RCMS Compliance Program Development & Implementation 2 — Questions and Answers
Question 1: When conducting a compliance risk assessment, which methodology best prioritizes risks for resource allocation?
- Alphabetical ranking of all identified risks
- Likelihood-times-impact scoring matrix (Correct answer)
- Assigning equal weight to all regulatory requirements
- Focusing exclusively on risks flagged by external auditors
Correct answer: Likelihood-times-impact scoring matrix
A likelihood-times-impact matrix multiplies the probability of occurrence by potential severity, enabling organizations to rank and prioritize risks objectively.
Question 2: Which element distinguishes a 'paper program' from an effective compliance program under U.S. federal sentencing guidelines?
- Having written policies and procedures on file
- Demonstrated good-faith implementation and enforcement (Correct answer)
- Employing a Chief Compliance Officer
- Maintaining annual employee attestations
Correct answer: Demonstrated good-faith implementation and enforcement
Federal sentencing guidelines require that a compliance program be genuinely implemented and enforced, not merely documented on paper without operational effect.
Question 3: A compliance officer discovers that a business unit is bypassing a new control because it slows operations. What is the BEST immediate response?
- Immediately report the unit to senior management for disciplinary action
- Engage the business unit to understand the friction and collaboratively redesign the control (Correct answer)
- Waive the control requirement for that business unit permanently
- Document the bypass and take no further action
Correct answer: Engage the business unit to understand the friction and collaboratively redesign the control
Collaborative engagement uncovers operational friction and allows compliance to redesign controls that are both effective and workable, improving adoption.
Question 4: In a compliance program gap analysis, the 'current state' is compared to which benchmark?
- Prior year compliance budget
- Desired future state based on regulatory requirements and best practices (Correct answer)
- Competitor compliance program structures
- Number of past regulatory violations
Correct answer: Desired future state based on regulatory requirements and best practices
A gap analysis measures the difference between the organization's existing controls and the target state defined by applicable regulations, standards, and best practices.
Question 5: Which governance structure provides the most direct board-level oversight of a compliance program?
- Reporting compliance metrics only to the General Counsel
- A dedicated board-level compliance or audit committee with regular CCO briefings (Correct answer)
- Quarterly written memos to the full board
- Delegating all compliance oversight to line management
Correct answer: A dedicated board-level compliance or audit committee with regular CCO briefings
A dedicated board committee with regular direct access to the CCO ensures independent, informed oversight and demonstrates tone at the top.
Question 6: When implementing compliance policies across a multinational organization, which challenge is MOST significant?
- Translating documents into multiple languages
- Reconciling conflicting local laws with global corporate standards (Correct answer)
- Printing and distributing physical policy manuals
- Maintaining a single compliance officer for all jurisdictions
Correct answer: Reconciling conflicting local laws with global corporate standards
Local laws may conflict with global corporate standards, requiring careful legal analysis to determine which requirements take precedence or how to satisfy both.
Question 7: Which metric is MOST useful for measuring the effectiveness of a compliance training program?
- Number of training modules created
- Post-training behavioral change and reduction in related policy violations (Correct answer)
- Total employee hours spent in training
- Cost per training session delivered
Correct answer: Post-training behavioral change and reduction in related policy violations
Behavioral change and a reduction in violations directly measure whether training is achieving its compliance objectives, unlike input metrics such as hours or cost.
RCMS Compliance Program Development & Implementation 2
When conducting a compliance risk assessment, which methodology best prioritizes risks for resource allocation?