SOP Compliance and Regulatory SOP 2 — Questions and Answers
Question 1: What does an 'OSHA recordkeeping SOP' require employers to maintain?
- Employee training certificates only
- Logs of work-related injuries and illnesses (OSHA 300/300A/301 forms) and to post the annual summary each February (Correct answer)
- Safety equipment inventory
- Employee medical records
Correct answer: Logs of work-related injuries and illnesses (OSHA 300/300A/301 forms) and to post the annual summary each February
OSHA's recordkeeping rule (29 CFR 1904) requires employers with 10+ employees to record qualifying injuries and illnesses and post the 300A summary from Feb 1 to Apr 30 each year.
Question 2: What is a 'Sarbanes-Oxley (SOX) compliance SOP' designed to ensure?
- Marketing campaign accuracy
- The reliability of financial reporting through documented internal controls, testing, and CEO/CFO certification for public companies (Correct answer)
- Product quality compliance
- HR policy compliance
Correct answer: The reliability of financial reporting through documented internal controls, testing, and CEO/CFO certification for public companies
SOX SOPs document internal controls over financial reporting (ICFR), define how controls are tested, and establish the process for management and auditor attestation.
Question 3: What does an 'export controls SOP' govern for US companies?
- Managing product export logistics
- The process for screening transactions, obtaining required licenses, and ensuring compliance with EAR, ITAR, and OFAC regulations on exports of controlled goods and data (Correct answer)
- Managing import duties
- Processing customs paperwork
Correct answer: The process for screening transactions, obtaining required licenses, and ensuring compliance with EAR, ITAR, and OFAC regulations on exports of controlled goods and data
Export control SOPs define screening procedures for customers and destinations against denied party lists, license determination processes, and record-keeping under EAR and ITAR.
Question 4: What is a 'whistleblower protection SOP' designed to do?
- Protecting employees from loud workplaces
- Providing a safe, confidential channel for employees to report suspected legal or ethical violations without fear of retaliation (Correct answer)
- Protecting customer complaints
- Managing media relations
Correct answer: Providing a safe, confidential channel for employees to report suspected legal or ethical violations without fear of retaliation
Whistleblower SOPs define reporting channels (hotlines, compliance officers), confidentiality protections, investigation processes, and anti-retaliation safeguards required by laws like SOX and Dodd-Frank.
Question 5: What does a 'vendor compliance SOP' require from third-party suppliers?
- Vendor marketing alignment
- That vendors meet defined legal, ethical, and quality standards through contracts, audits, and ongoing monitoring (Correct answer)
- Vendor financial reporting
- Vendor delivery speed
Correct answer: That vendors meet defined legal, ethical, and quality standards through contracts, audits, and ongoing monitoring
Vendor compliance SOPs define contractual compliance requirements, audit rights, code of conduct expectations, and remediation processes for vendors who fail to meet standards.
Question 6: What is the purpose of a 'records management SOP' in compliance?
- Managing marketing records
- Defining how business records are created, classified, retained, protected, and disposed of in accordance with legal and regulatory retention requirements (Correct answer)
- Managing customer records only
- Managing financial ledgers
Correct answer: Defining how business records are created, classified, retained, protected, and disposed of in accordance with legal and regulatory retention requirements
Records management SOPs establish retention schedules by record type, define storage and protection standards, implement litigation hold procedures, and govern secure disposal.
SOP Compliance and Regulatory SOP 2
What does an 'OSHA recordkeeping SOP' require employers to maintain?