CCCP Compliance Effectiveness Assessment 5

Question 1

Which type of assessment involves compliance staff independently testing whether business unit controls are operating as designed?

Accepted Answer

Second-line compliance monitoring and testing

Answer

Second-line compliance monitoring involves the compliance function independently testing controls, separate from business unit self-assessment.

Question 2

A company wants to assess whether its anti-bribery controls are effective in its high-risk overseas operations. Which approach provides the strongest evidence?

Accepted Answer

Conducting transaction testing of expense reports and third-party payments in those operations

Answer

Transaction-level testing of actual payments provides direct evidence of whether anti-bribery controls are working in practice.

Question 3

According to the DOJ's Evaluation of Corporate Compliance Programs, what does it mean for a compliance program to be 'working in practice'?

Accepted Answer

Employees understand, follow, and report issues under the program in their day-to-day work

Answer

The DOJ focuses on whether the program functions in reality—employees' actual behavior and awareness—not just what policies say on paper.

Question 4

During a compliance effectiveness review, which finding would most suggest that the compliance function lacks organizational independence?

Accepted Answer

Compliance investigations are reviewed and approved by the business unit being investigated

Answer

Allowing a business unit to control or approve its own investigations creates a structural conflict that compromises compliance independence.

Question 5

A company updates its compliance program annually but never changes training content or risk assessments. Under a compliance effectiveness framework, this reflects a failure of:

Accepted Answer

Continuous improvement and adaptation to evolving risks

Answer

Effective compliance programs must continuously update to reflect new risks, regulatory changes, and lessons learned—not just formally schedule reviews without substantive changes.

(CCCP) Certified Corporate Compliance Professional Practice Test

(CCCP) Certified Corporate Compliance Professional Practice Test

CCCP Compliance Effectiveness Assessment 5