CCEP Standards and Procedures 3 — Questions and Answers
Question 1: Which of the following BEST describes the 'tone at the top' concept as it applies to compliance standards?
- Senior leaders drafting the initial version of all compliance policies
- Leadership visibly modeling the ethical values and behaviors the organization expects from all employees (Correct answer)
- The CEO personally approving every policy before it becomes effective
- Senior management ensuring the compliance department has the largest budget
Correct answer: Leadership visibly modeling the ethical values and behaviors the organization expects from all employees
Tone at the top refers to leadership demonstrating commitment to ethics through their own behavior, not merely endorsing written documents.
Question 2: A policy review triggered by a regulatory change is best described as what type of review?
- Periodic scheduled review
- Event-driven or triggered review (Correct answer)
- Post-incident remediation review
- Benchmarking review
Correct answer: Event-driven or triggered review
An event-driven review is initiated by a specific trigger—such as a new law or regulation—rather than by a calendar schedule.
Question 3: When developing procedures to support an anti-bribery policy, which element makes a procedure operationally effective rather than merely aspirational?
- Referencing the policy's legal basis in each procedure section
- Specifying role-by-role actions, approval thresholds, and documentation requirements (Correct answer)
- Including a foreword signed by the Chief Ethics Officer
- Cross-referencing all other company policies in an appendix
Correct answer: Specifying role-by-role actions, approval thresholds, and documentation requirements
Operational effectiveness requires that employees know exactly what actions to take, who must approve them, and what records to maintain.
Question 4: An employee handbook states that employees must report suspected fraud 'as soon as practicable.' Which improvement would make this standard more enforceable?
- Replacing 'as soon as practicable' with a specific time frame such as 'within 24 hours of discovery' (Correct answer)
- Adding a separate page that redefines 'practicable' in legal terms
- Requiring employees to sign the handbook annually to acknowledge the vague standard
- Moving the reporting obligation to a separate fraud policy document
Correct answer: Replacing 'as soon as practicable' with a specific time frame such as 'within 24 hours of discovery'
Replacing vague language with a defined time frame creates a measurable, enforceable obligation and removes ambiguity about when the duty to report is triggered.
Question 5: Which document typically serves as the highest-level governance instrument in a compliance program's policy hierarchy?
- Standard operating procedure (SOP)
- Work instruction
- Code of conduct or code of ethics (Correct answer)
- Training curriculum guide
Correct answer: Code of conduct or code of ethics
The code of conduct sits at the apex of the policy hierarchy because it articulates the organization's overarching ethical values that all other policies must support.
Question 6: A compliance officer is asked to create a procedure for approving gifts received from vendors. Which approval threshold structure is considered a best practice?
- No thresholds; all gifts must be approved by the CEO regardless of value
- Tiered thresholds where low-value gifts are self-reported, medium-value require manager approval, and high-value require CCO approval (Correct answer)
- A flat threshold where any gift above $1 must be returned immediately
- Thresholds set by each business unit independently without central oversight
Correct answer: Tiered thresholds where low-value gifts are self-reported, medium-value require manager approval, and high-value require CCO approval
Tiered approval thresholds match oversight intensity to risk level, making the procedure practical while ensuring adequate controls on higher-value items.
Question 7: Which of the following is an indicator that a compliance policy may have 'shelf life' issues and needs updating?
- The policy was written by outside legal counsel
- The policy references a law that has since been amended or repealed (Correct answer)
- The policy has not been violated in two years
- The policy is longer than 10 pages
Correct answer: The policy references a law that has since been amended or repealed
Referencing superseded legal authority is a clear sign that a policy has not been maintained and may no longer reflect current legal obligations.
Which of the following BEST describes the 'tone at the top' concept as it applies to compliance standards?