CCS Regulatory Compliance & Risk Management 3

Question 1

A company operating in multiple states must comply with differing privacy laws. This scenario best illustrates which compliance challenge?

Accepted Answer

Jurisdictional fragmentation

Answer

Jurisdictional fragmentation refers to the complexity of complying with multiple, sometimes conflicting, laws across different states or countries simultaneously.

Question 2

The Foreign Corrupt Practices Act (FCPA) prohibits US persons and companies from bribing foreign officials. Which defense is available under the FCPA?

Accepted Answer

Facilitating payments for routine governmental actions

Answer

The FCPA's 'facilitating payments' exception permits small payments to foreign officials to expedite or secure performance of routine, non-discretionary government actions.

Question 3

Which control type is designed to detect compliance failures AFTER they have occurred, rather than preventing them?

Accepted Answer

Detective control

Answer

Detective controls identify and report on compliance failures after they occur, such as audits, reconciliations, and monitoring reports.

Question 4

An organization's board of directors is responsible for which aspect of compliance risk management?

Accepted Answer

Setting risk appetite and oversight of the compliance program

Answer

The board is responsible for setting the organization's risk appetite and providing governance oversight of the compliance program, not operational tasks.

Question 5

Under the three lines of defense model, which line is responsible for independent assurance and audit of risk management and controls?

Accepted Answer

Third line (internal audit)

Answer

The third line of defense — internal audit — provides independent assurance by evaluating the effectiveness of governance, risk management, and internal controls.

(CCS) Certified Compliance Specialist Practice Test

(CCS) Certified Compliance Specialist Practice Test

CCS Regulatory Compliance & Risk Management 3