CCEP Risk Assessment & Monitoring 2

Question 1

Which methodology assigns numerical values to the likelihood and impact of risks to calculate an overall risk score?

Accepted Answer

Quantitative risk assessment

Answer

Quantitative risk assessment uses numerical values to calculate risk scores, enabling more precise prioritization and resource allocation.

Question 2

A compliance officer discovers that a business unit consistently underreports incidents. What is the BEST initial response?

Accepted Answer

Conduct a root-cause analysis to identify why underreporting occurs

Answer

Root-cause analysis identifies whether underreporting stems from cultural, process, or training issues before prescribing a remedy.

Question 3

What does a 'risk appetite statement' formally communicate?

Accepted Answer

The maximum loss a company is willing to accept while pursuing its objectives

Answer

A risk appetite statement defines the level and type of risk an organization is willing to accept in pursuit of its strategic goals.

Question 4

Which control type is designed to detect a compliance violation AFTER it has occurred?

Accepted Answer

Detective control

Answer

Detective controls identify and surface compliance violations after they occur, such as audits, reconciliations, and monitoring reports.

Question 5

An organization operates in a highly regulated industry with rapidly changing rules. Which monitoring approach is MOST appropriate?

Accepted Answer

Continuous regulatory monitoring integrated with real-time alerts

Answer

Continuous monitoring with real-time alerts allows organizations to detect and respond to regulatory changes and compliance gaps as they emerge.

(CCEP) Certified Compliance and Ethics Professional Practice Test