CCCP International Compliance Programs 3 — Questions and Answers
Question 1: Which element is considered the cornerstone of an effective international third-party due diligence program?
- Risk-tiered screening calibrated to the third party's country, sector, and access to government officials (Correct answer)
- Collecting the same set of documents from all third parties regardless of risk
- Relying solely on third parties' self-certifications of compliance
- Screening third parties only at the time of initial onboarding
Correct answer: Risk-tiered screening calibrated to the third party's country, sector, and access to government officials
Risk-tiered due diligence allocates investigative resources proportionally, applying enhanced scrutiny to third parties operating in high-risk environments or with significant government interaction.
Question 2: Under the FCPA, which of the following parties qualifies as a 'foreign official' for purposes of the anti-bribery provisions?
- An employee of a state-owned enterprise in a foreign country (Correct answer)
- A private sector executive of a publicly traded foreign company
- A foreign national employed by a U.S. company overseas
- A foreign country's private citizens acting as business consultants
Correct answer: An employee of a state-owned enterprise in a foreign country
FCPA defines 'foreign official' broadly to include employees of state-owned enterprises, as these entities are considered instruments of the foreign government.
Question 3: What does the 'books and records' provision of the FCPA require of issuers?
- Maintaining records that accurately and fairly reflect transactions and dispositions of assets (Correct answer)
- Publishing all financial transactions on a public website
- Retaining all business records for a minimum of 10 years
- Filing quarterly compliance certifications with the SEC
Correct answer: Maintaining records that accurately and fairly reflect transactions and dispositions of assets
The FCPA's books and records provisions require issuers to make and keep books that accurately reflect transactions and to maintain a system of internal accounting controls.
Question 4: A company operating in multiple jurisdictions must navigate conflicting data privacy laws. Which approach best addresses this challenge in an international compliance program?
- Apply the most restrictive standard as the global baseline while documenting jurisdiction-specific derogations (Correct answer)
- Follow the data laws of the country where the company is headquartered only
- Collect and store all data in a jurisdiction with the most permissive laws
- Handle data privacy compliance separately in each country with no global coordination
Correct answer: Apply the most restrictive standard as the global baseline while documenting jurisdiction-specific derogations
Applying the highest applicable standard globally ensures compliance across all jurisdictions while allowing documented exceptions where local law is more permissive.
Question 5: Which international sanctions regime is administered by the U.S. Treasury Department's Office of Foreign Assets Control (OFAC)?
- U.S. economic and trade sanctions programs targeting specific countries, entities, and individuals (Correct answer)
- U.S. export control regulations for dual-use technology
- U.S. anti-money laundering regulations for financial institutions
- U.S. import tariff schedules for international trade
Correct answer: U.S. economic and trade sanctions programs targeting specific countries, entities, and individuals
OFAC administers U.S. economic and trade sanctions programs based on foreign policy and national security goals, targeting countries, regimes, terrorists, drug traffickers, and proliferators.
Question 6: When establishing a compliance training program for international employees, which factor is most critical to ensure effectiveness?
- Translating content into local languages and adapting examples to reflect local business scenarios (Correct answer)
- Using the same English-language training materials for all global employees
- Limiting training to senior management and compliance staff
- Conducting training only when a new regulation is enacted
Correct answer: Translating content into local languages and adapting examples to reflect local business scenarios
Effective international training requires cultural and linguistic localization so employees can understand and apply compliance principles in their specific business context.
Question 7: What is the significance of a 'deemed export' in the context of international compliance and U.S. export control regulations?
- The transfer of controlled technology to a foreign national within the United States, treated as an export to their home country (Correct answer)
- The physical shipment of goods to a foreign country without a license
- Importing goods subject to U.S. tariffs from a restricted country
- Re-exporting U.S. technology from one foreign country to another
Correct answer: The transfer of controlled technology to a foreign national within the United States, treated as an export to their home country
Deemed exports occur when controlled technology is released to foreign nationals in the U.S. and are treated as an export to the individual's country of nationality, requiring appropriate licenses.
CCCP International Compliance Programs 3
Which element is considered the cornerstone of an effective international third-party due diligence program?