GRC Policy and Procedure Management 4

Question 1

What is the purpose of mapping policies to regulatory requirements in a compliance matrix?

Accepted Answer

To demonstrate coverage and identify compliance gaps

Answer

A compliance matrix shows which policies address which requirements, making gap identification and audit evidence gathering more efficient.

Question 2

A policy owner role is BEST described as:

Accepted Answer

The executive accountable for the policy's content, accuracy, and enforcement

Answer

The policy owner is accountable for ensuring the policy remains accurate, current, and effectively implemented.

Question 3

Which of the following is a risk of having too many overlapping policies?

Accepted Answer

Conflicting requirements may confuse employees and create compliance gaps

Answer

Overlapping or conflicting policies create ambiguity about which requirement to follow, increasing the risk of non-compliance.

Question 4

What is the primary function of a policy governance committee?

Accepted Answer

To oversee policy development, approval, and lifecycle management across the enterprise

Answer

A policy governance committee provides cross-functional oversight to ensure policies are consistent, current, and aligned with organizational goals.

Question 5

When communicating a new password policy, which approach is most effective for ensuring compliance?

Accepted Answer

Combine mandatory training, manager briefings, and technical controls that enforce requirements

Answer

A multi-channel approach combining awareness, management reinforcement, and technical enforcement maximizes policy adoption.

(GRC) Governance, Risk, and Compliance Certification Practice Test