CPC Emergency Response & Safety Management 4

Question 1

Which regulatory framework requires publicly traded companies to maintain internal controls over financial reporting that would be tested during post-crisis audits?

Accepted Answer

Sarbanes-Oxley Act (SOX) Section 404

Answer

SOX Section 404 mandates management assessment and auditor attestation of internal controls over financial reporting.

Question 2

A workplace injury occurs resulting in an employee being hospitalized. Which OSHA reporting requirement applies?

Accepted Answer

Report to OSHA within 24 hours of the hospitalization

Answer

OSHA requires employers to report any work-related inpatient hospitalization to OSHA within 24 hours.

Question 3

During a cyber-attack on financial systems, the controller should coordinate with which team FIRST to contain the breach?

Accepted Answer

IT security/incident response team

Answer

The IT security team must be engaged first to contain and isolate the breach before evidence is lost or damage spreads.

Question 4

What is the primary purpose of a 'tabletop exercise' in emergency preparedness for a finance department?

Accepted Answer

To simulate crisis scenarios through discussion and decision-making without deploying resources

Answer

Tabletop exercises use hypothetical scenarios to test decision-making, identify gaps, and improve response plans without real-world deployment.

Question 5

A controller discovers that a senior accountant has been falsifying expense reports for 18 months. After terminating the employee, what is the next most critical step?

Accepted Answer

Conduct a forensic audit to determine the full scope of losses

Answer

A forensic audit is needed to quantify total losses, identify all affected accounts, and gather evidence for potential legal action.

(CPC) Certified Professional Controller Practice Test

(CPC) Certified Professional Controller Practice Test

CPC Emergency Response & Safety Management 4