CBO Regulatory Compliance & Risk Management 2

Question 1

A business discovers a data breach affecting 600 customers in California. Under CCPA, what is the required notification timeline?

Accepted Answer

In the most expedient time possible without unreasonable delay

Answer

California's CCPA requires notification in the most expedient time possible without unreasonable delay, though no specific day count is mandated.

Question 2

Which risk management strategy involves purchasing insurance to cover potential losses?

Accepted Answer

Risk transfer

Answer

Risk transfer shifts the financial burden of a loss to a third party, such as an insurer, in exchange for a premium.

Question 3

A manufacturing company must maintain OSHA Form 300 logs. How long must these records be retained?

Accepted Answer

5 years

Answer

OSHA requires employers to retain Form 300 injury and illness logs for five years following the end of the calendar year that records cover.

Question 4

Under the Americans with Disabilities Act (ADA), which business type is generally required to provide reasonable accommodations to employees?

Accepted Answer

Businesses with 15 or more employees

Answer

Title I of the ADA applies to employers with 15 or more employees, requiring reasonable accommodations for qualified individuals with disabilities.

Question 5

What is the primary purpose of an internal audit function within a compliance program?

Accepted Answer

To independently assess whether controls are operating effectively

Answer

Internal audit independently evaluates whether a company's risk controls and compliance processes are functioning as intended.

(CBO) Certified Business Operator Practice Test