Key Compliance Indicators (KCIs) are metrics that evaluate how well an organization meets its legal, regulatory, and policy-based obligations.
Obligations and Requirements:
KCIs measure the effectiveness of compliance programs by tracking adherence to regulations, standards, and internal policies.
Examples of KCIs:
Percentage of compliance with mandatory training completion.
The number of corrective actions implemented after audits.
Adherence to environmental, safety, or industry-specific standards.
Why Other Options Are Incorrect:
A (Non-compliance events): Measures failures, not compliance effectiveness.
B (Training): Is one of many components but not the overall measure.
C (Environmental initiatives): Relates to sustainability metrics, not compliance.
Reference:
ISO 37301 (Compliance Management Systems): Highlights KCIs as a tool for measuring adherence to compliance obligations.
COSO Framework: Stresses the importance of monitoring compliance through KPIs and KCIs.

Information compression refers to the summarization or alteration of data as it moves through layers of communication, often resulting in distorted or incomplete information. This is particularly problematic in hierarchical organizations with multiple layers of communication.
Potential Consequences of Information Compression:
Distortion: Information may lose critical details or context, leading to incorrect content being passed on.
Misalignment: Poor information flow can cause misaligned decisions at higher levels of the organization.
Inaccurate Reporting: Compression may result in oversimplification, misinterpretation, or omission of critical information.
Why Option C is Correct:
Option C highlights the direct consequence of information compression: incorrect information content and flow to superior units, which can adversely affect decision-making.
Option A is indirectly affected by information compression but does not capture the root issue of incorrect information flow.
Option B is incorrect because compression always carries the risk of distortion.
Option D refers to addressing the problem (removing layers) rather than describing the consequence of compression itself.
Relevant Frameworks and Guidelines:
ISO 9001 (Quality Management): Stresses the importance of maintaining clear and accurate communication to ensure quality and efficiency.
COSO ERM Framework: Highlights effective communication as critical to informed decision-making.
In summary, information compression in layered communication can lead to incorrect information content and flow, which may disrupt decision-making processes and organizational performance.

The distinction between prescriptive norms and proscriptive norms lies in the types of behaviors they influence:
* Prescriptive Norms:
* Encourage behaviors considered positive or desirable by the group.
* Example: Encouraging collaboration and teamwork.
* Proscriptive Norms:
* Discourage behaviors considered negative or undesirable by the group.
* Example: Prohibiting dishonesty or discrimination.
* Why Other Options Are Incorrect:
* A: Both types of norms can be mandatory depending on the context.
* B: Norms are not specifically tied to financial or ethical behavior alone.
* C: Norms arise from social or organizational expectations, not exclusively regulations or standards.
References:
* OCEG GRC Capability Model: Explains norms in the context of organizational culture.
* Behavioral Science Frameworks: Discuss the role of prescriptive and proscriptive norms in shaping behavior.