CCS Legal & Ethical Compliance Standards 3 — Questions and Answers
Question 1: The U.S. Sentencing Guidelines for Organizations reduce a company's culpability score when it has an effective compliance program. Which factor does NOT directly reduce the culpability score?
- Self-reporting the offense to authorities
- Cooperation with governmental investigations
- Acceptance of responsibility
- Having a compliance program in place at the time of the offense if employees committed the crime to benefit themselves (Correct answer)
Correct answer: Having a compliance program in place at the time of the offense if employees committed the crime to benefit themselves
Under the Guidelines, having a compliance program does not reduce culpability if high-level personnel participated in, condoned, or were willfully ignorant of the offense.
Question 2: Which ethical framework evaluates the morality of an action based solely on the action's adherence to rules or duties, regardless of consequences?
- Consequentialism
- Virtue ethics
- Deontological ethics (Correct answer)
- Stakeholder theory
Correct answer: Deontological ethics
Deontological ethics judges actions by their conformity to rules or duties, not by outcomes—Kant's categorical imperative is the canonical example.
Question 3: Under HIPAA, a 'covered entity' that experiences a breach of unsecured protected health information affecting 500 or more individuals must notify the HHS Secretary and prominent media outlets within:
- 30 days of discovery
- 45 days of discovery
- 60 days of discovery (Correct answer)
- 90 days of discovery
Correct answer: 60 days of discovery
HIPAA's Breach Notification Rule requires covered entities to notify HHS and prominent media within 60 days of discovering a breach affecting 500 or more residents of a state.
Question 4: A compliance program element requires that employees at all levels, including executives, complete annual training. This requirement primarily addresses which of the U.S. Sentencing Guidelines' seven elements?
- Standards and procedures
- Oversight by high-level personnel
- Effective communication and training (Correct answer)
- Monitoring, auditing, and evaluation
Correct answer: Effective communication and training
Annual training for all employees, including executives, directly addresses the 'effective communication of standards and procedures' element of the seven hallmarks of an effective compliance program.
Question 5: The concept of 'tone at the top' in compliance refers primarily to:
- The compliance officer's public statements on social media
- Senior leadership's visible commitment to ethical conduct and compliance (Correct answer)
- Setting high financial targets that motivate employee performance
- The formality of written policies distributed from headquarters
Correct answer: Senior leadership's visible commitment to ethical conduct and compliance
Tone at the top refers to senior leadership's demonstrated commitment to ethical behavior, which shapes the organization's culture and employee conduct.
Question 6: Which of the following is a key distinction between a compliance-based ethics program and a values-based ethics program?
- Compliance-based programs rely on employee character; values-based rely on rules
- Compliance-based programs emphasize rules and penalties; values-based programs focus on shared values and culture (Correct answer)
- Values-based programs are required by law; compliance-based programs are voluntary
- Compliance-based programs apply only to public companies; values-based apply to private
Correct answer: Compliance-based programs emphasize rules and penalties; values-based programs focus on shared values and culture
Compliance-based programs use rules, monitoring, and penalties to deter misconduct, while values-based programs cultivate ethical culture through shared values and employee integrity.
Question 7: Under the Bank Secrecy Act (BSA), financial institutions are required to file a Suspicious Activity Report (SAR) within how many calendar days of initial detection of suspicious activity?
- 15 days
- 20 days
- 30 days (Correct answer)
- 45 days
Correct answer: 30 days
The BSA requires financial institutions to file a SAR within 30 calendar days of the date they initially detect facts that may constitute a basis for filing.
CCS Legal & Ethical Compliance Standards 3
The U.S.
Sentencing Guidelines for Organizations reduce a company's culpability score when it has an effective compliance program.
Which factor does NOT directly reduce the culpability score?