CCM CCM Compliance Program Management 4 — Questions and Answers
Question 1: When conducting a compliance program gap analysis, what is the primary objective?
- Identify discrepancies between current practices and regulatory requirements (Correct answer)
- Reduce the compliance department's budget
- Assign blame for past violations
- Eliminate all compliance documentation
Correct answer: Identify discrepancies between current practices and regulatory requirements
A gap analysis compares the organization's current compliance posture against applicable regulations and best practices to identify areas needing remediation.
Question 2: Which metric is most useful for measuring the effectiveness of a compliance training program?
- Number of training sessions held
- Post-training assessment scores combined with behavioral change indicators (Correct answer)
- Total cost of training materials
- Number of employees who attended voluntarily
Correct answer: Post-training assessment scores combined with behavioral change indicators
Effectiveness is best measured by combining knowledge retention (assessment scores) with observable changes in employee behavior on the job.
Question 3: A Compliance Manager discovers a potential conflict of interest involving a senior executive. What is the most appropriate immediate action?
- Ignore it to avoid political fallout
- Document the finding and escalate to the board's audit committee or general counsel (Correct answer)
- Discuss it informally with the executive's peers
- Announce it company-wide immediately
Correct answer: Document the finding and escalate to the board's audit committee or general counsel
Conflicts involving senior leadership must be escalated to an independent oversight body such as the audit committee or general counsel to ensure impartial review.
Question 4: Under the U.S. Federal Sentencing Guidelines, which factor most significantly reduces an organization's culpability score following a compliance violation?
- High profitability of the organization
- Having an effective compliance and ethics program in place prior to the offense (Correct answer)
- The number of years the company has been in business
- The size of the legal department
Correct answer: Having an effective compliance and ethics program in place prior to the offense
The Federal Sentencing Guidelines grant significant culpability reductions to organizations that had a genuine, effective compliance program before the offense occurred.
Question 5: What distinguishes a compliance 'policy' from a compliance 'procedure'?
- Policies are optional; procedures are mandatory
- Policies state what must be done; procedures describe how to do it (Correct answer)
- Procedures are approved by the board; policies are not
- Policies are shorter documents than procedures
Correct answer: Policies state what must be done; procedures describe how to do it
Policies establish principles and requirements (the 'what'), while procedures provide step-by-step instructions for implementing those policies (the 'how').
Question 6: Which approach best supports a 'speak-up' culture in an organization's compliance program?
- Requiring all concerns to be reported in writing only
- Offering multiple confidential reporting channels and strictly prohibiting retaliation (Correct answer)
- Limiting reporting to the direct supervisor chain
- Disclosing the identity of reporters to management
Correct answer: Offering multiple confidential reporting channels and strictly prohibiting retaliation
Multiple confidential channels and a firm non-retaliation policy reduce barriers to reporting and increase employee willingness to surface concerns.
Question 7: When prioritizing compliance risks for resource allocation, a CCM should primarily use which framework?
- First-in, first-out (FIFO) issue tracking
- Risk-based approach weighing likelihood and potential impact (Correct answer)
- Alphabetical ordering of risk categories
- Equal resource distribution across all risk areas
Correct answer: Risk-based approach weighing likelihood and potential impact
A risk-based approach focuses resources on the areas with the highest combination of likelihood and potential harm, maximizing program effectiveness.
CCM CCM Compliance Program Management 4
When conducting a compliance program gap analysis, what is the primary objective?