COM Regulatory Compliance 2 — Questions and Answers
Question 1: Under OSHA's Hazard Communication Standard (HazCom), what must be included on a Safety Data Sheet (SDS)?
- Only the chemical name and supplier contact
- 16 standardized sections covering hazard identification, composition, and handling (Correct answer)
- A list of approved disposal sites
- Employee training records
Correct answer: 16 standardized sections covering hazard identification, composition, and handling
OSHA's HazCom Standard requires SDSs to follow a 16-section format covering everything from hazard identification to regulatory information.
Question 2: A company subject to EPA regulations discovers an accidental chemical release. Under CERCLA/EPCRA, what is the first required action?
- File an annual report with the EPA within 30 days
- Immediately notify the National Response Center if the release exceeds the reportable quantity (Correct answer)
- Conduct an internal audit before notifying any agency
- Submit a corrective action plan within 72 hours
Correct answer: Immediately notify the National Response Center if the release exceeds the reportable quantity
CERCLA and EPCRA require immediate notification to the National Response Center when a hazardous substance release meets or exceeds the reportable quantity.
Question 3: Which federal agency enforces workplace safety regulations through inspections and citations in the United States?
- EPA
- OSHA (Correct answer)
- EEOC
- CPSC
Correct answer: OSHA
The Occupational Safety and Health Administration (OSHA) is responsible for enforcing workplace safety standards through inspections, citations, and penalties.
Question 4: What does 'regulatory compliance gap analysis' involve in an operations management context?
- Measuring revenue shortfalls against regulatory fines
- Comparing current organizational practices against applicable regulatory requirements to identify deficiencies (Correct answer)
- Analyzing employee compliance training completion rates only
- Reviewing competitor compliance strategies
Correct answer: Comparing current organizational practices against applicable regulatory requirements to identify deficiencies
A gap analysis systematically compares current practices to regulatory standards to pinpoint areas where the organization does not yet meet requirements.
Question 5: Which of the following best describes a 'consent decree' in a regulatory compliance context?
- A voluntary employee agreement to follow workplace rules
- A court-approved settlement between a regulatory agency and a company that mandates specific corrective actions (Correct answer)
- A waiver granted by a regulator exempting a company from a rule
- An internal policy document outlining compliance objectives
Correct answer: A court-approved settlement between a regulatory agency and a company that mandates specific corrective actions
A consent decree is a legally binding, court-approved agreement between a company and a government agency that specifies remedial steps and timelines.
Question 6: Under the Sarbanes-Oxley Act (SOX), which individuals are personally responsible for certifying the accuracy of financial reports?
- External auditors and compliance officers
- The CEO and CFO of publicly traded companies (Correct answer)
- Board of directors and shareholders
- Internal audit staff and department managers
Correct answer: The CEO and CFO of publicly traded companies
SOX Section 302 requires the CEO and CFO to personally certify the accuracy and completeness of financial statements filed with the SEC.
Question 7: An operations manager wants to ensure ongoing compliance monitoring is embedded into daily operations. Which approach is most effective?
- Conducting a single comprehensive audit each year
- Integrating key compliance metrics into operational KPIs reviewed regularly (Correct answer)
- Delegating all compliance monitoring to the legal department
- Relying on external auditors to flag issues quarterly
Correct answer: Integrating key compliance metrics into operational KPIs reviewed regularly
Embedding compliance metrics into routine operational KPIs creates a continuous monitoring environment rather than relying on periodic point-in-time reviews.
Under OSHA's Hazard Communication Standard (HazCom), what must be included on a Safety Data Sheet (SDS)?