In a governance, risk, and compliance framework, which entity typically serves as an independent check on compliance?

• A. Operational management
• B. Risk management
• C. Independent compliance function
• D. Marketing department

Answer: (C)

Independent assurance about compliance comes from an independent compliance function. This unit operates separately from those who run daily operations, so it can objectively assess whether policies, laws, and regulations are being followed. It performs monitoring, testing, and audits, and it reports its findings to senior leadership and the board, enabling timely remediation. Operational management runs processes and implements controls; risk management identifies and assesses risks but does not provide the separate, objective check on compliance; other departments like marketing aren’t responsible for this function. Because of its independence, this function is best suited to serve as the check on compliance.