CCM Ethics and Whistleblower Protections Flashcards

A compliance officer discovers that the CFO has structured a series of related-party transactions to fall just below the materiality threshold requiring board disclosure. The CFO argues this is legal because no single transaction triggers reporting requirements. Under CCM ethical standards, what is the compliance officer's primary obligation?

Answer: Report the pattern of transactions to the audit committee as a potential structured evasion of disclosure controls, regardless of individual transaction size

CCM ethics requires looking at substance over form. A pattern of transactions deliberately structured to circumvent disclosure controls—sometimes called 'salami slicing'—violates the spirit of transparency obligations even when each transaction is technically below threshold. The compliance officer has an affirmative duty to report the pattern to the audit committee because the aggregate behavior constitutes a control evasion scheme, not merely aggressive but legal structuring.

An employee submits an internal whistleblower complaint alleging financial fraud. Before the investigation concludes, the employee is transferred to a less desirable role due to a 'pre-planned reorganization' that was documented only after the complaint was filed. Under the anti-retaliation provisions most relevant to CCM practice, which factor is most determinative in establishing protected retaliation?

Answer: Whether the adverse employment action would have occurred absent the protected disclosure, evaluated under a 'but-for' causation standard

Under the 'but-for' causation standard used in major whistleblower frameworks (including Dodd-Frank and SOX), the key question is whether the adverse action would have occurred absent the protected disclosure. Post-hoc documentation of a 'pre-planned' reorganization is a classic retaliatory pretext. While supervisor awareness and financial harm are relevant factors, the ultimate test is causation—not procedural formality or a specific compensation threshold.

A CCM-certified compliance manager is reviewing her firm's code of conduct and discovers it contains a clause requiring employees to notify the company's legal department before filing any complaint with a government regulatory agency. The manager knows that SEC and CFTC whistleblower rules explicitly address such clauses. What is the correct compliance posture?

Answer: Recommend immediate removal of the clause, as it constitutes an impermissible impediment to direct SEC/CFTC reporting and may itself violate Rule 21F-17

SEC Rule 21F-17 (and parallel CFTC rules) prohibits any action that impedes an individual from communicating directly with the SEC about a possible securities law violation, including contractual provisions that require pre-approval or notification before reporting. Even a 'notify us first' clause has been the basis for SEC enforcement actions and significant fines. A carve-out (Option B) is insufficient because the clause still chills reporting for non-exempt issues; full removal is required.

During a privileged internal investigation, outside counsel interviews a mid-level manager who reveals information suggesting the CEO is the primary architect of the alleged misconduct. The company's general counsel wants to share this information with the CEO to allow him to 'prepare a response' before the board is notified. A CCM-certified compliance professional advising on this situation should recognize this as:

Answer: A potential obstruction of the investigation that compromises board oversight and may constitute a breach of fiduciary duty to shareholders

When the subject of an investigation is a senior executive, sharing investigative findings with that executive before the board is notified—particularly when done to allow 'preparation'—creates serious risks: it can compromise evidence, enable retaliation, and represents a conflict of interest where management is effectively supervising an investigation of itself. CCM ethics require that board-level oversight be preserved and that investigations of senior executives flow directly to the audit committee or independent directors, not through the subject's chain of command.

A compliance officer at a publicly traded company receives an anonymous tip through the hotline alleging that a VP of Sales has been falsifying customer contracts to hit quarterly revenue targets. The tip includes enough detail to be credible. Before conducting any interviews, the compliance officer should FIRST:

Answer: Preserve and forensically image relevant electronic records and communications to prevent spoliation before the subject or others become aware of the investigation

Evidence preservation is the critical first step in any credible misconduct investigation. Revenue recognition fraud involves documents, emails, and financial records that can be altered or deleted quickly once the subject becomes aware of scrutiny. Notifying the subject before securing evidence (Option B) is a classic spoliation risk. There is no mandatory 10-day SEC filing requirement at this stage (Option C)—materiality and certainty thresholds must first be assessed. Consulting auditors (Option D) is appropriate later but not before evidence is secured.

A foreign subsidiary of a U.S. multinational receives a demand from a local government official offering to expedite a critical operating license in exchange for a payment characterized as an 'administrative facilitation fee' permitted under local law. The subsidiary's country manager argues that because the payment is legal locally and is a 'facilitating payment' exception under the pre-2016 FCPA guidance, it should be approved. A CCM-certified compliance manager's most accurate assessment is:

Answer: The facilitating payments exception under the FCPA is narrow, increasingly disfavored by DOJ/SEC, and does not apply to licensing decisions that involve governmental discretion—this payment likely does not qualify

The FCPA's facilitating payments exception applies only to non-discretionary, routine governmental actions (e.g., processing a visa that has already been approved). License issuance involves discretion—the official is deciding whether to grant a license—so the exception does not apply regardless of local law permissibility. DOJ/SEC have also signaled they will scrutinize facilitating payments aggressively, and many U.S. multinationals have eliminated the exception from their policies entirely. Accurate books-and-records entries (Option D) do not cure the underlying FCPA violation.