CCCP Board & Executive Communication 4 — Questions and Answers
Question 1: A whistleblower complaint alleges misconduct by the CEO. The CCO should report this FIRST to:
- The CEO directly to allow a response
- The independent directors or audit committee, bypassing the CEO (Correct answer)
- All employees via an internal announcement
- The SEC before conducting an internal investigation
Correct answer: The independent directors or audit committee, bypassing the CEO
When the alleged wrongdoer is the CEO, the CCO must bypass that individual and report directly to independent board members.
Question 2: Board materials prepared by the compliance function should generally be distributed how far in advance of a board meeting?
- During the meeting itself to prevent leaks
- 24 hours before the meeting
- Five to seven days before the meeting to allow meaningful review (Correct answer)
- Three weeks before, with daily updates
Correct answer: Five to seven days before the meeting to allow meaningful review
Distributing materials five to seven days in advance enables directors to read, reflect, and formulate questions before the meeting.
Question 3: The 'three lines of defense' model, when communicated to the board, assigns compliance primarily to which line?
- First line — business operations
- Second line — compliance, risk management, and legal functions (Correct answer)
- Third line — internal audit
- Fourth line — external regulators
Correct answer: Second line — compliance, risk management, and legal functions
The second line of defense encompasses compliance, risk management, and legal functions that provide oversight of the first line.
Question 4: Which metric is MOST useful for communicating the health of a compliance culture to the board?
- Total number of compliance policies in existence
- Percentage of employees completing ethics training combined with hotline utilization trends (Correct answer)
- Dollar amount spent on compliance technology
- Number of legal entities under compliance oversight
Correct answer: Percentage of employees completing ethics training combined with hotline utilization trends
Training completion rates combined with reporting channel utilization are behavioral indicators that reflect culture health, not just structural compliance.
Question 5: When presenting a sensitive government subpoena to the board, the CCO should coordinate PRIMARILY with:
- The marketing department to manage public messaging
- Outside counsel and the audit committee chair before any broader disclosure (Correct answer)
- All department heads simultaneously
- The company's largest investor before board notification
Correct answer: Outside counsel and the audit committee chair before any broader disclosure
Government subpoenas require immediate coordination with outside counsel and audit committee leadership to manage legal risk and privilege.
Question 6: A new board director with no compliance background asks the CCO to explain why a regulatory fine was classified as 'low risk' in the annual report. The CCO's BEST response is:
- Dismiss the question as outside the director's expertise
- Explain the risk classification criteria, the fine's magnitude relative to thresholds, and remediation status (Correct answer)
- Redirect the director to read the SEC filing without further explanation
- Provide only the fine dollar amount and move on
Correct answer: Explain the risk classification criteria, the fine's magnitude relative to thresholds, and remediation status
New directors deserve clear explanations of risk classification methodology to perform their oversight function effectively.
Question 7: A compliance officer presenting to the board should ideally conclude with:
- A lengthy Q&A session covering every possible follow-up topic
- A clear summary of key risks, decisions needed, and proposed next steps (Correct answer)
- A disclaimer that no assurances can be given about any compliance matter
- A request that the board delegate all compliance decisions back to management
Correct answer: A clear summary of key risks, decisions needed, and proposed next steps
Ending with clear decisions needed and next steps focuses board attention and drives actionable outcomes from compliance presentations.
CCCP Board & Executive Communication 4
A whistleblower complaint alleges misconduct by the CEO.
The CCO should report this FIRST to: