CCB Whistleblower & Hotline Management 3 — Questions and Answers
Question 1: A compliance team receives a hotline report alleging financial fraud by the CFO. Who should typically lead the investigation to preserve independence?
- The CFO's direct supervisor
- Internal audit reporting to the CFO
- Outside counsel or a special committee of independent directors (Correct answer)
- The company's external auditor
Correct answer: Outside counsel or a special committee of independent directors
When a senior executive is implicated, independence is best preserved by engaging outside counsel or forming a special committee of independent board members.
Question 2: Under the False Claims Act's qui tam provision, a relator (whistleblower) may receive what percentage of the government's recovery if the government intervenes?
- 5–10%
- 10–25%
- 15–30% (Correct answer)
- 25–40%
Correct answer: 15–30%
When the government intervenes in a False Claims Act qui tam suit, the relator receives between 15% and 25% of the recovery.
Question 3: Which hotline design feature most directly enables employees in remote or international locations to report concerns?
- In-person drop boxes at headquarters
- Multi-language, 24/7 telephony with toll-free international access (Correct answer)
- Email reporting to the compliance director only
- Suggestion boxes outside the HR office
Correct answer: Multi-language, 24/7 telephony with toll-free international access
A multi-language, around-the-clock telephone hotline with international toll-free access removes barriers for geographically dispersed employees.
Question 4: What does 'triage' mean in the context of hotline case management?
- Discarding low-priority reports without review
- Ranking and routing incoming reports based on severity and subject matter (Correct answer)
- Aggregating reports to identify trends over a fiscal year
- Escalating all reports directly to the board audit committee
Correct answer: Ranking and routing incoming reports based on severity and subject matter
Triage is the process of evaluating, prioritizing, and directing incoming reports to the appropriate investigative team based on risk and subject matter.
Question 5: A company's hotline vendor stores call recordings in a foreign country. Which compliance concern is most immediately raised?
- Violation of antitrust regulations
- Cross-border data privacy and sovereignty requirements (Correct answer)
- Breach of employment arbitration agreements
- Conflict with internal audit charter
Correct answer: Cross-border data privacy and sovereignty requirements
Storing whistleblower data abroad triggers compliance obligations under laws such as GDPR, local labor codes, and data-sovereignty rules that may restrict data transfer.
Question 6: What is the main risk of an overly narrow hotline scope that only accepts reports of financial fraud?
- It reduces call volume to a manageable level
- It may cause employees to underreport safety, harassment, or ethical violations (Correct answer)
- It satisfies most regulatory requirements
- It simplifies case management software requirements
Correct answer: It may cause employees to underreport safety, harassment, or ethical violations
A narrowly scoped hotline leaves employees with no formal channel for non-financial concerns, suppressing critical reports and undermining speak-up culture.
Question 7: Which governance body typically has ultimate oversight responsibility for a whistleblower/hotline program at a public company?
- The Chief Compliance Officer
- The Audit Committee of the Board of Directors (Correct answer)
- The General Counsel's office
- The Chief Human Resources Officer
Correct answer: The Audit Committee of the Board of Directors
SOX and best practices place the Audit Committee in the oversight role for hotline programs, including receipt and handling of complaints about accounting and internal controls.
CCB Whistleblower & Hotline Management 3
A compliance team receives a hotline report alleging financial fraud by the CFO.
Who should typically lead the investigation to preserve independence?