CCCP Board & Executive Communication 2 — Questions and Answers
Question 1: When a compliance officer discovers a material regulatory violation, what is the MOST appropriate initial escalation path to the board?
- Email all board members simultaneously without prior notice
- Notify the audit committee chair first, then determine if full board disclosure is needed (Correct answer)
- Wait until the next scheduled board meeting to avoid alarm
- Report directly to external regulators before informing the board
Correct answer: Notify the audit committee chair first, then determine if full board disclosure is needed
The audit committee chair is the designated first contact for material compliance issues, enabling structured escalation and privilege protection.
Question 2: A CEO instructs the CCO to omit a pending DOJ investigation from the board's quarterly compliance report. The CCO should:
- Comply with the CEO's instruction to maintain executive unity
- Omit the item but document the CEO's instruction in personal files
- Refuse and escalate directly to the board's audit committee (Correct answer)
- Resign immediately to avoid liability
Correct answer: Refuse and escalate directly to the board's audit committee
The CCO has an independent duty to the board and cannot withhold material legal matters at an executive's direction.
Question 3: Which format is BEST suited for presenting a complex multi-jurisdiction compliance risk to a board with limited regulatory background?
- A dense 40-page legal memorandum with full statutory citations
- A one-page heat map with tiered risk ratings and a brief executive summary (Correct answer)
- An oral-only presentation to avoid creating discoverable documents
- A spreadsheet of all violations without prioritization or context
Correct answer: A one-page heat map with tiered risk ratings and a brief executive summary
Heat maps with executive summaries communicate risk tiers efficiently and support board members in making informed decisions without legal expertise.
Question 4: The board requests real-time compliance metrics. The compliance officer should FIRST:
- Build a custom dashboard and deploy it within 24 hours
- Assess data availability, accuracy, and reporting cadence feasibility before committing (Correct answer)
- Decline, citing confidentiality concerns
- Delegate the entire project to IT without compliance input
Correct answer: Assess data availability, accuracy, and reporting cadence feasibility before committing
Committing to metrics before validating underlying data integrity risks presenting inaccurate information to the board.
Question 5: During a board meeting, a director asks the CCO a question about a specific employee investigation. The CCO should:
- Answer fully in open session to demonstrate transparency
- Defer to counsel and offer to discuss in executive session to protect confidentiality (Correct answer)
- Decline to answer and leave the meeting
- Provide all investigation documents to the full board immediately
Correct answer: Defer to counsel and offer to discuss in executive session to protect confidentiality
Active investigations require confidentiality protections; executive session with counsel preserves privilege and prevents prejudice.
Question 6: A compliance officer wants to ensure the board understands the company's ethics hotline trend data. Which approach is MOST effective?
- Present raw call volume numbers without context or comparison
- Show year-over-year trends, category breakdowns, and benchmarks against industry peers (Correct answer)
- Summarize all cases in a single aggregate number to protect privacy
- Only report cases that resulted in terminations
Correct answer: Show year-over-year trends, category breakdowns, and benchmarks against industry peers
Trend data with industry benchmarks gives the board meaningful context to evaluate hotline effectiveness and culture health.
Question 7: When preparing board materials on a new regulatory requirement, the compliance officer should PRIMARILY focus on:
- Detailed legislative history and committee debates
- Business impact, gap assessment, required resources, and implementation timeline (Correct answer)
- Legal definitions and statutory language verbatim
- Competitor responses to the regulation only
Correct answer: Business impact, gap assessment, required resources, and implementation timeline
Board members need to understand operational impact and resource requirements to fulfill their oversight and decision-making roles.
CCCP Board & Executive Communication 2
When a compliance officer discovers a material regulatory violation, what is the MOST appropriate initial escalation path to the board?