CCM Enforcement Actions & Penalties 3 — Questions and Answers
Question 1: Under the Sarbanes-Oxley Act (SOX), an officer who certifies financial statements knowing they are materially misleading faces a maximum criminal fine of:
- $1 million and/or 10 years imprisonment
- $5 million and/or 20 years imprisonment (Correct answer)
- $500,000 and/or 5 years imprisonment
- $10 million and/or 30 years imprisonment
Correct answer: $5 million and/or 20 years imprisonment
SOX Section 906 provides that willful false certifications carry a maximum penalty of $5 million in fines and/or 20 years imprisonment.
Question 2: The 'disgorgement' remedy in SEC enforcement actions is intended to:
- Punish the violator with additional fines above actual losses
- Strip the violator of ill-gotten gains to prevent unjust enrichment (Correct answer)
- Compensate injured investors directly from the violator's personal assets
- Bar the violator from future securities industry participation
Correct answer: Strip the violator of ill-gotten gains to prevent unjust enrichment
Disgorgement requires a violator to return profits obtained through illegal conduct, preventing unjust enrichment rather than providing additional punishment.
Question 3: A 'prompt corrective action' (PCA) framework under federal banking law primarily applies to:
- BSA/AML violations at money service businesses
- Undercapitalized depository institutions (Correct answer)
- Securities broker-dealers with net capital deficiencies
- Insurance companies with reserve shortfalls
Correct answer: Undercapitalized depository institutions
PCA is a statutory framework requiring regulators to take increasingly severe supervisory actions as a bank's capital ratios decline.
Question 4: Which principle guides a compliance officer in determining whether to self-report a potential violation to regulators before an examination discovers it?
- Self-reporting always guarantees immunity from civil penalties
- Self-reporting may mitigate penalties and demonstrates good faith, but does not eliminate liability (Correct answer)
- Self-reporting is required by law for all material compliance breaches
- Self-reporting triggers mandatory third-party independent review
Correct answer: Self-reporting may mitigate penalties and demonstrates good faith, but does not eliminate liability
Voluntary self-disclosure typically results in reduced penalties and reflects positively on a firm's compliance culture, but liability is not eliminated.
Question 5: An 'industry bar' imposed by FINRA prohibits a securities professional from:
- Trading personal securities for a specified period
- Associating with any FINRA member firm in any capacity (Correct answer)
- Holding supervisory responsibilities for five years
- Participating in public offerings above a dollar threshold
Correct answer: Associating with any FINRA member firm in any capacity
A FINRA industry bar is the most severe sanction, permanently or for a defined term prohibiting the individual from associating with any FINRA member firm.
Question 6: Under the Foreign Corrupt Practices Act (FCPA), 'books and records' violations may be prosecuted separately from bribery charges because they:
- Require proof of specific intent to bribe a foreign official
- Apply only to domestic transactions with U.S. government officials
- Are strict liability offenses that do not require proof of corrupt intent (Correct answer)
- Only apply to publicly traded companies with assets over $10 million
Correct answer: Are strict liability offenses that do not require proof of corrupt intent
FCPA accounting provisions are strict liability offenses for issuers, meaning no corrupt intent is required — inaccurate books alone suffice for liability.
Question 7: Which of the following scenarios most clearly describes 'vicarious liability' in a compliance enforcement context?
- A company is held liable for a compliance violation committed by its employee acting within the scope of employment (Correct answer)
- A compliance officer is personally fined for a violation committed by a third-party vendor
- A regulator pursues both civil and criminal charges simultaneously against one party
- An institution is sanctioned for failing to report another institution's known violations
Correct answer: A company is held liable for a compliance violation committed by its employee acting within the scope of employment
Vicarious liability holds an employer responsible for an employee's wrongful acts committed within the scope of employment under respondeat superior doctrine.
CCM Enforcement Actions & Penalties 3
Under the Sarbanes-Oxley Act (SOX), an officer who certifies financial statements knowing they are materially misleading faces a maximum criminal fine of: