I85PREP
⌘ K
CCO Qualifying study materials
CCO Qualifying study resources

CCO Qualifying practice questions

One question at a time. Build your CCO Qualifying understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Compliance Program Governance and Structure

Which document establishes a compliance program's authority, scope, and reporting lines at the highest level of an organization?

  1. A board-approved compliance charter Correct answer.
  2. An internal audit work plan
  3. A departmental procedure manual
  4. A vendor due diligence questionnaire

Explanation

A compliance charter is the foundational governance instrument that the governing body approves; it defines the program's mandate, scope, independence, and reporting relationships. Operational manuals, audit plans, and vendor questionnaires sit beneath that charter and implement or test it rather than create authority.

Question 2Compliance Program Governance and Structure

A compliance officer reports to the general counsel, who also oversees the business units the compliance function monitors. Which governance concern does this arrangement most directly raise?

  1. Independence and freedom from conflicts of interest Correct answer.
  2. Excessive documentation burden
  3. Insufficient use of automated monitoring
  4. Overlap with external audit fees

Explanation

Effective compliance governance requires that the function operate independently of the activities it oversees, so that findings are not softened by conflicting management responsibilities. Reporting into a role that controls monitored business lines creates a structural conflict. Documentation, tooling, and audit fees are unrelated to the reporting line itself.

Question 3Compliance Program Governance and Structure

What is the primary governance role of a board of directors with respect to a compliance program?

  1. Negotiating contracts with regulators
  2. Conducting day-to-day transaction testing
  3. Setting risk appetite and overseeing program effectiveness Correct answer.
  4. Drafting individual policies and procedures

Explanation

The board's governance role is to establish tone at the top, approve risk appetite, and receive assurance that the program works as designed. Execution of testing, policy drafting, and regulatory negotiation belongs to management and specialized staff, not the board itself.

Question 4Compliance Program Governance and Structure

A compliance committee meets quarterly with a standing agenda covering risk assessment updates, regulatory changes, and remediation status. Which governance objective does this structure best serve?

  1. Reducing the number of compliance staff required
  2. Eliminating the need for internal audit coverage
  3. Transferring accountability to the committee members personally
  4. Providing a documented, recurring forum for escalation and oversight Correct answer.

Explanation

A standing committee with a defined agenda creates a repeatable record of oversight, decision-making, and escalation that regulators and auditors expect to see. It does not shift personal accountability, reduce staffing needs, or replace independent audit testing.

Question 5Compliance Program Governance and Structure

Under a three lines model, which group is responsible for owning and managing risk in the first instance?

  1. Operational management in the business lines Correct answer.
  2. The external auditor
  3. The compliance and risk control functions
  4. The internal audit function

Explanation

In the three lines model, operational management owns risk and implements controls as part of running the business. The second line provides oversight and challenge, and the third line, internal audit, gives independent assurance; external auditors sit outside the model.

Question 6Compliance Program Governance and Structure

A firm's compliance function is asked to approve a new product while also being accountable for the product's sales results. Which principle is most directly compromised?

  1. Timeliness of regulatory filing
  2. Completeness of customer records
  3. Adequacy of staff training hours
  4. Segregation of the second line from first-line revenue accountability Correct answer.

Explanation

When a control function shares revenue accountability for the activity it reviews, its challenge is compromised because approval decisions become self-interested. Keeping the second line separate from first-line profit targets preserves objectivity. Filing timeliness, record completeness, and training hours are separate operational matters.

Question 7Compliance Program Governance and Structure

Which individual is best positioned to set the organization's overall risk appetite for compliance risk?

  1. The front-line branch supervisor
  2. The senior compliance analyst
  3. The board of directors with input from senior management Correct answer.
  4. The internal audit manager

Explanation

Risk appetite is a governance decision made at the top, with the board approving the tolerance for compliance risk and senior management proposing and implementing it. Analysts, audit managers, and branch supervisors operate within that appetite rather than defining it.

Question 8Compliance Program Governance and Structure

A compliance program's written policies exist, but staff report that leadership routinely waives them under deadline pressure. What is the most significant governance implication?

  1. The program has an adequate control environment because policies exist
  2. The tone at the top undermines the program's credibility and effectiveness Correct answer.
  3. The program should reduce documentation to match practice
  4. The issue is purely a training deficiency among staff

Explanation

A compliance program depends on consistent enforcement from leadership; routine waivers signal that rules are optional and erode the control culture. Written policies without credible backing do not constitute an effective program, and the problem originates with leadership conduct rather than staff knowledge or documentation volume.

Question 9Compliance Program Governance and Structure

Which arrangement best preserves the independence of a chief compliance officer?

  1. Rotating the role annually among business unit leaders
  2. Reporting solely to the internal audit director
  3. Reporting to the head of sales with a dotted line to legal
  4. Direct access to the board or a board committee, with administrative reporting to the CEO Correct answer.

Explanation

Independence is strengthened when the compliance officer has unfettered access to the governing body while sitting at a senior executive level for administrative purposes. Reporting into a revenue line, into audit, or rotating the role through the business all compromise objectivity.

Question 10Compliance Program Governance and Structure

What is the most appropriate way for a compliance function to demonstrate its effectiveness to the board?

  1. Sharing the total hours spent on training delivery
  2. Reporting risk-based metrics, testing results, and remediation progress Correct answer.
  3. Presenting the number of policies issued during the year
  4. Listing the number of staff holding compliance certifications

Explanation

Boards need outcome-oriented information that shows whether controls work, where risks are elevated, and whether issues are being fixed. Activity counts such as policies issued, training hours, or certifications describe effort rather than effectiveness and can mask unresolved risk.

Question 11Compliance Program Governance and Structure

A compliance department has no formal escalation path for serious issues, and staff fear retaliation for raising concerns. Which governance element is most clearly missing?

  1. A whistleblowing and escalation framework with non-retaliation protections Correct answer.
  2. A vendor management program
  3. A records retention schedule
  4. A capital adequacy model

Explanation

Escalation channels and anti-retaliation protections are core governance elements that allow issues to surface and reach senior leadership or the board. Vendor management, capital modeling, and records retention address different risk areas and would not remedy the reporting gap.

Question 12Compliance Program Governance and Structure

A compliance function is chronically under-resourced relative to the firm's risk profile. Which governance response is most appropriate?

  1. Suspend the annual risk assessment until staffing improves
  2. Narrow the program's scope so the resource gap disappears
  3. Shift all compliance duties to the business units without oversight
  4. Document the resourcing gap and escalate it through governance with a risk-based remediation plan Correct answer.

Explanation

Resource shortfalls are themselves a compliance risk that should be documented, escalated to senior management and the board, and addressed through prioritized planning. Redefining scope to hide the gap, delegating duties without oversight, or pausing risk assessment all weaken the program further.

Question 13Compliance Program Governance and Structure

Which statement best describes the relationship between a compliance program's risk assessment and its governance structure?

  1. Risk assessment results should drive the allocation of governance attention and resources Correct answer.
  2. Governance structure is fixed and should not respond to risk assessment findings
  3. Risk assessment replaces the need for board oversight
  4. Risk assessment is performed only by internal audit

Explanation

A risk assessment identifies where exposure is greatest, and governance bodies use those findings to direct oversight, staffing, and committee attention. It complements rather than replaces board oversight, the structure should adapt to identified risk, and the assessment is a management activity informed by multiple functions.

Question 14Compliance Program Governance and Structure

Which of the following is a defining characteristic of an effective compliance charter?

  1. It is reviewed and approved by the governing body Correct answer.
  2. It is kept confidential from regulators
  3. It is rewritten each quarter
  4. It is authored solely by front-line staff

Explanation

Charters derive their authority from governing-body approval, which confirms the mandate and accountability structure. Charters are generally made available to regulators on request, require periodic rather than quarterly revision, and are drafted with senior input rather than by front-line staff alone.

Question 15Compliance Program Governance and Structure

A newly appointed chief compliance officer wants to confirm the program's governance expectations against an external benchmark. Which approach is most appropriate?

  1. Defer benchmarking until after the next regulatory examination
  2. Rely solely on the prior officer's undocumented practices
  3. Map the program against recognized regulatory guidance and industry frameworks, then tailor to the firm's risk profile Correct answer.
  4. Adopt another firm's program documents verbatim without adaptation

Explanation

Benchmarking against regulatory guidance and recognized frameworks gives an objective reference point, but effective governance requires tailoring to the institution's own size, complexity, and risk profile. Copying documents verbatim, relying on undocumented practice, or waiting for an examination all leave the program exposed.

Question 16Compliance Program Governance and Structure

Which governance body is typically responsible for approving the compliance program's annual plan and budget?

  1. The external audit firm
  2. The front-line sales team
  3. The customer complaints unit
  4. The board or its designated committee, on management's recommendation Correct answer.

Explanation

Approval of the compliance plan and budget sits with the board or a delegated board committee, informed by management's proposal. Front-line teams, external auditors, and complaints units may provide input but do not hold approval authority over program resources.

Question 17Compliance Program Governance and Structure

A firm's compliance committee includes the heads of the business lines it oversees but no independent members. What is the most likely consequence for governance quality?

  1. Faster decisions with stronger challenge to business proposals
  2. Weaker independent challenge and greater risk of groupthink Correct answer.
  3. Reduced need for documented minutes
  4. Improved regulatory standing through business representation

Explanation

A committee composed entirely of the executives whose activities are being overseen is unlikely to challenge itself rigorously, raising the risk of groupthink and unremediated issues. Business representation does not by itself improve regulatory standing, and minutes remain essential regardless of composition.

Question 18Compliance Program Governance and Structure

Which practice best supports accountability for compliance across business units?

  1. Embedding compliance responsibilities in role descriptions and performance objectives Correct answer.
  2. Removing compliance topics from management meetings
  3. Excluding compliance metrics from performance evaluations
  4. Assigning all compliance duties to a single centralized team

Explanation

Accountability is reinforced when compliance obligations appear in job descriptions and performance objectives, making them part of how individuals are measured. Excluding metrics, centralizing all duties, or removing the topic from management agendas weakens ownership in the business.

Question 19Compliance Program Governance and Structure

A regulator asks how the board satisfies itself that the compliance program is effective. Which evidence most directly answers the question?

  1. Board minutes showing periodic review of compliance reports and challenge of management Correct answer.
  2. A list of compliance staff qualifications
  3. A summary of the firm's marketing spend
  4. The number of policies in the policy library

Explanation

Boards evidence oversight through minutes that show they received compliance information, questioned management, and directed action. Staff qualifications, policy counts, and marketing spend describe inputs or unrelated activities and do not demonstrate active governance.

Question 20Compliance Program Governance and Structure

Which structural feature most helps a compliance function stay current with regulatory change?

  1. A one-time regulatory inventory completed at program launch
  2. A defined process for tracking, interpreting, and implementing regulatory changes Correct answer.
  3. Annual review of regulations only during audit season
  4. Relying on business units to report new rules they encounter

Explanation

Regulatory change management requires a repeatable process that identifies new requirements, assesses their impact, and assigns implementation ownership. A one-time inventory becomes stale, business units lack the mandate to interpret rules, and annual review leaves gaps between cycles.

Question 21Compliance Program Governance and Structure

A compliance officer discovers that a senior executive approved a transaction that breached an internal limit. What is the most appropriate governance action?

  1. Handle it informally with the executive to avoid documentation
  2. Ignore the matter because seniority implies authorization
  3. Escalate through the defined governance channel, including to the board or its committee where warranted Correct answer.
  4. Wait for the next external audit to raise it

Explanation

Breaches involving senior personnel must follow the formal escalation path so that oversight bodies can assess and respond independently of the individual involved. Informal handling, deference to seniority, or deferral to external audit all allow the issue to persist and undermine governance credibility.

Question 22Compliance Program Governance and Structure

Which factor most strongly justifies a more elaborate compliance governance structure at one firm than another?

  1. The firm's size, complexity, and risk profile Correct answer.
  2. The preferred communication style of its CEO
  3. The number of years the firm has existed
  4. The location of its headquarters building

Explanation

Proportionality in governance means structure should reflect the scale, complexity, and risk inherent in the firm's activities. Age, office location, and executive communication preferences do not determine the level of oversight needed to manage compliance risk.

Question 23Compliance Program Governance and Structure

What is the purpose of a compliance program's formal delegation of authority matrix?

  1. To replace the need for written policies
  2. To determine employee compensation levels
  3. To clarify who may approve which decisions and at what threshold Correct answer.
  4. To assign blame after an incident occurs

Explanation

A delegation matrix documents decision rights and approval thresholds so that authority is clear, traceable, and consistent with risk limits. It supplements rather than replaces policies, is not a blame-allocation tool, and does not set compensation.

Question 24Compliance Program Governance and Structure

A compliance function sits within the legal department and its head reports to the general counsel. Which step would most improve its governance standing?

  1. Merging compliance duties into the business units
  2. Reducing the frequency of compliance reporting
  3. Establishing a direct reporting line or regular private access to the board committee Correct answer.
  4. Eliminating the compliance function's reporting to anyone

Explanation

Even where compliance sits organizationally near legal, governance is strengthened by direct access to a board committee so that oversight is not filtered through another executive. Eliminating reporting entirely is unworkable, and merging duties into the business or reducing reporting frequency weakens oversight.

Question 25Compliance Program Governance and Structure

Which element is essential for a compliance committee's decisions to be enforceable and auditable?

  1. Verbal agreements recorded only in attendees' notes
  2. Holding meetings without a fixed agenda
  3. Documented minutes with decisions, owners, and due dates Correct answer.
  4. Restricting attendance to junior staff

Explanation

Minutes that record decisions, assigned owners, and deadlines create accountability and provide evidence that oversight occurred. Verbal-only records, restricted attendance, and agenda-free meetings undermine both enforceability and the audit trail.

Question 26Compliance Program Governance and Structure

Which document formally establishes a compliance function's authority, scope of responsibility, and reporting lines within an organization?

  1. The enterprise budget forecast
  2. The marketing code of conduct
  3. The annual audit plan
  4. The compliance charter Correct answer.

Explanation

A compliance charter is the governing document that defines the function's mandate, authority, independence, and reporting relationships. It gives the compliance function formal standing and makes its responsibilities explicit and enforceable. Other documents may reference compliance but do not establish its structural authority.

Question 27Compliance Program Governance and Structure

A firm wants to ensure the compliance function has direct and unfettered access to the board. Which structural arrangement best achieves this?

  1. The compliance officer reports to the chief financial officer who relays updates quarterly
  2. The compliance officer reports only to the head of sales to keep communication efficient
  3. The compliance officer has a dotted line to the board through the internal audit team
  4. The compliance officer has a direct reporting line to the board or its designated committee Correct answer.

Explanation

Direct access to the board, or to a board committee such as audit or risk, preserves the compliance function's ability to raise concerns without management filtering. This reporting line supports independence and ensures the board receives unfiltered information about compliance risk. Indirect routes through business or finance leaders weaken that protection.

Question 28Compliance Program Governance and Structure

A compliance committee is being formed. Which membership design best supports sound compliance governance?

  1. A body that includes senior leaders from business, legal, risk, and compliance with a defined chair and terms of reference Correct answer.
  2. A body chaired by the head of the largest revenue-producing business unit
  3. A body whose members rotate informally with no documented mandate
  4. A body composed exclusively of external consultants with no internal authority

Explanation

Effective compliance committees combine cross-functional senior representation with a clear chair, documented mandate, and terms of reference. This mix allows decisions to be coordinated across functions and gives the committee authority to act. Informal or externally dominated bodies lack the standing to enforce decisions.

Question 29Compliance Program Governance and Structure

A compliance function has clear policies but no documented process for tracking regulatory changes and updating those policies. Which governance improvement most directly addresses this gap?

  1. Increasing the frequency of all-staff compliance training sessions
  2. Adding a regulatory change management process with assigned owners and review cycles Correct answer.
  3. Hiring additional staff to answer employee ethics hotline calls
  4. Expanding the compliance budget for external legal opinions

Explanation

A regulatory change management process assigns responsibility for monitoring developments, assessing their impact, and updating policies on a defined cycle. This creates a repeatable mechanism that keeps the program aligned with current requirements. Training, hotline staffing, and legal opinions may support compliance but do not close the policy-update gap.

Question 30Compliance Program Governance and Structure

A multinational firm operates in several jurisdictions with differing compliance requirements. Which governance approach best manages this complexity?

  1. Applying the least stringent local standard everywhere to reduce operating costs
  2. Adopting a single global baseline standard and supplementing it with local addenda where requirements are stricter Correct answer.
  3. Delegating all compliance decisions to external counsel in each jurisdiction
  4. Letting each local office design its own program with no central oversight

Explanation

A global baseline with local supplements provides consistency while respecting stricter local rules, and it preserves central oversight of the program. This structure lets the firm apply one core standard and layer jurisdiction-specific requirements on top. Uniform laxity or uncoordinated local programs create gaps and inconsistent controls.

Question 31Risk Assessment and Management

Which statement best defines risk in the context of clinical research oversight?

  1. The probability and magnitude of harm or discomfort anticipated from participation in a study Correct answer.
  2. The possibility that investigators will disagree about authorship
  3. The likelihood that a study will fail to recruit its target enrollment
  4. The chance that a sponsor will withdraw funding before the trial ends

Explanation

Risk combines both the likelihood of an adverse outcome and the seriousness of the harm or discomfort that could result from study participation. Recruitment, funding, and authorship concerns are operational issues, not the harm-centered definition used in human-subjects protection.

Question 32Risk Assessment and Management

A study collects only existing medical records with identifiers removed before analysis and no interaction with subjects. How should this be classified?

  1. Expedited review because records are involved
  2. Not human-subjects research under any circumstance
  3. Minimal risk because no intervention or interaction occurs Correct answer.
  4. Greater than minimal risk because records are sensitive

Explanation

Research limited to records review without interaction or intervention generally presents no more than minimal risk, since the probability and magnitude of harm are no greater than daily life or routine examinations. Sensitivity alone does not automatically raise the risk category.

Question 33Risk Assessment and Management

Which element is essential to a valid informed consent discussion of risk?

  1. A description of reasonably foreseeable risks and discomforts Correct answer.
  2. Only the risks that occurred in prior studies at the same site
  3. An estimate of the sponsor's financial exposure
  4. A guarantee that no serious harm will occur

Explanation

Consent must describe reasonably foreseeable risks or discomforts so that a reasonable person can decide whether to participate. No guarantee of safety can be given, and limiting disclosure to local prior experience is inadequate.

Question 34Risk Assessment and Management

In a risk-benefit assessment, which consideration most appropriately justifies exposing participants to more than minimal risk?

  1. The protocol has been reviewed by a statistician
  2. Participants will be paid a substantial stipend
  3. The anticipated benefit to society outweighs the risks to participants Correct answer.
  4. The sponsor has purchased adequate liability insurance

Explanation

When individual benefit is uncertain, an IRB may approve greater than minimal risk only if the potential societal benefit from generalizable knowledge outweighs the risk. Insurance, payment, and statistical review do not alter the underlying harm-benefit balance.

Question 35Risk Assessment and Management

Which scenario most clearly represents greater than minimal risk for a healthy volunteer?

  1. Having height and weight measured during a school screening
  2. Undergoing a single blood draw at a routine clinic visit
  3. Receiving an experimental gene therapy with unknown long-term effects Correct answer.
  4. Completing a one-page anonymous survey about sleep habits

Explanation

An experimental intervention with unknown long-term consequences exceeds the minimal-risk threshold because the probability and magnitude of harm exceed routine daily experience. Surveys, routine venipuncture, and anthropometric measurement are generally minimal risk.

Question 36Risk Assessment and Management

A monitoring plan for a high-risk trial should include which feature to detect problems early?

  1. A commitment to publish results within one year
  2. Delegation of all safety review to the sponsor's marketing team
  3. A predefined schedule of safety reviews with stopping rules Correct answer.
  4. An increase in enrollment targets after the first quarter

Explanation

Effective monitoring specifies in advance how safety data will be reviewed, by whom, and under what criteria the study would be paused or stopped. Publication timelines and enrollment changes do not detect emerging harms.

Question 37Risk Assessment and Management

What is the primary purpose of a Data and Safety Monitoring Board in a randomized trial?

  1. To prepare the statistical analysis plan for publication
  2. To review accumulating outcome data and advise on continuation, modification, or termination Correct answer.
  3. To negotiate contracts between the sponsor and the site
  4. To recruit participants and verify eligibility documentation

Explanation

A DSMB independently reviews accumulating safety and efficacy data and recommends whether the trial should continue, be modified, or stop. It does not perform recruitment, contract negotiation, or routine analysis-plan drafting.

Question 38Risk Assessment and Management

A trial's interim analysis shows a clear harm signal in one treatment arm. What is the most appropriate immediate action?

  1. Suspend the affected arm and notify the reviewing bodies promptly Correct answer.
  2. Continue enrollment unchanged until the planned final analysis
  3. Increase the sample size to improve statistical power
  4. Remove the adverse events from the database as outliers

Explanation

When interim data show harm, the responsible action is to halt or modify the affected arm and promptly inform the IRB, sponsor, and monitoring bodies. Continuing unchanged or enlarging the sample exposes additional participants to avoidable harm.

Question 39Risk Assessment and Management

Which action best mitigates the risk of coercion in recruiting economically disadvantaged participants?

  1. Restricting enrollment to persons known to the investigator
  2. Requiring participants to waive the right to withdraw
  3. Ensuring payments reflect time and burden rather than inducement Correct answer.
  4. Increasing the payment amount to attract more volunteers

Explanation

Payments should compensate time, travel, and burden without becoming an undue inducement that overwhelms free choice. Inflated payments and waiver of withdrawal rights undermine voluntariness.

Question 40Risk Assessment and Management

A protocol enrolls prisoners as subjects. Which safeguard is specifically required because of their status?

  1. Assurance that risks are commensurate with risks acceptable to non-prisoners and that selection is equitable Correct answer.
  2. Removal of the right to a private consent discussion
  3. Exclusion of any follow-up after release from custody
  4. Elimination of all compensation for participation

Explanation

Prisoner research requires that risks be no greater than those acceptable for non-prisoners and that selection be equitable, given the coercive nature of incarceration. Compensation, follow-up, and confidential consent are not eliminated.

Question 41Risk Assessment and Management

Which group is considered vulnerable to increased risk of harm in research and therefore warrants additional safeguards?

  1. Adults with stable employment and health insurance
  2. Employees of large technology firms
  3. Children with a life-threatening illness Correct answer.
  4. Retired persons with no chronic conditions

Explanation

Children, especially those with serious illness, are a recognized vulnerable population because of limited autonomy and greater susceptibility to harm. Employment status or retirement alone does not create the same vulnerability.

Question 42Risk Assessment and Management

A study uses deception about the true purpose of a task. What is the most appropriate risk-management measure?

  1. Increase the deception to prevent participants from guessing
  2. Delay debriefing until after the manuscript is published
  3. Omit debriefing to preserve the integrity of the data
  4. Provide a debriefing that explains the deception and addresses distress Correct answer.

Explanation

Deception is acceptable only with justification and adequate safeguards, including prompt debriefing that reveals the true purpose and addresses any distress. Omitting or delaying debriefing leaves participants misinformed and may prolong harm.

Question 43Risk Assessment and Management

Which practice best protects confidentiality and thereby reduces risk in a study involving sensitive data?

  1. Posting aggregate results with individual identifiers attached
  2. Emailing participant names to the full research team
  3. Storing identifiers and study data together in a shared drive
  4. Using coded identifiers with a separate, access-controlled key Correct answer.

Explanation

Separating codes from the linking key and restricting access reduces the chance of inadvertent disclosure, which is a key risk in sensitive-data research. Shared drives, mass emails, and identifier-bearing postings increase exposure.

Question 44Risk Assessment and Management

An investigator plans to enroll adults who lack the capacity to consent. Which approach best manages the associated risk?

  1. Enroll them without any consent because capacity is absent
  2. Rely on the investigator's judgment in place of documented consent
  3. Obtain consent from a coworker of the prospective participant
  4. Obtain surrogate consent under IRB-approved procedures and reassess capacity Correct answer.

Explanation

Research with adults lacking capacity requires IRB-approved procedures for surrogate permission and ongoing reassessment of capacity. Enrolling without consent or relying on informal approval fails to protect autonomy.

Question 45Risk Assessment and Management

What distinguishes equipoise as a justification for randomized assignment?

  1. Participants are assigned to arms based on their preference
  2. The sponsor prefers one arm for commercial reasons
  3. The control arm is known to be inferior but cheaper
  4. The investigator genuinely does not know which arm is superior Correct answer.

Explanation

Equipoise exists when there is genuine uncertainty about which treatment is better, making random assignment ethically acceptable. Commercial preference, known inferiority, or preference-based assignment undermines that justification.

Question 46Risk Assessment and Management

Which statement about the relationship between study design and risk is most accurate?

  1. Randomization always increases risk compared with standard care
  2. Procedures such as washout periods can add risk even in observational studies Correct answer.
  3. Observational designs can never present more than minimal risk
  4. Risk derives only from the intervention, not from study procedures

Explanation

Risk arises from all study procedures, including washout periods, additional testing, and monitoring burdens, not just the experimental intervention. Observational designs can therefore exceed minimal risk in some circumstances.

Question 47Risk Assessment and Management

Which is the most appropriate way to manage the risk of a rare but potentially fatal adverse event?

  1. Describe the risk in consent and establish a plan for prompt recognition and treatment Correct answer.
  2. Assume the event will not occur because it is rare
  3. Rely on participants to report the event after the study ends
  4. Exclude the event from the consent form to avoid alarming participants

Explanation

Rare but serious risks must be disclosed and paired with a plan for rapid detection and management, including appropriate monitoring and rescue procedures. Concealing or ignoring the risk leaves participants unprotected.

Question 48Risk Assessment and Management

What is the purpose of an independent monitor in a risk-based monitoring strategy?

  1. To replace the IRB in reviewing protocol amendments
  2. To conduct all statistical analyses for the final report
  3. To focus oversight resources on the trial elements most likely to affect safety and data quality Correct answer.
  4. To verify that the sponsor's budget is spent as planned

Explanation

Risk-based monitoring directs limited oversight resources toward the activities and data most critical to participant safety and reliable results. It does not replace IRB review, financial auditing, or statistical analysis.

Question 49Risk Assessment and Management

A participant experiences an unanticipated problem that is serious and unexpected and suggests increased risk. What must the investigator do?

  1. Report it only if the participant requests disclosure
  2. Wait until the annual continuing review to mention it
  3. Report it promptly to the IRB and sponsor according to applicable requirements Correct answer.
  4. Record it privately without notifying anyone

Explanation

Unanticipated problems involving risk to subjects or others must be reported promptly to the IRB and sponsor under applicable requirements. Delaying until continuing review or withholding notification fails the reporting obligation.

Question 50Risk Assessment and Management

Which factor most directly increases the magnitude of harm from a research procedure?

  1. The academic rank of the principal investigator
  2. The length of the consent document
  3. The invasiveness and irreversibility of the procedure Correct answer.
  4. The number of study sites involved

Explanation

Magnitude of harm depends on characteristics such as invasiveness, reversibility, and severity of potential injury, not on administrative features. Site count, document length, and investigator rank do not determine harm severity.