{
  "question_text": "A sustained change in transaction volume can trigger an out-of-cycle risk assessment. What level of sustained change requires one?",
  "options": [
    "A sustained shift of 20% or more in volume, product mix, or customer segment",
    "Any single day's volume that exceeds the prior month's daily average",
    "A cumulative increase of 50% or more over the course of a full year",
    "A decline in volume that causes monthly revenue to fall below a set threshold"
  ],
  "correct_answer": "A sustained shift of 20% or more in volume, product mix, or customer segment",
  "correct_response": "Correct. A sustained shift of 20% or more in volume, product mix, or customer segment triggers an out-of-cycle assessment. This is why you review transaction volume trends every quarter.",
  "incorrect_response": "The trigger is a sustained shift of 20% or more in volume, product mix, or customer segment — not a single-day spike, a 50% annual increase, or a revenue decline. Quarterly volume reviews are designed to catch this threshold before it creates unaddressed exposure.",
  "unsure_response": null,
  "question_bank": [
    {
      "question_text": "A new Geographic Targeting Order (GTO) is issued and it affects Rapido Facil Exchange Co.'s area. What does this require under the risk assessment framework?",
      "options": [
        "An automatic out-of-cycle risk assessment",
        "A written notice to the state licensing authority within 10 days",
        "Suspension of check cashing operations until the GTO expires",
        "An internal audit performed by an independent third party"
      ],
      "correct_answer": "An automatic out-of-cycle risk assessment",
      "correct_response": "Correct. Issuance or modification of a Geographic Targeting Order affecting Rapido Facil Exchange Co.'s area automatically triggers a new risk assessment, which must be completed within 30 days.",
      "incorrect_response": "A new or modified GTO is an automatic reassessment trigger — it does not require a state notice, a suspension of operations, or a third-party audit. The out-of-cycle assessment must be completed within 30 days.",
      "unsure_response": null
    },
    {
      "question_text": "When completing a risk assessment, you rate each control's strength. Which three rating options are used?",
      "options": [
        "Strong, adequate, or needs improvement",
        "High, medium, or low",
        "Compliant, partially compliant, or non-compliant",
        "Passed, in progress, or failed"
      ],
      "correct_answer": "Strong, adequate, or needs improvement",
      "correct_response": "Correct. Controls are rated as strong, adequate, or needs improvement. Any dimension rated residual-high requires a documented remediation plan with a target completion date.",
      "incorrect_response": "Control ratings use the scale of strong, adequate, or needs improvement — not high/medium/low, compliance status labels, or pass/fail. Any dimension that ends up residual-high after this evaluation requires a documented remediation plan with a target completion date.",
      "unsure_response": null
    }
  ],
  "enrichment_content": "<p><strong>Two volume-related triggers to know:</strong></p><ul><li><strong>Quarterly review:</strong> Review transaction volume trends every quarter to catch early shifts.</li><li><strong>20% sustained shift:</strong> If volume, product mix, or customer segment shifts by 20% or more on a sustained basis, an out-of-cycle assessment is required within 30 days.</li></ul><p>A <strong>Geographic Targeting Order (GTO)</strong> is a government notice identifying high-risk activity in a specific area. Issuance or modification of a GTO affecting Rapido Facil Exchange Co. is an automatic reassessment trigger.</p><p><strong>Control strength ratings:</strong> strong, adequate, or needs improvement. Residual-high dimensions require a documented remediation plan with a target completion date.</p>"
}