GRC Policy and Procedure Management 4

Question 1

What is the purpose of mapping policies to regulatory requirements in a compliance matrix?

Accepted Answer

To demonstrate coverage and identify compliance gaps

Answer

To reduce the number of policies needed

Answer

To replace the need for internal audits

Answer

To automatically satisfy regulatory obligations

Question 2

A policy owner role is BEST described as:

Accepted Answer

The executive accountable for the policy's content, accuracy, and enforcement

Answer

The person who writes the policy document

Answer

An external auditor who reviews the policy annually

Answer

Any employee who has read and signed the policy

Question 3

Which of the following is a risk of having too many overlapping policies?

Accepted Answer

Conflicting requirements may confuse employees and create compliance gaps

Answer

Employees will have too much clarity on expectations

Answer

Auditors will have difficulty finding policy violations

Answer

Regulatory bodies will require fewer controls

Question 4

What is the primary function of a policy governance committee?

Accepted Answer

To oversee policy development, approval, and lifecycle management across the enterprise

Answer

To write all organizational policies from scratch

Answer

To replace the role of individual policy owners

Answer

To conduct employee policy training sessions

Question 5

When communicating a new password policy, which approach is most effective for ensuring compliance?

Accepted Answer

Combine mandatory training, manager briefings, and technical controls that enforce requirements

Answer

Email the policy to all staff with no follow-up

Answer

Publish the policy on an intranet page employees rarely visit

Answer

Post a printed copy on the office bulletin board

Question 6

A procedure contains outdated system screenshots after a software upgrade. What is the correct action?

Accepted Answer

Update the procedure and route it through the change management and approval process

Answer

Archive the procedure and create a new one from scratch

Answer

Allow employees to use the outdated procedure until the next annual review

Answer

Remove the screenshots and leave the text unchanged

Question 7

What does 'policy scope' define?

Accepted Answer

Which systems, people, and processes the policy applies to

Answer

The technical details of how to implement the policy

Answer

The penalties for policy violations

Answer

The frequency of policy reviews