CCT Compliance Monitoring & Reporting 4

Question 1

A compliance officer preparing a board report should PRIMARILY focus on which type of information?

Accepted Answer

Trending risk indicators, material exceptions, and corrective action status

Answer

Board reports should provide decision-relevant information such as risk trends, significant exceptions, and status of remediation rather than granular operational data.

Question 2

What does 'three lines of defense' mean in the context of compliance monitoring?

Accepted Answer

Operational management, compliance/risk functions, and internal audit serving distinct oversight roles

Answer

The three lines of defense model assigns ownership of controls to operational management (1st), oversight to compliance and risk functions (2nd), and independent assurance to internal audit (3rd).

Question 3

A compliance monitoring review finds that exception reports are generated but never reviewed. This represents which type of control failure?

Accepted Answer

Operating effectiveness failure

Answer

When a control exists but is not actually performed as designed (reports generated but not reviewed), it is an operating effectiveness failure rather than a design issue.

Question 4

Which of the following is the BEST example of a preventive compliance control?

Accepted Answer

System-enforced transaction limits that block unauthorized amounts

Answer

Preventive controls stop violations before they occur; system-enforced limits block non-compliant transactions in real-time rather than detecting them after the fact.

Question 5

An organization is required to report its compliance program effectiveness to a federal regulator annually. Which document would MOST comprehensively satisfy this requirement?

Accepted Answer

Comprehensive compliance management system (CMS) assessment report

Answer

A CMS assessment report documents the organization's policies, training, monitoring, and corrective action processes, providing regulators with a full picture of program effectiveness.

(CCT) Certified Compliance Technician Practice Test

(CCT) Certified Compliance Technician Practice Test

CCT Compliance Monitoring & Reporting 4