3 Compliance and Ethical Practice Free Online FlashCards

What are common sources of an organization’s compliance obligations?

They can arise from laws, regulations, licenses, contracts, and the organization’s own policies.

How does ethical conduct go beyond compliance?

Compliance sets a minimum standard; ethical conduct also considers whether an action is honest, fair, and consistent with the organization’s responsibilities.

What is the purpose of a preventive control?

A preventive control reduces the chance of a breach, such as approval limits, role-based access, training, supplier checks, or separation of duties.

What does compliance monitoring assess?

Monitoring checks whether controls are followed and work as intended; it can include supervision, data reviews, audits, surveys, training assessments, and incident analysis.

What are the main stages of responding to possible non-compliance?

Protect the report, assess urgency and contain harm, investigate fairly, escalate and seek advice, apply proportionate consequences, then remediate and learn.

What is the continuous improvement cycle for compliance?

Identify risks and obligations, put safeguards in place, test them, respond to failures, and improve the system.

What steps turn compliance obligations into an operational process?

Identify applicable requirements, assign responsibility, translate them into work practices, review changes, and keep appropriate evidence.

What questions can help assess an unclear ethical decision?

Ask whether it is lawful, consistent with policy and stated values, and something you would be comfortable explaining. If doubt remains, pause and seek guidance.

What does a detective control do?

A detective control identifies a problem; examples include reconciliations, transaction reviews, audits, access logs, and confidential reporting channels.

What is the purpose of a corrective control?

A corrective control addresses a detected problem and reduces recurrence, for example by correcting records, restricting access, revising procedures, or retraining staff.

What makes controls practical and accountable?

Controls should be proportionate to risk, built into ordinary work, documented, consistently applied, and assigned to named owners.

Does a high number of reports automatically signal a failing program?

A high number of reports does not automatically mean the program is failing; it may indicate that people trust the reporting process.