GRCP 無料問題集「OCEG GRC Professional Certification」

（A）Culture change requires long-term commitment, consistent modeling in both words and deeds, and reinforcement by leaders and the workforce.

（B）Culture change is not necessary as long as the organization is meeting its financial targets.

（C）Culture change can be achieved quickly through the implementation of new policies and procedures if there is adequate training provided.

（D）Culture change is solely dependent on the decisions made by the executive leadership team and how they model desired behavior.

（A）Market research and customer surveys.

（B）Financial audits and budget reviews.

（C）Lessons learned, root-cause analysis, after-action reviews, and other evaluative activities.

（D）Employee performance evaluations and appraisals.

（A）To formalize the process so that employees know that anything they communicate will be kept in records.

（B）To ensure that the channels are available before they are needed.

（C）To ensure that all communication is delivered in written form only.

（D）To limit communication to a single channel for simplicity and cost savings.

（A）The Fourth Line, which is the HR department, is responsible for providing training and development opportunities to employees.

（B）The Fourth Line, which is the Executive Team, is accountable and responsible for organization-wide performance, risk, and compliance.

（C）The Fourth Line, which is the Compliance Department, is responsible for establishing actions and controls to address regulatory and policy requirements.

（D）The Fourth Line, which is the Procurement Department, is responsible for managing vendor relationships and procurement processes.

（A）The duality of compliance refers to the trade-off between investing in compliance measures and allocating resources to other business areas.

（B）The duality of compliance refers to the balance between financial gains and ethical considerations in business decisions.

（C）The duality of compliance involves addressing both compliance with obligations and compliance- related risks. Compliance involves meeting mandatory and voluntary obligations, while compliance- related risks involve addressing the risk of negative outcomes associated with non-compliance.

（D）The duality of compliance refers to the distinction between domestic and international regulations that an organization must follow.

（A）Team-building activities, company retreats, and social events.

（B）Flexible work hours, remote work options, and casual dress codes.

（C）Monetary compensation, bonuses, profit-sharing, and gain-sharing.

（D）Employee training, mentorship programs, and skills development.

（A）It means always achieving profitability targets and maximizing shareholder value.

（B）It means achieving mission, vision, and balanced objectives thoughtfully, consistently, dependably, and transparently.

（C）It means having measurable outcomes.

（D）It means achieving short-term goals regardless of the impact on long-term success.

（A）Reasonable assurance is provided by management as part of strategic planning, while limited assurance results from operational reviews and performance evaluations.

（B）Reasonable assurance is provided by external auditors as part of a financial audit and indicates conformity to suitable criteria and freedom from material error, while limited assurance results from reviews, compilations, and other activities performed by competent personnel who are sufficiently objective about the subject matter.

（C）Reasonable assurance is provided by the Board of Directors as part of governance activities, while limited assurance results from employee self-assessments.

（D）Reasonable assurance is provided by internal auditors as part of a risk assessment, while limited assurance results from external audits and regulatory examinations.

（A）A hazard is a measure of the negative impact on the organization, while an obstacle is a state of conditions that create a hazard.

（B）A hazard is a cause that has the potential to eventually result in harm, while an obstacle is an event that may have a negative effect on objectives.

（C）A hazard affects the likelihood of an event, while an obstacle is a hazard with significant impact on objectives.

（D）A hazard is a type of obstacle, while an obstacle is an overarching category of threat.

（A）Competitors, employees, and board members.

（B）Customers, shareholders, creditors and lenders, government, and non-governmental organizations.

（C）Marketing agencies, legal advisors, and auditors.

（D）Distributors, resellers, and franchisees.