CGRC Policy Development 2

Question 1

Which document type sits at the TOP of a typical policy hierarchy?

Accepted Answer

Policy

Answer

Policies are the highest-level documents that establish organizational intent and direction, with standards, procedures, and guidelines sitting below them.

Question 2

A policy exception process PRIMARILY serves to:

Accepted Answer

Document and manage approved deviations from policy requirements

Answer

Exception processes provide a formal mechanism to document, approve, and track temporary or permanent deviations while maintaining accountability.

Question 3

When reviewing existing policies for relevance, which trigger MOST warrants an immediate unscheduled review?

Accepted Answer

A significant regulatory change affecting the policy's scope

Answer

Regulatory changes that affect a policy's subject matter require immediate review to ensure ongoing compliance and avoid legal exposure.

Question 4

What is the purpose of including a 'scope' section in a policy document?

Accepted Answer

To define which people, systems, or processes the policy applies to

Answer

The scope section clarifies applicability boundaries, specifying which entities, locations, or activities must comply with the policy.

Question 5

A policy that is too prescriptive (overly detailed) creates which PRIMARY risk?

Accepted Answer

It may quickly become outdated as processes change

Answer

Overly prescriptive policies embed operational details that change frequently, requiring constant updates and risking non-compliance when procedures evolve.

CGRC - Certified Governance Risk and Compliance Practice Test

CGRC - Certified Governance Risk and Compliance Practice Test

CGRC Policy Development 2