CCB Board Reporting & Governance 3 — Questions and Answers
Question 1: When reporting a significant compliance breach to the board, which element is LEAST appropriate to include in the initial report?
- Description of the breach and its scope
- Immediate remediation steps taken
- Names of all employees investigated (Correct answer)
- Estimated financial and reputational impact
Correct answer: Names of all employees investigated
Individual employee names should be omitted from initial board reports to protect privacy and preserve investigation integrity.
Question 2: A company's board is reviewing the compliance program effectiveness. Which indicator best demonstrates a 'strong compliance culture'?
- Zero regulatory fines in the past year
- High rate of voluntary self-reporting through the ethics hotline (Correct answer)
- Low employee turnover in the compliance department
- Compliance training completion rate above 95%
Correct answer: High rate of voluntary self-reporting through the ethics hotline
High voluntary self-reporting rates indicate employees trust the system and feel safe reporting concerns, reflecting genuine cultural commitment to compliance.
Question 3: Which board committee typically has primary oversight responsibility for the compliance function?
- Compensation committee
- Nominating and governance committee
- Audit committee (Correct answer)
- Executive committee
Correct answer: Audit committee
The audit committee typically oversees compliance, internal controls, and risk management as part of its governance mandate.
Question 4: A CCB professional is asked to design a board dashboard. Which frequency is most appropriate for a compliance KPI dashboard?
- Daily
- Weekly
- Quarterly (Correct answer)
- Annually
Correct answer: Quarterly
Quarterly dashboards align with board meeting cycles and provide sufficient time for trends to emerge while keeping oversight current.
Question 5: Under the Sarbanes-Oxley Act, what must the CEO and CFO certify regarding internal controls in reports to the board and SEC?
- That no material weaknesses exist in any controls
- That they have evaluated and reported on the effectiveness of internal controls over financial reporting (Correct answer)
- That all compliance violations have been corrected
- That external auditors have approved the control environment
Correct answer: That they have evaluated and reported on the effectiveness of internal controls over financial reporting
SOX Section 302 requires CEO and CFO certification that they have assessed and disclosed the effectiveness of disclosure controls and internal controls.
Question 6: A board member asks why the compliance report shows 'open findings' from last quarter. What governance principle does this monitoring reflect?
- Risk appetite setting
- Issue tracking and remediation accountability (Correct answer)
- Tone at the top
- Board self-assessment
Correct answer: Issue tracking and remediation accountability
Tracking open findings ensures accountability for remediation and demonstrates the board's ongoing oversight of control deficiencies.
Question 7: What is the significance of an 'executive session' in board governance?
- A session where the CEO presents the strategic plan
- A meeting of independent directors without management present (Correct answer)
- A joint session with external auditors only
- A session restricted to the compliance and legal teams
Correct answer: A meeting of independent directors without management present
Executive sessions allow independent directors to discuss concerns about management candidly without executives present, supporting objective oversight.
CCB Board Reporting & Governance 3
When reporting a significant compliance breach to the board, which element is LEAST appropriate to include in the initial report?