CCEP Standards, Policies & Procedures 2 — Questions and Answers
Question 1: Which element is most critical when drafting a compliance policy to ensure employee understanding and adherence?
- Using legal terminology throughout
- Writing in plain, clear language accessible to all employees (Correct answer)
- Limiting distribution to senior management
- Including references to every applicable regulation
Correct answer: Writing in plain, clear language accessible to all employees
Policies written in plain language improve comprehension and increase the likelihood of consistent employee adherence.
Question 2: A company's code of conduct conflicts with a specific departmental procedure. What is the appropriate resolution?
- The departmental procedure takes precedence as it is more specific
- The code of conduct supersedes departmental procedures as the higher-level document (Correct answer)
- Both documents should be ignored pending legal review
- Employees should choose whichever standard is easier to follow
Correct answer: The code of conduct supersedes departmental procedures as the higher-level document
The code of conduct is a higher-order governance document and generally supersedes lower-level departmental procedures when conflicts arise.
Question 3: What does a 'policy owner' primarily responsible for in a compliance program?
- Approving all employee expense reports
- Maintaining, updating, and enforcing the assigned policy (Correct answer)
- Conducting annual audits of the entire compliance program
- Reporting policy violations directly to regulators
Correct answer: Maintaining, updating, and enforcing the assigned policy
A policy owner is accountable for keeping the policy current, ensuring enforcement, and coordinating updates as regulations or business conditions change.
Question 4: Which scenario best illustrates a 'gap' in a compliance standards framework?
- A policy that has been approved but not yet published
- A regulatory requirement with no corresponding internal policy or control (Correct answer)
- A procedure that employees find overly burdensome
- A standard that was updated more than two years ago
Correct answer: A regulatory requirement with no corresponding internal policy or control
A compliance gap exists when an external regulatory requirement is not addressed by any internal policy, standard, or control.
Question 5: How often should a compliance policy generally be reviewed at minimum according to best practices?
- Every five years
- Only when a regulatory violation occurs
- Annually or whenever significant regulatory or business changes occur (Correct answer)
- Whenever a new employee is hired
Correct answer: Annually or whenever significant regulatory or business changes occur
Best practice dictates annual reviews supplemented by ad hoc reviews triggered by regulatory changes, mergers, or material business shifts.
Question 6: A new regulation requires a company to implement anti-bribery controls. What is the FIRST step in translating this requirement into policy?
- Immediately disciplining employees who may have violated the forthcoming rule
- Conducting a gap analysis to determine existing controls versus new requirements (Correct answer)
- Publishing the regulation text verbatim as an internal policy
- Seeking board approval before reading the regulation
Correct answer: Conducting a gap analysis to determine existing controls versus new requirements
A gap analysis identifies what existing controls already address the new requirement and what new policies or procedures must be developed.
Question 7: Which of the following best describes a 'standard' in the compliance document hierarchy?
- A narrative description of company values
- A mandatory requirement that specifies minimum acceptable behavior in support of a policy (Correct answer)
- A recommended but optional course of action
- A log of past compliance violations
Correct answer: A mandatory requirement that specifies minimum acceptable behavior in support of a policy
Standards set mandatory minimum requirements that operationalize a policy, sitting between high-level policies and detailed procedures.
CCEP Standards, Policies & Procedures 2
Which element is most critical when drafting a compliance policy to ensure employee understanding and adherence?