{
  "question_text": "According to the corporate resolution establishing the BSA/AML Compliance Officer position, which of the following best describes your authority and reporting relationship?",
  "options": [
    "You implement, maintain, and enforce all program components, report directly to the owner, and may raise compliance concerns without restriction",
    "You implement and maintain program components but must seek owner approval before enforcing any corrective actions",
    "You advise the owner on compliance matters but enforcement authority rests with the owner",
    "You report to senior management and may escalate compliance concerns to the owner only through a formal review process"
  ],
  "correct_answer": "You implement, maintain, and enforce all program components, report directly to the owner, and may raise compliance concerns without restriction",
  "correct_response": "Correct. The corporate resolution grants you authority to implement, maintain, and enforce all program components. You report directly to the owner and may raise compliance concerns without restriction from anyone.",
  "incorrect_response": "The corporate resolution gives the BSA/AML Compliance Officer full authority to implement, maintain, and enforce all program components. You report directly to the owner — not through management layers — and may raise compliance concerns at any time without restriction.",
  "unsure_response": null,
  "question_bank": [
    {
      "question_text": "Who, if anyone, can restrict the BSA/AML Compliance Officer from raising a compliance concern directly to the owner?",
      "options": [
        "No one — the BSA/AML Compliance Officer may raise compliance concerns to the owner without restriction",
        "Senior management may delay escalation until an internal review is completed",
        "The owner may designate a senior manager to filter compliance concerns before they are escalated",
        "The independent auditor must first assess whether the concern warrants owner-level escalation"
      ],
      "correct_answer": "No one — the BSA/AML Compliance Officer may raise compliance concerns to the owner without restriction",
      "correct_response": "Correct. The program explicitly establishes a direct, unrestricted reporting line from the BSA/AML Compliance Officer to the owner. No intermediary or approval process can block that access.",
      "incorrect_response": "The program establishes a direct, unrestricted reporting line from the BSA/AML Compliance Officer to the owner. No one — not management, not auditors — can restrict or delay the BSA/AML Compliance Officer from raising compliance concerns directly to the owner.",
      "unsure_response": null
    },
    {
      "question_text": "Under Advanced Compliance Technology, Inc.'s compliance governance structure, when must an operational decision be submitted to the BSA/AML Compliance Officer before it proceeds?",
      "options": [
        "When the decision creates compliance risk",
        "When the decision involves a transaction over the CTR reporting threshold",
        "When the decision requires the owner's formal approval under the corporate resolution",
        "When the decision affects staffing of AML/CFT functions"
      ],
      "correct_answer": "When the decision creates compliance risk",
      "correct_response": "Correct. Any operational decision that creates compliance risk must come to the BSA/AML Compliance Officer before implementation — regardless of the decision's size or the team making it.",
      "incorrect_response": "The trigger for pre-implementation review is compliance risk. Any operational decision that creates compliance risk must be reviewed by the BSA/AML Compliance Officer before it proceeds — this is not limited to high-dollar transactions or decisions requiring owner approval.",
      "unsure_response": null
    }
  ],
  "enrichment_content": "<p><strong>Your authority as BSA/AML Compliance Officer:</strong></p><ul><li>You implement, maintain, and <strong>enforce</strong> all program components.</li><li>You report <strong>directly to the owner</strong> — no intermediaries.</li><li>You may raise compliance concerns to the owner <strong>without restriction</strong>.</li><li>Any operational decision that creates compliance risk must come to you <strong>before implementation</strong>.</li></ul>"
}