CCM Regulatory Frameworks and Legal Compliance 3 — Questions and Answers
Question 1: The USA PATRIOT Act expanded anti-money laundering requirements under the Bank Secrecy Act by requiring financial institutions to:
- Conduct annual audits of all customer accounts
- Establish customer identification programs (CIP) and perform due diligence on foreign correspondent accounts (Correct answer)
- Report all cash transactions regardless of amount
- Obtain FBI approval before opening accounts for foreign nationals
Correct answer: Establish customer identification programs (CIP) and perform due diligence on foreign correspondent accounts
The PATRIOT Act added CIP requirements (Section 326) and enhanced due diligence requirements for foreign correspondent and private banking accounts to combat terrorist financing.
Question 2: Under Sarbanes-Oxley Section 404, management must assess the effectiveness of the company's internal controls over financial reporting as of the end of each fiscal year. This assessment must be:
- Approved by the board audit committee before publication
- Attested to by the company's external auditor (Correct answer)
- Filed with the DOJ within 60 days of fiscal year end
- Reviewed by the SEC's Division of Corporate Finance prior to filing
Correct answer: Attested to by the company's external auditor
SOX Section 404(b) requires that the company's registered public accounting firm attest to and report on management's internal control assessment.
Question 3: Which enforcement theory holds that senior executives can face personal criminal liability for regulatory violations committed by their subordinates, even without their direct knowledge, if they had the power to prevent the violations?
- Strict vicarious liability
- The Park Doctrine (responsible corporate officer doctrine) (Correct answer)
- Willful blindness theory
- The Yates Memo standard
Correct answer: The Park Doctrine (responsible corporate officer doctrine)
The Park Doctrine, established in United States v. Park (1975), allows prosecution of corporate officers for violations by subordinates when the officer had authority and responsibility to prevent them.
Question 4: Which of the following best describes a 'consent decree' in the context of regulatory enforcement?
- A court order issued unilaterally by a regulator without the company's agreement
- A negotiated settlement agreement between a regulator and a company that is entered as a court order (Correct answer)
- A voluntary compliance commitment with no judicial oversight
- An internal compliance policy adopted in response to a regulatory audit
Correct answer: A negotiated settlement agreement between a regulator and a company that is entered as a court order
A consent decree is a negotiated resolution between a government agency and a regulated entity that is formalized as a court order, giving the court authority to enforce compliance.
Question 5: The concept of 'regulatory equivalence' is most relevant when a company is:
- Determining which of two conflicting domestic regulations to follow
- Seeking recognition that a foreign regulatory regime provides protections comparable to home-country requirements (Correct answer)
- Evaluating whether two internal policies address the same compliance risk
- Comparing the penalties under two different enforcement regimes
Correct answer: Seeking recognition that a foreign regulatory regime provides protections comparable to home-country requirements
Regulatory equivalence is a determination that a foreign jurisdiction's regulatory framework provides substantially the same protections as the home jurisdiction, often enabling mutual recognition.
Question 6: The OFAC Specially Designated Nationals (SDN) list is primarily used in compliance programs to:
- Identify foreign companies banned from U.S. government procurement
- Screen parties to transactions for sanctions exposure before proceeding (Correct answer)
- Assess country risk ratings for anti-bribery due diligence
- Verify export license requirements for dual-use goods
Correct answer: Screen parties to transactions for sanctions exposure before proceeding
OFAC's SDN list identifies individuals, entities, and countries subject to U.S. economic sanctions, and compliance programs must screen transactions against it to avoid prohibited dealings.
Question 7: Under the Clean Air Act's Title V operating permit program, a 'major source' triggering permit requirements is generally defined as a facility emitting:
- Any detectable level of a regulated air pollutant
- 10 tons per year or more of any hazardous air pollutant
- 100 tons per year or more of any regulated pollutant (or lower thresholds in non-attainment areas) (Correct answer)
- 500 tons per year of total air pollutants combined
Correct answer: 100 tons per year or more of any regulated pollutant (or lower thresholds in non-attainment areas)
Title V generally covers major sources emitting 100 tons/year or more of regulated pollutants, with lower thresholds applicable in areas not meeting air quality standards.
CCM Regulatory Frameworks and Legal Compliance 3
The USA PATRIOT Act expanded anti-money laundering requirements under the Bank Secrecy Act by requiring financial institutions to: