{
  "question_text": "How often must Advanced Compliance Technology, Inc. complete a risk assessment?",
  "options": [
    "At least once every year",
    "Once every three years",
    "Only when a government examiner asks for one",
    "Every month"
  ],
  "correct_answer": "At least once every year",
  "correct_response": "Correct. Advanced Compliance Technology, Inc. must complete a risk assessment at least once every year. A new one is also needed within 30 days if certain things change, like ownership, customers, or a government flag on your area.",
  "incorrect_response": "A risk assessment must be completed at least once every year — not every three years or only when asked. A new one must also be done within 30 days if ownership changes, customers change significantly, or the government flags your area as high-risk.",
  "unsure_response": null,
  "question_bank": [
    {
      "question_text": "How long must Advanced Compliance Technology, Inc. keep each completed risk assessment?",
      "options": [
        "At least five years",
        "At least one year",
        "At least six months",
        "Only until the next one is done"
      ],
      "correct_answer": "At least five years",
      "correct_response": "Correct. Every completed risk assessment must be kept for at least five years.",
      "incorrect_response": "Completed risk assessments must be kept for at least five years — not one year or six months, and not only until the next one. A government examiner can ask to see them at any time.",
      "unsure_response": null
    },
    {
      "question_text": "Before doing which of the following must you complete a new risk assessment?",
      "options": [
        "Adding a new product or service",
        "Hiring a new employee",
        "Opening the store for the day",
        "Processing a large cash transaction"
      ],
      "correct_answer": "Adding a new product or service",
      "correct_response": "Correct. A new risk assessment must be completed before adding any new product, service, or location.",
      "incorrect_response": "A new risk assessment is required before adding any new product, service, or location — not before routine activities like hiring staff, opening the store, or processing transactions.",
      "unsure_response": null
    }
  ],
  "enrichment_content": "<p><strong>Key facts about risk assessments:</strong></p><ul><li>Complete one <strong>every year</strong>.</li><li>Complete one within <strong>30 days</strong> if ownership changes, customers change a lot, or the government flags your area as high-risk.</li><li>Complete one <strong>before adding any new product, service, or location</strong>.</li><li>Keep every completed assessment for at least <strong>five years</strong>.</li></ul>"
}