Area 07 arrived with the 2024 outline and carries 10% of the exam. It is about the HR system itself: keeping its data accurate, turning it into reports, and controlling who sees what.
Updated Oct 26, 2026 · Not affiliated with HRCI or SHRM.
10%of scored questions
15questions on this page
07of 7 functional areas
What the area covers
Three responsibilities in the 2024 outline:
HR databases: the HRIS, personnel data, status and salary changes.
Reports and analytics for managers and leaders.
Security: access and permissions, user support, compliance, data integrity and accuracy.
15 HR information management questions
0 of 15 answered · 0 correct
Question 1 of 15 · HR Information Management · 10%
HR must show that every manager finished required compliance training by a deadline, and send reminders to those who have not. Which system BEST supports this?
Payroll systems process pay and do not track compliance training.
A candidate relationship management system nurtures prospective hires, not trained employees.
A learning management system tracks training completions and deadlines and automates reminders.
An applicant tracking system manages job candidates, not employee training records.
Question 2 of 15 · HR Information Management · 10%
HR wants employees to update their own home addresses and tax withholding elections online to reduce data-entry errors. Which HRIS feature supports this?
A learning management system tracks training, not addresses or tax elections.
A manager self-service portal handles manager tasks such as approvals, not employees' own personal data.
An applicant tracking system manages candidates before hire, not current employees' records.
Employee self-service lets employees update their own address and withholding, which cuts re-keying errors.
Question 3 of 15 · HR Information Management · 10%
An HRIS audit finds that 14 former employees still have active system accounts. Which control BEST prevents this from recurring?
Removing access as a required offboarding step closes accounts on the day people leave, which prevents the gap.
Lockout after failed logins does not stop a former employee who still knows a valid password.
Stronger passwords do nothing about accounts that should no longer exist.
A yearly review finds stale accounts months later; it detects the problem but does not prevent it.
Question 4 of 15 · HR Information Management · 10%
Attackers stole several HR staff members' HRIS passwords through a phishing email. Which control would MOST reduce the risk that the stolen passwords are used?
Encryption at rest protects stored data from theft of the database, not from logins with valid stolen credentials.
Multi-factor authentication requires a second factor, so a stolen password alone cannot log in.
Annual password changes leave stolen passwords usable for months, and current guidance favors MFA over forced rotation.
Longer passwords resist guessing but not phishing, where the user hands over the password.
Question 5 of 15 · HR Information Management · 10%
An employee's pay rate in the HRIS was changed without an approved request. HR needs to know who made the change and when. Which feature provides this?
Role-based access limits who can make changes but does not record who made one.
Employee self-service lets employees edit their own data; it is not a change-tracking tool.
An audit trail logs who changed which field, when, and from what value to what value.
Encryption protects data from being read; it does not record changes.
Question 6 of 15 · HR Information Management · 10%
HR integrates its applicant tracking system with the HRIS. Which benefit does this MOST directly provide?
Turnover depends on fit, onboarding and management, not on how data moves between systems.
Integration moves data between systems; it does not attract more applicants.
No system integration makes hiring automatically compliant with federal law.
Integration passes candidate data into the HRIS at hire, removing duplicate data entry and its errors.
Question 7 of 15 · HR Information Management · 10%
A manager planning layoffs asks an HR generalist for an HRIS report listing each employee's age and medical-leave history. What should the generalist do?
Using age and medical-leave history in layoff decisions creates ADEA, ADA and FMLA risk, so the generalist should decline and escalate.
The manager can still match age and leave data to people, so removing names does not remove the risk.
Adding salary makes the report even more sensitive and does nothing about its unlawful purpose.
A manager's approval does not make it lawful to use protected characteristics in layoff choices.
Question 8 of 15 · HR Information Management · 10%
HR plans to purge HRIS records of employees who left more than five years ago. Before deleting them, what must HR confirm?
No general rule requires telling former employees before their records are destroyed under a retention schedule.
Records may be destroyed only after every retention period has ended and no litigation hold applies.
The I-9 is only one retention rule; payroll, benefits and litigation holds can require keeping other records.
Printing records for offsite storage defeats the purpose of purging them.
Question 9 of 15 · HR Information Management · 10%
The CHRO asks for a quarterly view of how headcount and turnover are trending by department. Which output is MOST appropriate?
An employee-level export is raw data, not a summary of trends, and it exposes personal details.
A text memo of totals makes trends hard to see and cannot be broken down by department.
A trend dashboard with departmental drill-down shows change over time at the level the CHRO asked for.
A pie chart of current headcount is a snapshot that cannot show a trend over quarters.
Question 10 of 15 · HR Information Management · 10%
Senior leaders ask HR to build a recruiting dashboard in the HRIS. What should HR do FIRST?
Picking a layout comes after knowing what the dashboard must show.
Prototyping before requirements risks building the wrong thing and reworking it.
Pulling in all available data before defining needs creates clutter instead of insight.
First agree on what decisions the dashboard must support and which KPIs answer them; data and design follow from that.
Question 11 of 15 · HR Information Management · 10%
HR is setting how long the HRIS archive keeps employee time cards. What is the minimum retention period under the FLSA?
The FLSA requires keeping time cards and other supplementary basic records for at least two years.
One year is shorter than the FLSA minimum for time cards.
Four years is longer than the FLSA requirement (it is a common IRS employment-tax period).
Three years applies to payroll records and certain other records, not to time cards.
Question 12 of 15 · HR Information Management · 10%
A supervisor receives an employee's fitness-for-duty medical report. Under the ADA, where must HR keep this information?
Logging access to the personnel file does not meet the separate-file requirement.
The ADA requires medical information to be kept in separate, confidential medical files, apart from personnel files.
Department records are not confidential medical files, and supervisors are entitled only to the work restrictions they need.
A sealed envelope inside the personnel file is still in the personnel file, which the ADA does not allow.
Question 13 of 15 · HR Information Management · 10%
HR is moving open enrollment to self-service. Many plant employees have no company email or computer. What is the MOST important consideration?
An email-only announcement misses the very employees who lack company email.
An online manual is useless to employees who cannot get online at work.
Employees without email or computers need a practical way in, such as mobile access or kiosks on site.
Making paper the default for everyone undercuts the move to self-service instead of solving access.
Question 14 of 15 · HR Information Management · 10%
Which key performance indicator BEST measures the timeliness of HRIS data?
Matching source documents measures accuracy, not timeliness.
Valid formats measure validity, not whether data arrives on time.
Records with every required field filled in measure completeness.
Timeliness is whether data is entered by the time it takes effect, so this KPI measures it directly.
Question 15 of 15 · HR Information Management · 10%
HR must give the board of directors a summary of headcount and pay by salary band. What is the BEST approach?
Aggregated figures by band give the board what it needs without exposing individual pay.
Sending full detail and relying on deletion still exposes individual data.
Listing individual salaries goes beyond what the board needs and creates privacy risk.
An employee-level file with names hidden can still identify people through job and pay details.
Answer every question to see your score
Systems and features to tell apart
HRIS: the system of record for people data.
Applicant tracking system: requisitions, applicants and offers.
Learning management system: course catalog, enrollments and training records.
Employee and manager self-service: people handle their own transactions in the system.
Audit trail: the system’s log of changes to records.
Access and security
Access follows least privilege: each role sees and changes only what it needs, and permissions are reviewed as people change jobs. Physical security, emergencies and workplace violence belong to employee and labor relations (outline 6.2); the SPHR combines them with systems in one area: HR information management, safety and security.
Medical information goes in its own file
Under the ADA, medical information from exams and inquiries is kept on separate forms in separate, confidential medical files, not in the personnel file (42 U.S.C. 12112(d)).
Retention and data integrity
Federal retention periods set the floor for purging: FLSA payroll records are kept 3 years and time cards 2 years (29 CFR 516), and Form I-9 is kept 3 years after hire or 1 year after separation, whichever is later (USCIS).
Data integrity and accuracy sit under the outline’s security responsibility (7.3): one owner for each field, checks when data is entered, and periodic reconciliation of the HRIS with payroll and benefits.
Yes, together with employee engagement it was added in 2024, at 10% of the scored questions.
Do I need technical HRIS skills for this area?
No coding or vendor knowledge. The outline’s responsibilities are generalist decisions: which system fits a need, who may see which data, and how long records are kept.