Exam Part 3 of 4

Please answer all questions, then click Continue to Part 4.

11) Monitoring & auditing of compliance controls should be:	A. Ad-hoc only B. Risk-based and periodic C. Skipped for small orgs D. Outsourced only
12) Outline a simple compliance risk assessment approach (identify → analyze → evaluate → treat → monitor). *
13) Policy management should include:	A. Version control and regular reviews B. No ownership C. Personal emails D. Public editing
14) Describe how to handle regulatory inquiries and interactions with authorities professionally and transparently. *
15) Whistleblower protection is important because:	A. It deters reporting B. It encourages safe reporting and reduces retaliation risk C. It is illegal D. It replaces HR