CCCP Compliance Program Development & Oversight 2 — Questions and Answers
Question 1: Which element is considered the foundation of an effective compliance program according to the U.S. Sentencing Guidelines?
- Written policies and procedures
- Leadership commitment and tone at the top (Correct answer)
- A dedicated compliance hotline
- Annual compliance training
Correct answer: Leadership commitment and tone at the top
The U.S. Sentencing Guidelines emphasize that genuine commitment from senior leadership—'tone at the top'—is the foundational element of an effective compliance program.
Question 2: A compliance officer discovers that a business unit is pressuring employees to meet targets in ways that may violate policy. What is the MOST appropriate first step?
- Immediately suspend the business unit's operations
- Report the issue directly to regulators without internal escalation
- Escalate the concern to senior leadership or the board audit committee (Correct answer)
- Issue a company-wide memo warning against policy violations
Correct answer: Escalate the concern to senior leadership or the board audit committee
The compliance officer should escalate to senior leadership or the board's audit committee to ensure proper investigation before taking external action.
Question 3: What does a 'compliance risk assessment' primarily help an organization determine?
- The number of employees who need compliance training
- Where the organization's greatest compliance vulnerabilities lie (Correct answer)
- The annual budget needed for the compliance department
- Which regulators are most likely to conduct audits
Correct answer: Where the organization's greatest compliance vulnerabilities lie
A compliance risk assessment identifies and prioritizes an organization's areas of greatest legal and regulatory exposure so resources can be directed accordingly.
Question 4: Which of the following BEST describes a 'compliance program gap analysis'?
- A review comparing current compliance controls against required or best-practice standards (Correct answer)
- An audit of employee expense reports for potential fraud
- A legal review of all contracts signed in the past year
- A training needs assessment for new hires
Correct answer: A review comparing current compliance controls against required or best-practice standards
A gap analysis compares the organization's existing compliance program elements against regulatory requirements or industry best practices to identify deficiencies.
Question 5: An organization's compliance committee meets quarterly but has no formal charter or documented authority. What risk does this create?
- Employees may not know who to contact for compliance questions
- The committee's decisions may lack legitimacy and enforceability (Correct answer)
- Regulators will automatically impose sanctions on the organization
- The organization cannot maintain a confidential reporting hotline
Correct answer: The committee's decisions may lack legitimacy and enforceability
Without a formal charter, the compliance committee lacks documented authority, making its decisions potentially unenforceable and its role ambiguous.
Question 6: Under the FCPA, which type of payment to foreign officials is explicitly permitted?
- Payments to secure any business advantage
- Facilitation payments for routine governmental actions (Correct answer)
- Payments disguised as charitable donations
- Payments routed through third-party agents
Correct answer: Facilitation payments for routine governmental actions
The FCPA's narrow facilitation payment exception permits small payments to expedite routine non-discretionary government actions, such as processing permits.
Question 7: What is the primary purpose of a compliance program's 'monitoring and auditing' pillar?
- To discipline employees who violate policy
- To verify that compliance controls are operating effectively over time (Correct answer)
- To negotiate settlements with regulatory agencies
- To update the compliance training curriculum annually
Correct answer: To verify that compliance controls are operating effectively over time
Ongoing monitoring and periodic auditing verify that compliance controls are functioning as intended and identify issues before they become significant violations.
CCCP Compliance Program Development & Oversight 2
Which element is considered the foundation of an effective compliance program according to the U.S.
Sentencing Guidelines?