CCCP Board & Executive Communication 3 — Questions and Answers
Question 1: Attorney-client privilege over compliance communications to the board is BEST preserved when:
- The CCO sends emails to all executives copied to outside counsel
- Legal counsel directs the investigation and communications are marked as attorney-client privileged (Correct answer)
- Board minutes document all compliance details in full
- Compliance reports are shared with investors upon request
Correct answer: Legal counsel directs the investigation and communications are marked as attorney-client privileged
Privilege requires that legal counsel direct the work and communications be properly labeled and limited in distribution.
Question 2: A board director contacts the CCO directly to request a personal briefing on a regulatory matter before the full board meeting. The CCO should:
- Provide a full briefing immediately without informing other directors
- Consult with the board chair and general counsel before conducting an individual briefing (Correct answer)
- Refuse all pre-meeting contact with individual directors
- Forward all compliance records to the director without review
Correct answer: Consult with the board chair and general counsel before conducting an individual briefing
Pre-meeting briefings with individual directors can create information asymmetry; coordination with leadership ensures appropriate governance.
Question 3: Which of the following BEST describes the 'duty to inquire' concept relevant to board compliance oversight?
- The board must audit every transaction personally
- Directors must ask probing questions when red flags suggest compliance weaknesses (Correct answer)
- The CCO must inquire about all board members' personal finances
- Regulators must be asked to explain each new rule
Correct answer: Directors must ask probing questions when red flags suggest compliance weaknesses
The duty to inquire requires directors to probe deeper when warning signs emerge, rather than accepting management's assurances passively.
Question 4: An executive team proposes reframing a compliance failure as a 'process improvement opportunity' in the board report. The CCO should:
- Accept the framing to support executive morale
- Insist on accurate characterization of the failure while noting corrective actions (Correct answer)
- Remove the item from the board report entirely
- Let the CEO decide the framing without CCO input
Correct answer: Insist on accurate characterization of the failure while noting corrective actions
Accurate reporting of compliance failures is required for board oversight; sanitizing failures undermines directors' ability to fulfill their governance role.
Question 5: How often should a compliance officer present a comprehensive program update to the full board, at minimum?
- Monthly, with full metrics every time
- Annually, with interim audit committee updates as needed (Correct answer)
- Only when regulators request it
- Every five years at strategic planning sessions
Correct answer: Annually, with interim audit committee updates as needed
Best practice calls for at least annual full-board compliance updates, supplemented by more frequent audit committee engagement.
Question 6: When communicating a newly identified compliance gap to the executive team before board reporting, the CCO should FIRST:
- Publicly announce the gap to all employees
- Assess severity, document findings, and present a preliminary remediation plan to leadership (Correct answer)
- Escalate to regulators before informing the executive team
- Wait for the annual risk assessment to include the gap
Correct answer: Assess severity, document findings, and present a preliminary remediation plan to leadership
Internal documentation with a remediation plan allows the executive team to respond constructively before formal board escalation.
Question 7: A board member asks why the compliance budget increased 30% year over year. The BEST response from the CCO includes:
- A vague statement about increased regulatory complexity
- Specific drivers such as new regulations, headcount additions, technology investments, and cost-benefit outcomes (Correct answer)
- A comparison to the marketing budget to justify the increase
- A request to defer the question to the CFO only
Correct answer: Specific drivers such as new regulations, headcount additions, technology investments, and cost-benefit outcomes
Boards expect compliance spending to be justified with specific drivers and demonstrated value, not general references to complexity.
CCCP Board & Executive Communication 3
Attorney-client privilege over compliance communications to the board is BEST preserved when: