Excel VBA Regulatory Frameworks & Compliance 5

Question 1

A VBA workbook is part of a system undergoing FedRAMP authorization. Which security control directly applies to the workbook's data handling?

Accepted Answer

Ensuring data at rest is encrypted and access is limited to users with the appropriate FedRAMP-defined clearance level

Answer

FedRAMP requires federal cloud services to meet NIST 800-53 controls including data encryption at rest and strict access controls aligned with authorization levels.

Question 2

Under OSHA recordkeeping regulations (29 CFR 1904), a VBA tool tracks workplace incidents. Which validation rule is compliance-critical?

Accepted Answer

Enforcing that incident records are entered within 7 days of occurrence and cannot be modified after supervisor sign-off

Answer

OSHA requires workplace injuries and illnesses to be recorded accurately and within specified timeframes; VBA validation prevents late entry and unauthorized modification.

Question 3

A VBA solution supports COSO Internal Control framework documentation. Which feature best supports the Control Activities component?

Accepted Answer

Implementing segregation of duties by restricting data entry, review, and approval actions to separate user roles enforced in VBA

Answer

COSO's Control Activities component includes segregation of duties; VBA user-role enforcement ensures that no single person can initiate, record, and approve the same transaction.

Question 4

A compliance analyst needs a VBA macro to support GDPR Article 30 Record of Processing Activities (RoPA). What should the macro maintain?

Accepted Answer

A structured log recording the purpose, legal basis, data categories, retention period, and recipients for each data processing activity

Answer

GDPR Article 30 requires controllers to maintain detailed records of processing activities including purposes, legal bases, data categories, and retention schedules.

Question 5

Which VBA practice aligns with the SEC's Rule 17a-4 requirement for electronic record preservation?

Accepted Answer

Writing finalized trade records to a WORM (Write Once Read Many) compliant output and preventing any VBA routine from modifying archived data

Answer

SEC Rule 17a-4 requires broker-dealers to preserve electronic records in a non-rewritable, non-erasable format; VBA must enforce read-only status on archived records.

Excel VBA Practice Test

Excel VBA Practice Test

Excel VBA Regulatory Frameworks & Compliance 5