Regulatory Frameworks & Compliance Flashcards
7 cards from real Excel VBA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Regulatory Frameworks & Compliance flashcards as text
Under SOX Section 302, what VBA practice best supports the CEO/CFO certification requirement for financial controls?
Answer: Maintaining a VBA audit log that records every financial cell modification with timestamp and user
SOX Section 302 requires executives to certify internal controls, so VBA audit logs documenting who changed what financial data and when directly support that certification.
A VBA macro processes HIPAA-covered patient data. Which approach complies with the Minimum Necessary Standard?
Answer: Request only the specific fields needed for the current operation
HIPAA's Minimum Necessary Standard requires accessing only the PHI fields actually needed for the specific task, not entire records.
Which VBA technique helps enforce PCI DSS Requirement 3.4 regarding rendering Primary Account Numbers (PANs) unreadable?
Answer: Using VBA to mask PANs by showing only the last four digits in the cell
PCI DSS Requirement 3.4 mandates rendering PANs unreadable wherever stored; VBA masking to show only the last four digits implements this standard.
A GDPR compliance officer asks you to implement a 'right to erasure' workflow in Excel VBA. What should the macro do?
Answer: Locate all rows referencing the data subject's ID and permanently delete their personal data across all worksheets
GDPR's right to erasure (Article 17) requires complete removal of a data subject's personal data from all locations, not partial deletion or obfuscation.
When building a VBA solution for a FINRA-regulated broker-dealer, which record retention practice is most compliant?
Answer: Using VBA to enforce read-only status on finalized reports and log any export or print action
FINRA Rule 4511 requires broker-dealers to preserve records in a non-alterable format; enforcing read-only status and logging access supports this requirement.
A VBA macro must generate reports for FDA 21 CFR Part 11 compliance. Which feature is mandatory?
Answer: Capturing an electronic signature with signer identity and timestamp before finalizing the report
FDA 21 CFR Part 11 requires electronic records to include electronic signatures with the signer's identity and the date/time of signing.
Which VBA error-handling pattern is most appropriate in a compliance-critical payroll macro to ensure no silent data corruption occurs?
Answer: On Error GoTo ErrorHandler with logging of the error description, line number, and rollback of any partial changes
Compliance-critical macros must log errors with full detail and roll back partial changes to prevent undetected data corruption in regulated records.