BPA BPA Compliance, Auditing & Risk Management 3

Question 1

What is a 'control gap' in a BPA compliance review?

Accepted Answer

A missing or insufficient control that leaves a compliance requirement unaddressed

Answer

A control gap exists when a required compliance control is absent or inadequate, exposing the organization to regulatory or operational risk.

Question 2

Which risk assessment methodology assigns a numerical score to risks by multiplying likelihood by impact?

Accepted Answer

Quantitative risk analysis

Answer

Quantitative risk analysis uses numerical values for probability and impact to calculate a risk score, enabling objective prioritization.

Question 3

A BPA process is found to be non-compliant during an internal audit. What is the appropriate immediate next step?

Accepted Answer

Issue a corrective action plan (CAP) to address the non-compliance within a defined timeline

Answer

A corrective action plan documents the steps and timeline required to remediate the identified non-compliance, demonstrating accountability to auditors.

Question 4

In BPA compliance, 'data lineage' refers to:

Accepted Answer

The documented journey of data from its origin through all transformations to its final destination

Answer

Data lineage tracks the full lifecycle of data—where it came from, how it was transformed, and where it ended up—supporting transparency and compliance.

Question 5

Which approach best helps a BPA team proactively identify compliance risks before a new process goes live?

Accepted Answer

Conducting a pre-implementation compliance review or Privacy/Security Impact Assessment

Answer

A pre-implementation compliance review identifies regulatory risks early, when they are far less costly and disruptive to address.

BPA - Business Process Automation Certification Practice Test

BPA - Business Process Automation Certification Practice Test

BPA BPA Compliance, Auditing & Risk Management 3