Certified Compliance & Ethics Professional (CCEP) Exam Guide
Validates knowledge of running corporate compliance and ethics programs, including policies, oversight, training, monitoring, investigations and risk assessment.
CCEP tests whether you can run and oversee a compliance and ethics program, mostly through situational questions about the best next step. CCB publishes no study guide: compare your experience with the content outline, fill gaps through CEU events and reading, and learn the government guidance the outline is based on.
1Understand the exam
Syllabus
1Standards, policies and procedures15%
ADevelop, review, or update operational policies and procedures
BConsult with appropriate subject matter resources
CAssure the compliance and ethics strategic plan is in alignment with the overall business objectives
DMaintain a code of conduct that ensures organizational value statements reflect a commitment to a culture of integrity
EAssure policies address interactions with third parties and are reflected in contractual agreements
FDocument the compliance and ethics program
2Compliance and ethics program oversight and administration17%
AAdminister compliance program
BCollaborate internally and externally with others to institute best practices
CManage the aspects of the compliance oversight committee
DMaintain knowledge of relevant laws and regulations
ERecognize the need for external expertise
FVerify that the governing authority understands its responsibilities related to the compliance and ethics program and culture
Example scenario: The board asks for assurance that the compliance program works. What would you report, and how would you show its effectiveness?
3Communication, education and training17%
ACommunicate general and targeted compliance and ethics information throughout the organization
BEvaluate the effectiveness of compliance and ethics training
CAssure that employees are aware of their obligation to seek guidance and clarification and report misconduct
DAssure that employees are aware of their job-specific compliance and ethics responsibilities
EPromote a culture of compliance and ethics throughout the organization
FIdentify and train individuals that receive questions and concerns on how to identify potential compliance and ethics issues
GManage a compliance and ethics education program
4Monitoring, auditing, and internal reporting systems17%
AProtect anonymity and confidentiality within legal and practical limits for individuals reporting issues
BDevelop and publicize the reporting methods to employees, vendors, and third parties
CDevelop processes and/or monitor for organizational misconduct
DDevelop risk-based audit plans, conduct audits, and analyze results
EEnsure audit results from external entities are addressed
FEvaluate the effectiveness of the compliance and ethics program
GInclude compliance and ethics questions in exit interviews
Example scenario: Hotline reports from one region have dropped to zero after a reorganization. What would you check?
5Investigation and responses, discipline and incentives24%
AAssure that discipline is proportionate to violation, consistent across the organization, and documented
BEncourage incentives for compliant and ethical behavior, including metrics for performance evaluations
CAssure compliance with the organization's non-retaliation policy
DRespond to compliance and ethics concerns
EReport investigative findings through appropriate channels within the organization
FAssure management develops corrective action plans in response to noncompliance
GMonitor the effectiveness of corrective action plans
HConduct internal investigations and maintain records
IRespond to government inquiries and investigations
JCollaborate with decision makers regarding voluntary disclosure process
KCoordinate investigations to preserve applicable privileges
Example scenario: A manager is accused of retaliating against an employee who raised a concern. What are your first steps?
6Risk assessment10%
AAssure the risk assessment methodology is scalable for the organization
BAssure compliance and ethics risk assessments are conducted across the organization
CAssure management action plans are developed and executed based on risk assessment findings
DAssure due diligence is performed on third parties
Multiple choice. Choose the one correct answer to each question, which tests either recall of specific knowledge or applying it to a situation.
CertUp example
An employee reports a suspected conflict of interest to the compliance hotline and asks to stay anonymous. What should the compliance officer do first?
Ask the employee to identify themselves before taking action
Protect the reporter's anonymity and start an assessment of the concern
Forward the report to the employee's manager
Wait for a second report before acting
Show answer
B. Protect the reporter's anonymity and start an assessment of the concern. Reports are handled confidentially and assessed without exposing the reporter.
Eligibility and booking
Required before you can sit the exam
1 year of compliance work
Required
A full-time compliance role for at least a year, or 1,500 hours of direct compliance duties in the two years before you apply. Your duties must match the tasks in the content outline.
Standard route
1 year full time, or 1,500 hours within 2 years
Graduate of a CCB-accredited university compliance program
Experience waived for 24 months after completion
20 CCB CEUs, including 10 live
Required
Earned within the 12 months before your exam date, in CCB’s compliance subject areas, and approved by CCB before you apply. Webinars and events from other organizations can count.
Standard route
20 CEUs, 10 from live training
Graduate of a CCB-accredited university compliance program
Waived for 12 months after completion
CCB reviews each application before you can schedule. SCCE or HCCA membership is not required.
Submit your CEUs, then apply and pay online. After CCB approves the application, schedule with PSI or register for a paper exam at an SCCE or HCCA event. Computer results usually appear right after the exam; paper results take 4 to 6 weeks. If you fail twice within 180 days, wait 180 days before retesting.
Rate your experience against each domain of the content outline, then plan CEUs that cover the weakest areas.
Most candidates spend 40–70 hours. Plan for the low end if you already work in compliance across most domains; add time for domains outside your usual work.
1Understand the examRead the syllabus and format, check you’re eligible and pick a target date.3 h
3Learn the core conceptsWork through one main course or book, topic by topic.29 h
4Practice with mock examsTake timed practice tests and review every mistake.15 h
5Prepare for exam dayBook the exam and check the ID and delivery rules.3 h
3Learn the core concepts
Use the outline, the government guidance it draws on and CEU events that cover your weaker domains.