CAIIB Paper 4 Module A Quiz 5

A register supports completeness and implementation tracking. Each circular still needs an applicability and effective-date assessment; not every direction applies identically to every entity.

Future effective dates allow preparation time, not inaction. The bank should assign owners, update systems and procedures, train staff and test readiness before the deadline.

A mature programme uses incidents and near misses to identify patterns and improve controls. Follow-up testing checks whether the changes have reduced recurrence.

Poorly designed incentives can encourage undesirable behaviour, such as concealing complaints or rushing approvals. Metrics should balance business outcomes, conduct, risk and control quality.

Central interpretation and standard procedures reduce inconsistency, while branch accountability and escalation allow local issues to be addressed within a controlled framework.

The bank should determine the population affected, correct the omission, assess whether customers suffered harm and fix the process. The appropriate remedy depends on the specific disclosure requirement.

Use of agents does not remove the bank‘s responsibility for appropriate oversight. Selection, training, conduct monitoring, customer data controls and complaint handling are important.

Testing provides evidence about control design and operation. Findings should be risk-ranked, assigned owners and followed through to verified remediation.

In a common three-lines model, operational management owns risks and controls, risk/compliance functions provide expertise and oversight, and internal audit independently assesses governance and controls.

Mapping connects each obligation to the process, control, evidence and accountable owner. It helps identify gaps and prevents requirements from being overlooked between departments.

Mandatory approval controls should not be bypassed for convenience. The bank should contain the risk, investigate why bypasses occur, escalate and test the corrective measures.

Material changes may trigger legal, contractual or regulatory notice and disclosure requirements. The bank should review the change before implementation and communicate it appropriately.

The bank should verify the request and its scope, route it through authorised channels, protect confidentiality and provide accurate information within the applicable deadline.

Expansion may create new licensing, local-law, tax, consumer, employment or operational obligations. A legal inventory supports a controlled launch and ongoing compliance.

A compliance manual translates obligations into internal guidance. It must be current, approved, accessible and supported by training and operational controls.

Risk-based prioritisation considers legal urgency and the scale and likelihood of harm. High-impact issues and binding deadlines should receive appropriate priority and oversight.

Horizon scanning supports preparedness, but the bank must still verify official texts and effective dates and complete a formal impact assessment.

Internal policy owners may approve exceptions only within their authority and subject to law. A regulatory waiver is possible only where the legal framework permits it and the competent authority grants it.

Absence of evidence prevents reliable assurance and may reveal either an evidence problem or a control failure. The bank should investigate and address the underlying weakness without fabricating records.

Board reporting should support decisions and oversight. It should explain the issue, significance, customer/regulatory impact, actions, accountable owners, deadlines and residual risk.