CAIIB Paper 4 Module A Quiz 6

Version and effective-date history is essential for historical reviews, audits, disputes and determining whether a decision complied with the rules in force at that time.

A risk assessment must lead to action. The bank should prioritise the gap, assign ownership, implement mitigation, monitor progress and reassess residual risk.

Consent may be required for particular uses or disclosures, but it cannot legitimise an activity prohibited by law or remove unrelated duties such as security, fair treatment or reporting.

Products, laws, fees and processes change. Periodic review helps identify stale or misleading terms and ensures disclosures match how the product actually works.

Fraudulent instructions can cause unauthorised actions or data disclosure. Verification through trusted channels and prompt escalation help protect the bank and preserve evidence.

Authorised channels reduce impersonation and unauthorised disclosure risk and help ensure that responses are approved, accurate and recorded.

A committee can provide detailed oversight of compliance and control matters, but its remit is set by law and governance arrangements and it does not erase the board‘s overall responsibilities.

Clear authority limits and approved communications reduce the risk of staff making commitments the bank cannot lawfully or operationally honour.

The bank must not knowingly submit unreliable figures. It should escalate, validate the data, document limitations and use applicable procedures for accurate submission and correction.

Self-assessment promotes first-line ownership but should be evidence-based and subject to appropriate challenge and assurance. It is not a substitute for supervision or independent review.

Escalation should be driven by risk and legal duties, not embarrassment or sales performance. Materiality, urgency, customer impact and reporting deadlines matter.

A merger can change licences, governance, systems, products and reporting. Due diligence and integration planning are needed, along with any required regulatory approvals and continuity controls.

Clear escalation paths help branches resolve uncertainty consistently and promptly. Documented answers can be shared and incorporated into guidance where appropriate.

Near misses can reveal weaknesses before harm occurs. Recording and analysing them helps the bank improve controls and prevent more serious future events.

Specialist teams provide interpretation and oversight, but operational owners must implement controls and comply with obligations. Responsibilities should be clearly allocated.

A thematic review is an opportunity to assess the bank‘s actual position and fix weaknesses. Responses must be accurate and supported by records; records should never be altered improperly.

A bank must understand the scope, conditions and continuing validity of permissions. Changes can affect permitted activities and require operational action or communication.

Assurance evaluates control design and operation based on evidence. It reduces uncertainty but cannot guarantee that no future breach will occur.

Mandatory controls and legal obligations take precedence over sales targets. Incentives that encourage bypasses should be escalated and redesigned.

A controlled deadline process assigns ownership and reminders, escalates risks before due dates and retains evidence that submissions or actions were completed.