COM COM Compliance and Risk Management 2 — Questions and Answers
Question 1: What is a 'conflict of interest' in a professional office environment?
- A disagreement between two employees about work tasks
- A situation where personal interests could improperly influence professional decisions (Correct answer)
- Competition between departments for budget resources
- An unresolved customer complaint
Correct answer: A situation where personal interests could improperly influence professional decisions
A conflict of interest arises when personal relationships or financial interests could compromise an employee's objectivity or professional judgment.
Question 2: Which of the following is a common internal control used to prevent financial fraud in an office?
- Allowing one employee to handle all aspects of financial transactions
- Segregation of duties, ensuring no single person controls all steps of a transaction (Correct answer)
- Keeping financial records only in physical form
- Outsourcing all accounting to vendors without oversight
Correct answer: Segregation of duties, ensuring no single person controls all steps of a transaction
Segregation of duties divides financial tasks among multiple employees, reducing the opportunity for any single person to commit and conceal fraud.
Question 3: What is the role of a business continuity plan (BCP) in office risk management?
- To manage day-to-day operational scheduling
- To ensure critical business functions can continue during and after a disruptive event (Correct answer)
- To replace the company's insurance policy
- To document IT network configurations
Correct answer: To ensure critical business functions can continue during and after a disruptive event
A BCP outlines procedures to maintain essential operations during disruptions such as natural disasters, cyberattacks, or power outages.
Question 4: What does 'due diligence' mean in the context of vendor selection for an office manager?
- Negotiating the lowest possible price
- Thoroughly researching and verifying a vendor's reputation, compliance, and financial stability before contracting (Correct answer)
- Collecting three price quotes regardless of vendor background
- Selecting vendors recommended by employees only
Correct answer: Thoroughly researching and verifying a vendor's reputation, compliance, and financial stability before contracting
Due diligence in vendor selection involves verifying credentials, financial health, compliance history, and references to minimize risk.
Question 5: Which U.S. regulation most directly governs data privacy obligations for healthcare-related information managed by an office?
- OSHA
- HIPAA (Health Insurance Portability and Accountability Act) (Correct answer)
- FLSA (Fair Labor Standards Act)
- ERISA (Employee Retirement Income Security Act)
Correct answer: HIPAA (Health Insurance Portability and Accountability Act)
HIPAA sets the federal standard for protecting sensitive patient health information and applies to covered entities and their business associates.
Question 6: An office manager discovers that a vendor invoice has been paid twice by mistake. What is the correct compliance-oriented response?
- Write off the duplicate payment as a business expense
- Notify the finance team, document the error, and request a refund from the vendor (Correct answer)
- Deduct the amount from the next invoice without documentation
- Ignore the error if the amount is small
Correct answer: Notify the finance team, document the error, and request a refund from the vendor
Duplicate payments must be formally documented, reported to finance, and recovered from the vendor to maintain accurate records and internal controls.
COM COM Compliance and Risk Management 2
What is a 'conflict of interest' in a professional office environment?