1|Page
CERTIFIED COMPLIANCE AND ETHICS
PROFESSIONAL (CCEP) CERTIFICATION EXAM
LATEST 2024 WITH UPDATED QUESTIONS AND
DETAILED CORRECT ANSWERS (ALREADY
GRADED A+)
GDPR (General Data Protection Regulation) - ANSWER- Provisions and
requirements protecting the personal data of European Union (EU) citizens.
Transfers of personal data outside the EU Single Market are restricted
unless protected by like-for- like regulations, such as the US's Privacy Shield
requirements.
PCI DSS - ANSWER-Payment Card Industry Data Security Standard, a
security standard created by the Payment Card Industry Security Standards
Council (PCI SSC)
HIPAA (Health Insurance Portability and Accountability Act) - ANSWER-law
that protects privacy of resident's health information and identifies certain
health information that must be kept private and confidential
,2|Page
FERPA (Family Educational Rights and Privacy Act) - ANSWER- A federal
law that regulates the management of student records and disclosure of
information from those records. The Act has its own administrative
enforcement mechanism.
Anti-Money Laundering (AML) - ANSWER-rules designed to restrict the use
of money obtained from illegal activities so the
funds are not transferred into legitimate activities so as to disguise the origins
of the funds
USA Patriot Act (2001) - ANSWER-Strengthens the federal government's
power to conduct surveillance, perform searches, and detain individuals in
order to combat terrorism.
False Claims Act (FCA) - ANSWER-A federal law that prohibits submitting a
fraudulent claim or making a false statement or representation in connection
with a claim.
Sherman Antitrust Act (1890) - ANSWER-Outlawed monopolies and
practices that restrained trade, such as price fixing
,3|Page
Yates Memo - ANSWER-DOJ memo released in September 2015 titled
"Individual Accountability for Corporate Wrongdoing". The memo prioritizes
the manner in which government civil and criminal law enforcement
investigations are conducted, widely seen as calling for a substantially
increased focus on individual accountability for corporate wrongdoing. The
Yates Memo outlines 3 key areas of focus: Individuals, limited release of
individuals when resolving corporate cases, and relevance of individual
ability to pay.
Monaco Memo - ANSWER-significantly revised the DOJ's corporate criminal
enforcement policies and procedures, including by putting a renewed focus
on individual accountability and placing stricter requirements on corporate
cooperation credit (focusing on the importance of prompt self-disclosure)
A US-based retail company has 250 stores in 30 states. Past compliance
efforts have included a silo-based approach with minimal oversight and the
CEO acting as the Compliance and Ethics Officer. One person in each state
posted compliance- related information sent from corporate, but there were
no actual educational sessions. Policies and procedures were developed by
corporate and reviewed 5 years ago. The organization has decided that a
more dedicated approach is needed and hires a Compliance and Ethics
Officer. Which of the following actions should the new Compliance and
Ethics Officer take FIRST?
, 4|Page
Conduct a compliance and ethics risk assessment
Review organization-wide compliance policies
Perform a statistically valid compliance audit
Distribute a compliance training packet to employees - ANSWER-Conduct a
compliance and ethics risk assessment
An employee discloses that a supervisor has been verbally abusive. The
same supervisor has also been sexually harassing several employees in his
department. The compliance program requires that findings of harassment
be documented and forwarded by the compliance and ethics professional to
the CEO
CERTIFIED COMPLIANCE AND ETHICS
PROFESSIONAL (CCEP) CERTIFICATION EXAM
LATEST 2024 WITH UPDATED QUESTIONS AND
DETAILED CORRECT ANSWERS (ALREADY
GRADED A+)
GDPR (General Data Protection Regulation) - ANSWER- Provisions and
requirements protecting the personal data of European Union (EU) citizens.
Transfers of personal data outside the EU Single Market are restricted
unless protected by like-for- like regulations, such as the US's Privacy Shield
requirements.
PCI DSS - ANSWER-Payment Card Industry Data Security Standard, a
security standard created by the Payment Card Industry Security Standards
Council (PCI SSC)
HIPAA (Health Insurance Portability and Accountability Act) - ANSWER-law
that protects privacy of resident's health information and identifies certain
health information that must be kept private and confidential
,2|Page
FERPA (Family Educational Rights and Privacy Act) - ANSWER- A federal
law that regulates the management of student records and disclosure of
information from those records. The Act has its own administrative
enforcement mechanism.
Anti-Money Laundering (AML) - ANSWER-rules designed to restrict the use
of money obtained from illegal activities so the
funds are not transferred into legitimate activities so as to disguise the origins
of the funds
USA Patriot Act (2001) - ANSWER-Strengthens the federal government's
power to conduct surveillance, perform searches, and detain individuals in
order to combat terrorism.
False Claims Act (FCA) - ANSWER-A federal law that prohibits submitting a
fraudulent claim or making a false statement or representation in connection
with a claim.
Sherman Antitrust Act (1890) - ANSWER-Outlawed monopolies and
practices that restrained trade, such as price fixing
,3|Page
Yates Memo - ANSWER-DOJ memo released in September 2015 titled
"Individual Accountability for Corporate Wrongdoing". The memo prioritizes
the manner in which government civil and criminal law enforcement
investigations are conducted, widely seen as calling for a substantially
increased focus on individual accountability for corporate wrongdoing. The
Yates Memo outlines 3 key areas of focus: Individuals, limited release of
individuals when resolving corporate cases, and relevance of individual
ability to pay.
Monaco Memo - ANSWER-significantly revised the DOJ's corporate criminal
enforcement policies and procedures, including by putting a renewed focus
on individual accountability and placing stricter requirements on corporate
cooperation credit (focusing on the importance of prompt self-disclosure)
A US-based retail company has 250 stores in 30 states. Past compliance
efforts have included a silo-based approach with minimal oversight and the
CEO acting as the Compliance and Ethics Officer. One person in each state
posted compliance- related information sent from corporate, but there were
no actual educational sessions. Policies and procedures were developed by
corporate and reviewed 5 years ago. The organization has decided that a
more dedicated approach is needed and hires a Compliance and Ethics
Officer. Which of the following actions should the new Compliance and
Ethics Officer take FIRST?
, 4|Page
Conduct a compliance and ethics risk assessment
Review organization-wide compliance policies
Perform a statistically valid compliance audit
Distribute a compliance training packet to employees - ANSWER-Conduct a
compliance and ethics risk assessment
An employee discloses that a supervisor has been verbally abusive. The
same supervisor has also been sexually harassing several employees in his
department. The compliance program requires that findings of harassment
be documented and forwarded by the compliance and ethics professional to
the CEO
