Question 1: What is the primary role of a "Three Lines of Defense" model in risk management?
Which action should you take?
Question 2: In the context of Breach Notification Laws, which of the following is required if there is an unauthorized access to personal financial data?
Which action should you take?
Question 3: How would you ensure compliance with sanctions programs issued by entities like OFAC (Office of Foreign Assets Control)?
Which action should you take?
Question 4: According to the RBI, what is the mandatory timeline for reporting cybersecurity incidents?
Which action should you take?
Question 5: Which regulatory framework mandates that financial institutions must maintain detailed records of customer transactions for a specified period?
Which action should you take?
Question 6: What is the role of a Risk Control Self-Assessment (RCSA) in an enterprise risk management framework?
Which action should you take?