CCEP Ethics Program Management 2 — Questions and Answers
Question 1: A compliance officer discovers that the ethics hotline vendor has been logging caller metadata without authorization. What is the MOST appropriate immediate action?
- Terminate the vendor contract immediately
- Suspend hotline operations and notify the board audit committee (Correct answer)
- Conduct an internal investigation before taking any action
- Issue a public statement about the data breach
Correct answer: Suspend hotline operations and notify the board audit committee
Suspending operations to stop ongoing harm and notifying the board audit committee ensures proper governance oversight of a serious breach affecting reporter confidentiality.
Question 2: Which metric BEST measures the effectiveness of an ethics training program?
- Completion rate of training modules
- Post-training assessment scores
- Reduction in reported misconduct over time (Correct answer)
- Number of employees who signed the code of conduct
Correct answer: Reduction in reported misconduct over time
A reduction in reported misconduct over time is the most meaningful outcome metric because it reflects actual behavioral change rather than just participation.
Question 3: Under the U.S. Sentencing Guidelines, which factor can REDUCE a fine for an organization convicted of a federal offense?
- Having a compliance program that was ineffective at the time of the offense
- Self-reporting the offense to authorities before investigation (Correct answer)
- Settling the matter without admitting guilt
- Replacing the CEO after the offense was discovered
Correct answer: Self-reporting the offense to authorities before investigation
Self-reporting before a government investigation is a mitigating factor under the USSG that can significantly reduce organizational fines.
Question 4: A compliance manager wants to conduct a speak-up culture assessment. Which tool is MOST appropriate?
- Exit interview data only
- Anonymous employee survey with validated questions (Correct answer)
- Review of hotline call volumes alone
- Focus groups led by direct supervisors
Correct answer: Anonymous employee survey with validated questions
An anonymous validated survey captures candid perceptions across the organization without the social pressure that undermines other methods.
Question 5: Which element of the DOJ's evaluation framework for compliance programs asks whether the program works 'in practice'?
- Is it well-designed?
- Is it adequately resourced and empowered?
- Does it work in practice? (Correct answer)
- Is it integrated into business operations?
Correct answer: Does it work in practice?
The DOJ's three-part test explicitly asks whether the compliance program 'works in practice,' focusing on operational effectiveness rather than paper existence.
Question 6: A global company's ethics code prohibits facilitation payments, but a local manager argues they are legally permitted in the host country. How should the compliance officer respond?
- Allow the payment since local law permits it
- Apply the stricter global policy and document the decision (Correct answer)
- Seek a legal waiver from corporate counsel
- Defer to the local manager's judgment
Correct answer: Apply the stricter global policy and document the decision
A company's global ethics code establishes the minimum standard that supersedes local permissions, and the stricter policy should be enforced consistently.
Question 7: What is the PRIMARY purpose of a conflict-of-interest disclosure process?
- To penalize employees with personal financial interests
- To identify and manage situations where personal interests may compromise professional judgment (Correct answer)
- To prevent employees from having outside employment
- To satisfy SEC reporting requirements only
Correct answer: To identify and manage situations where personal interests may compromise professional judgment
Conflict-of-interest disclosure processes are designed to surface potential conflicts so they can be managed, not necessarily to prohibit all outside interests.
CCEP Ethics Program Management 2
A compliance officer discovers that the ethics hotline vendor has been logging caller metadata without authorization.
What is the MOST appropriate immediate action?