CMC Quality & Compliance Flashcards
7 cards from real CMC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 CMC Quality & Compliance flashcards as text
A consulting firm discovers mid-engagement that the client's internal controls have a significant gap that was not part of the original scope. What is the CMC's most appropriate response?
Answer: Document and disclose the gap to client leadership immediately
CMCs have a professional duty to disclose material control deficiencies discovered during an engagement, even if outside the original scope.
Which quality management principle emphasizes understanding and managing interrelated processes as a system to achieve objectives effectively and efficiently?
Answer: Process approach
The process approach principle in ISO 9001 recognizes that managing interrelated activities as a system improves effectiveness and efficiency.
Under the ICMCI Code of Professional Conduct, a CMC must maintain objectivity. Which scenario MOST directly threatens objectivity?
Answer: Accepting a success fee tied to the client's financial outcomes
Success fees create a financial incentive that can bias a consultant's recommendations, directly compromising objectivity.
A CMC is auditing a client's compliance program and finds that policies exist but are rarely enforced. This gap between policy and practice is best described as a failure in:
Answer: Compliance culture and operationalization
When policies exist but are not enforced, the root cause is typically a weak compliance culture and failure to operationalize controls into daily practice.
In Six Sigma methodology, the DMAIC phase where root causes of defects are identified is:
Answer: Analyze
The Analyze phase in DMAIC uses data and tools like fishbone diagrams and regression analysis to identify root causes of defects.
A client asks a CMC to certify that their organization is fully SOX compliant based solely on a brief walkthrough. The CMC should:
Answer: Decline and explain that adequate evidence gathering is required before any certification
Issuing a compliance certification without sufficient evidence gathering violates professional standards and exposes both parties to legal and reputational risk.
Which of the following is the PRIMARY purpose of a management review in an ISO 9001 quality management system?
Answer: Ensuring top management evaluates QMS suitability, adequacy, and effectiveness
ISO 9001 requires top management to periodically review the QMS to ensure its continued suitability, adequacy, effectiveness, and alignment with strategic direction.