IT Audit And Compliance Specialist Question:

Download Questions PDF

This question provides information on several important aspects of a compliance program. First, it may highlight risks that the compliance officer was unaware of or didn't fully appreciate (risk assessment). Second, it assesses how well employees are able to apply corporate policies in the context of their role (policy comprehension/retention and training effectiveness). Third, it reiterates and reinforces the employee's understanding of risks and policies specific to them (training). Interviewees frequently struggle with this question initially and the interviewer may need to provide an obvious example of such a challenge to help the interviewee get started (i.e. gift policy, etc).