CCEP Standards and Procedures 2 — Questions and Answers
Question 1: When an organization discovers that an existing policy conflicts with a newly enacted federal regulation, what is the FIRST step in the remediation process?
- Immediately suspend the conflicting policy pending legal review
- Conduct a gap analysis to document the specific areas of conflict (Correct answer)
- Notify the board of directors and request emergency authority to act
- Issue a temporary waiver allowing continued non-compliant behavior
Correct answer: Conduct a gap analysis to document the specific areas of conflict
A gap analysis systematically identifies where the existing policy diverges from the new regulatory requirement, providing the factual basis for targeted remediation.
Question 2: Which element is MOST critical when drafting a code of conduct to ensure employees can apply it in real-world situations?
- Detailed legal citations for every prohibition
- Illustrative scenarios and practical examples (Correct answer)
- Signatures from all members of senior leadership
- A comprehensive glossary of compliance terminology
Correct answer: Illustrative scenarios and practical examples
Practical examples and scenarios help employees understand how abstract ethical principles translate into day-to-day decisions.
Question 3: A company operates in 12 countries with varying local laws. What approach BEST balances global consistency with local compliance requirements in its standards?
- Adopt the strictest country's standards globally and apply them uniformly
- Create entirely separate codes of conduct for each country
- Establish a global baseline policy with country-specific addenda addressing local variances (Correct answer)
- Delegate all policy-writing authority to local legal counsel in each country
Correct answer: Establish a global baseline policy with country-specific addenda addressing local variances
A global baseline with local addenda ensures core ethical commitments are consistent worldwide while accommodating jurisdiction-specific legal requirements.
Question 4: Under the FCPA, which type of payment is explicitly permitted as an affirmative defense?
- Payments to foreign officials to expedite routine governmental actions (facilitating payments) (Correct answer)
- Charitable donations made on behalf of a foreign official's preferred nonprofit
- Payments disclosed in financial statements but not approved by the board
- Commission payments to third-party agents who pass funds to officials
Correct answer: Payments to foreign officials to expedite routine governmental actions (facilitating payments)
The FCPA contains a narrow facilitating payments exception for payments made to expedite or secure routine, non-discretionary governmental actions.
Question 5: What is the primary purpose of including an escalation matrix in a compliance procedure?
- To assign disciplinary authority to HR for all policy violations
- To specify the chain of reporting when standard procedures are insufficient or a matter is high-risk (Correct answer)
- To document approval hierarchies for budget expenditures
- To replace the need for a hotline by routing concerns internally
Correct answer: To specify the chain of reporting when standard procedures are insufficient or a matter is high-risk
An escalation matrix defines when and to whom issues must be elevated, ensuring that high-risk matters reach appropriate decision-makers promptly.
Question 6: Which metric is the LEAST reliable indicator that a compliance policy is effective?
- Rate of self-reported violations through the hotline
- Employee scores on policy comprehension assessments
- Number of pages in the policy document (Correct answer)
- Reduction in confirmed substantiated violations over time
Correct answer: Number of pages in the policy document
Document length is an output measure of effort, not an outcome measure of whether the policy changes employee behavior or reduces misconduct.
Question 7: A vendor contract contains a clause requiring the vendor to comply with the company's code of conduct. What compliance control does this clause primarily represent?
- A preventive control extending compliance obligations to third parties (Correct answer)
- A detective control that identifies vendor misconduct after it occurs
- A corrective control that remedies vendor breaches post-incident
- A compensating control substituting for direct vendor audits
Correct answer: A preventive control extending compliance obligations to third parties
Contractual compliance clauses are preventive controls because they establish obligations before any misconduct occurs and create a legal basis for enforcement.
When an organization discovers that an existing policy conflicts with a newly enacted federal regulation, what is the FIRST step in the remediation process?