RCMS Compliance Reporting & Documentation 3

Question 1

What is the primary purpose of a document retention policy in the context of regulatory compliance?

Accepted Answer

To ensure records are preserved for required periods while establishing when they may be legally disposed of

Answer

To reduce storage costs by systematically deleting old records as quickly as possible

Answer

To restrict employee access to sensitive compliance documents

Answer

To automate the generation and filing of periodic regulatory reports

Question 2

What is a 'litigation hold' (legal hold) in the context of compliance documentation management?

Accepted Answer

A directive to preserve all potentially relevant documents when litigation or regulatory investigation is reasonably anticipated

Answer

A court order requiring an organization to suspend all business operations pending investigation

Answer

A policy that restricts employee access to legal and compliance documents

Answer

A formal process for reviewing contracts prior to execution

Question 3

Which SEC rule specifically governs electronic records retention requirements for registered investment advisers?

Accepted Answer

Rule 204-2 under the Investment Advisers Act of 1940

Answer

Regulation E (Electronic Fund Transfers)

Answer

Regulation Z (Truth in Lending)

Answer

FINRA Rule 4370 (Business Continuity Plans)

Question 4

What is the recommended course of action when a compliance officer discovers that required records were inadvertently destroyed?

Accepted Answer

Promptly notify relevant regulators and thoroughly document the discovery and circumstances of the loss

Answer

Reconstruct the records from memory or secondary sources to fill the documentation gap

Answer

Delete all records from the same time period to ensure consistency and avoid selective retention claims

Answer

Wait to determine if regulators specifically request the missing records before taking any action

Question 5

When a compliance report submitted to a regulator contains material misstatements, what category of risk does this create?

Accepted Answer

Legal, regulatory, and potentially criminal risk in addition to reputational risk

Answer

Only reputational risk with no formal legal consequences

Answer

Only the risk of a failed examination or audit finding

Answer

Minimal risk if the misstatement is corrected and resubmitted within 90 days

Question 6

Under HIPAA, covered entities must maintain documentation of their privacy policies and procedures for how long?

Accepted Answer

6 years from creation or last effective date, whichever is later

Answer

3 years from creation or last effective date, whichever is later

Answer

10 years from creation or last effective date, whichever is later

Answer

Indefinitely with no permissible destruction date

Question 7

In compliance audit reporting, what is the primary distinction between a 'finding' and an 'observation'?

Accepted Answer

A finding represents a confirmed violation of a specific requirement; an observation is a lesser concern or improvement suggestion that does not constitute a clear violation

Answer

Findings are delivered verbally while observations are always documented in writing

Answer

Observations are more serious than findings and require immediate escalation to the board

Answer

Findings must be reported to external regulators while observations are kept internal