Data Security & Privacy
DEA Compliance
Conflicts of Interest
Workplace Respect
& Safety
Speaking Up & The Hotline
100

This sneaky type of email mimics trusted brands or coworkers to trick you into clicking malicious links.  

What is Phishing?

100

This specific document must be filled out and submitted by any new customer who wishes to purchase or order controlled substances from FFF.

What is the SOM Questionnaire?

100

This is what you must do immediately if you discover your brother-in-law owns a company currently bidding for a vendor contract with your team.

What is Disclose it to Compliance?

100

This is the name of our company’s zero-tolerance policy regarding any unwanted physical, verbal, or visual behavior of a sexual nature.

What is the Anti-Harassment Policy?

100

True or False: You can remain completely anonymous when submitting a report through the corporate compliance hotline.

What is True?

200

This 4-letter acronym represents the standard framework for protecting consumer healthcare information in the US.  

What is HIPAA?

200

They ensure the “New Account & Credit Application Form” has been completed and approved prior to conducting business.

Who is Supply Chain Operations?

200

This term describes taking up a secondary weekend or night job that uses your company's proprietary knowledge or directly assists a market rival.

What is a Conflict of Employment / Moonlighting?

200

This federal agency sets and enforces the workplace physical safety regulations that our manufacturing and office spaces must strictly follow.

What is OSHA?

200

This is the name of our company's internal compliance reporting portal.

What is Integrity Counts?


300

This is the specific type of malicious software that locks up company files until a financial payment is made to the hackers.  

What is Ransomware?

300

Requiring terminated employees to return all issued access badges, keys, and combinations to distribution center management falls under this specific section of DEA compliance.

What is Security?

300

If a vendor accidentally sends a duplicate high-end laptop to your house, keeping it instead of returning it to corporate inventory violates this ethical duty.

What is Misappropriation of Company Assets?

300

This type of negative action taken against an employee for reporting a workplace safety or harassment concern in good faith is highly illegal.

What is Retaliation?

300

This internal group is responsible for looking into claims, gathering evidence, and deciding if a reported policy breach actually occurred.

What is the Investigation or Compliance Team?

400

To comply with data privacy laws, paper documents containing personally identifiable information (PII) or protected health information (PHI) must never go in the regular trash; they must go into these designated, locked containers.

What are shredding bins?

400

To ensure strict compliance, these specific materials must be systemically logged into the system on the exact same date they physically arrive at the distribution center and must always be kept inside DEA-approved storage zones.

What are controlled substances?

400


This term describes an employee secretly holding two full-time, remote jobs simultaneously, which often violates company policies regarding hours worked and the misuse of proprietary property.


What is "Overemployment" or "Double Dipping?"

400

Doing this to a coworker's legitimate request for religious or physical accommodation during work hours violates federal labor laws.

What is Denying Reasonable Accommodation?

400

This phrase describes an employee who reports systemic corporate wrongdoing or fraud to external regulatory bodies.

What is a Whistleblower?

500

!! DAILY DOUBLE !!  This is the common security practice of requiring two different methods—such as a password and a temporary code sent to your mobile device—to verify your identity before logging into a corporate system.

What is Two-Factor Authentication?

500

If a shipment is incomplete, open lines on a DEA Form 222 must be canceled after a purchaser sends a written notification or once this many days have passed.

What is 60 days?

500

Serving on the advisory board of this type of organization requires zero compliance approval, unlike serving on a for-profit commercial board.

What is a Non-Profit / Charitable Organization?

500

This specific type of bias occurs when a manager makes hiring or promotion decisions based on unconscious cultural or gender stereotypes.

What is Implicit Bias?

500

!! DAILY DOUBLE !!
In addition to the company hotline, who else can be notified directly of any wrongdoing

Who is the Chief Compliance Officer?

M
e
n
u