CCB Board Reporting & Governance 2 — Questions and Answers
Question 1: A compliance officer is preparing a board report on third-party risk. Which metric is MOST critical to include?
- Number of vendor contracts signed
- Percentage of vendors that completed due diligence assessments (Correct answer)
- Total spend on third-party vendors
- Number of new vendor onboardings this quarter
Correct answer: Percentage of vendors that completed due diligence assessments
Percentage of vendors completing due diligence assessments directly measures risk management effectiveness for board oversight.
Question 2: Which governance principle requires that board members receive compliance reports in advance of meetings?
- Segregation of duties
- Timely and accurate information (Correct answer)
- Tone at the top
- Dual control
Correct answer: Timely and accurate information
The governance principle of timely and accurate information ensures directors can make informed decisions by reviewing materials before meetings.
Question 3: A board audit committee asks for a 'heat map' in the compliance report. What does this typically display?
- Geographic distribution of employees
- Risks plotted by likelihood and impact (Correct answer)
- Training completion rates by department
- Regulatory filing deadlines
Correct answer: Risks plotted by likelihood and impact
A risk heat map visually represents risks on a matrix of likelihood versus impact to help the board prioritize oversight.
Question 4: Under the Three Lines of Defense model, which line is responsible for presenting compliance findings directly to the board?
- First line (business units)
- Second line (compliance/risk functions)
- Third line (internal audit) (Correct answer)
- External auditors
Correct answer: Third line (internal audit)
Internal audit, the third line, provides independent assurance and typically reports findings directly to the board or audit committee.
Question 5: A compliance report to the board should include a 'regulatory change log.' What is the PRIMARY purpose of this log?
- To document internal policy updates
- To track new and pending regulations affecting the organization (Correct answer)
- To record employee disciplinary actions
- To list completed audit findings
Correct answer: To track new and pending regulations affecting the organization
A regulatory change log keeps the board informed of evolving legal requirements that may require strategic or operational adjustments.
Question 6: Which situation represents a conflict of interest that must be disclosed in board governance?
- A director who owns stock in a competitor
- A director voting on a contract with a company where their spouse is a senior executive (Correct answer)
- A director who previously worked in the same industry
- A director who is also an attorney
Correct answer: A director voting on a contract with a company where their spouse is a senior executive
A director voting on a transaction involving a company where their spouse is a senior executive creates a direct conflict of interest requiring disclosure and recusal.
Question 7: What does 'board independence' mean in the context of corporate governance?
- The board operates without any legal counsel
- A majority of directors have no material relationship with the company (Correct answer)
- The board makes decisions without shareholder input
- Directors are not compensated for their service
Correct answer: A majority of directors have no material relationship with the company
Board independence means a majority of directors lack material relationships with the company, reducing bias in oversight of management.
CCB Board Reporting & Governance 2
A compliance officer is preparing a board report on third-party risk.
Which metric is MOST critical to include?