CCB Board Reporting & Governance 5 — Questions and Answers
Question 1: A publicly traded company's board receives a compliance report flagging a potential FCPA violation overseas. What is the board's FIRST obligation?
- Issue a public press release immediately
- Engage legal counsel and initiate an independent investigation (Correct answer)
- Require the CEO to personally travel to investigate
- Wait for the SEC to formally notify the company
Correct answer: Engage legal counsel and initiate an independent investigation
Upon receiving credible FCPA violation allegations, the board must promptly engage independent legal counsel to investigate before any other action.
Question 2: What is the role of a 'Governance, Risk, and Compliance (GRC)' platform in board reporting?
- It replaces the need for a compliance officer
- It centralizes and automates collection, reporting, and tracking of compliance and risk data for board visibility (Correct answer)
- It is used exclusively by external auditors
- It eliminates the need for board-level risk committees
Correct answer: It centralizes and automates collection, reporting, and tracking of compliance and risk data for board visibility
GRC platforms consolidate compliance, risk, and audit data into dashboards that give the board a real-time, integrated view of the organization's risk posture.
Question 3: Which scenario demonstrates the board fulfilling its 'duty of loyalty'?
- A director abstaining from a vote on a contract that benefits his own company (Correct answer)
- A director voting in favor of a deal that personally enriches them
- A director leaking confidential board discussions to investors
- A director pressuring management to increase short-term profits
Correct answer: A director abstaining from a vote on a contract that benefits his own company
Abstaining from a vote where a conflict of interest exists demonstrates the duty of loyalty by prioritizing the company's interests over personal gain.
Question 4: A board is evaluating its own governance practices. What is this process called?
- Peer benchmarking
- Board self-assessment or board evaluation (Correct answer)
- Internal audit review
- External governance rating
Correct answer: Board self-assessment or board evaluation
Board self-assessment is a periodic process where directors evaluate the effectiveness of the board's structure, processes, and individual contributions.
Question 5: In a compliance report to the board, 'key risk indicators (KRIs)' differ from 'key performance indicators (KPIs)' in that KRIs:
- Measure past achievements of compliance goals
- Signal early warning signs of increasing risk exposure (Correct answer)
- Track regulatory filing completion rates
- Report on employee satisfaction with the compliance program
Correct answer: Signal early warning signs of increasing risk exposure
KRIs are forward-looking metrics that indicate rising risk levels before a compliance failure occurs, unlike KPIs which measure past performance.
Question 6: A nonprofit board member asks if governance requirements differ from for-profit boards. Which statement is accurate?
- Nonprofits have no fiduciary duties because they lack shareholders
- Nonprofit directors owe fiduciary duties to the mission and beneficiaries, not shareholders (Correct answer)
- Nonprofit boards are not required to have conflict-of-interest policies
- Sarbanes-Oxley fully applies to nonprofit organizations
Correct answer: Nonprofit directors owe fiduciary duties to the mission and beneficiaries, not shareholders
Nonprofit board members owe fiduciary duties of care, loyalty, and obedience to the organization's charitable mission rather than to equity shareholders.
Question 7: Which approach to board compliance reporting best supports a 'risk-based' governance model?
- Reporting every compliance activity regardless of significance
- Prioritizing and escalating issues based on risk severity and potential impact (Correct answer)
- Reporting only violations that resulted in regulatory fines
- Providing identical reports to all committees regardless of their oversight focus
Correct answer: Prioritizing and escalating issues based on risk severity and potential impact
Risk-based reporting focuses board attention on high-severity issues, enabling more effective oversight by distinguishing critical risks from routine activities.
CCB Board Reporting & Governance 5
A publicly traded company's board receives a compliance report flagging a potential FCPA violation overseas.
What is the board's FIRST obligation?