strategic and interpersonal blend that future leadership demands.

❌ Common weaknesses

Weak answers simply list desirable skills without evaluating why cyber security elevates certain capabilities above others.

📋 LO: 1.2 — Evaluate the skills and knowledge of future leaders of the strategic procurement and supply function

📑 Indicative content: shift from internal operations to external outcomes; functional knowledge/skills/behaviours; interpersonal skills; ESG management & leadership challenges

✅ Model answer outline

A distinction answer analyses innovation as both a disruptor and an enabler, tracing how automation and emerging tools reshape professional roles while cyber risk grows. It should link technology uptake to changing responsibilities and evaluate the resulting tensions.

📌 Key concepts

• Disruptive influence — AI, blockchain and automation reshaping sourcing and monitoring operations.
• Technology uptake — leveraging analytics for real-time cyber threat detection across suppliers.
• Changing roles — routine tasks automated, freeing professionals for strategic cyber assurance.
• Automation risk — new dependencies and vulnerabilities introduced by the very tools adopted.

📊 Worked example

Maersk's rebuild after the 2017 NotPetya attack accelerated adoption of automated, segmented digital procurement systems, shifting professionals toward cyber-resilience oversight rather than transactional processing.

❌ Common weaknesses

Weak answers describe new technologies without analysing how they change the profession's roles or introduce fresh cyber vulnerabilities.

📋 LO: 2.1 — Evaluate the emerging impact of innovation and technology on the profession

📑 Indicative content: disruptive influence on operations; organisational uptake of technology & leveraging opportunities; automation and changing roles for the profession

✅ Model answer outline

A distinction answer discusses cyber security as both a barrier to and a source of competitive advantage, using strategic analysis to identify where the profession can add value. It should balance challenges against opportunities and reach a reasoned judgement.

📌 Key concepts

• Strategic analysis — using tools such as Porter's value chain to locate cyber-driven sources of advantage.
• Added value — supplier cyber assurance as a differentiator and trust signal to customers.
• New routes to advantage — resilient, secure supply chains enabling reliability rivals cannot match.
• Challenge — rising assurance costs and scarce cyber talent eroding margin.

📊 Worked example

A managed-service provider that markets ISO 27001-aligned supply chain assurance wins contracts on trust; but sustaining that edge demands continuous investment as threats evolve — illustrating the competitive tension.

❌ Common weaknesses

Weak answers treat cyber security only as a cost or threat and fail to discuss how it can create competitive advantage.

📋 LO: 2.3 — Analyse the future challenges for the procurement and supply profession in creating competitive advantage

📑 Indicative content: strategic analysis to identify sources of competitive advantage; the profession's role in achieving added-value & competitive edge; new ways to achieve competitive advantage through the supply chain