Certified Compliance & Ethics Professional credential artwork

Certified Compliance & Ethics Professional (CCEP) Exam Guide

Validates knowledge of running corporate compliance and ethics programs, including policies, oversight, training, monitoring, investigations and risk assessment.

CCEP tests whether you can run and oversee a compliance and ethics program, mostly through situational questions about the best next step. CCB publishes no study guide: compare your experience with the content outline, fill gaps through CEU events and reading, and learn the government guidance the outline is based on.

Understand the exam

Syllabus

1Standards, policies and procedures15%
  1. ADevelop, review, or update operational policies and procedures
  2. BConsult with appropriate subject matter resources
  3. CAssure the compliance and ethics strategic plan is in alignment with the overall business objectives
  4. DMaintain a code of conduct that ensures organizational value statements reflect a commitment to a culture of integrity
  5. EAssure policies address interactions with third parties and are reflected in contractual agreements
  6. FDocument the compliance and ethics program
2Compliance and ethics program oversight and administration17%
  1. AAdminister compliance program
  2. BCollaborate internally and externally with others to institute best practices
  3. CManage the aspects of the compliance oversight committee
  4. DMaintain knowledge of relevant laws and regulations
  5. ERecognize the need for external expertise
  6. FVerify that the governing authority understands its responsibilities related to the compliance and ethics program and culture

Example scenario: The board asks for assurance that the compliance program works. What would you report, and how would you show its effectiveness?

3Communication, education and training17%
  1. ACommunicate general and targeted compliance and ethics information throughout the organization
  2. BEvaluate the effectiveness of compliance and ethics training
  3. CAssure that employees are aware of their obligation to seek guidance and clarification and report misconduct
  4. DAssure that employees are aware of their job-specific compliance and ethics responsibilities
  5. EPromote a culture of compliance and ethics throughout the organization
  6. FIdentify and train individuals that receive questions and concerns on how to identify potential compliance and ethics issues
  7. GManage a compliance and ethics education program
4Monitoring, auditing, and internal reporting systems17%
  1. AProtect anonymity and confidentiality within legal and practical limits for individuals reporting issues
  2. BDevelop and publicize the reporting methods to employees, vendors, and third parties
  3. CDevelop processes and/or monitor for organizational misconduct
  4. DDevelop risk-based audit plans, conduct audits, and analyze results
  5. EEnsure audit results from external entities are addressed
  6. FEvaluate the effectiveness of the compliance and ethics program
  7. GInclude compliance and ethics questions in exit interviews

Example scenario: Hotline reports from one region have dropped to zero after a reorganization. What would you check?

5Investigation and responses, discipline and incentives24%
  1. AAssure that discipline is proportionate to violation, consistent across the organization, and documented
  2. BEncourage incentives for compliant and ethical behavior, including metrics for performance evaluations
  3. CAssure compliance with the organization's non-retaliation policy
  4. DRespond to compliance and ethics concerns
  5. EReport investigative findings through appropriate channels within the organization
  6. FAssure management develops corrective action plans in response to noncompliance
  7. GMonitor the effectiveness of corrective action plans
  8. HConduct internal investigations and maintain records
  9. IRespond to government inquiries and investigations
  10. JCollaborate with decision makers regarding voluntary disclosure process
  11. KCoordinate investigations to preserve applicable privileges

Example scenario: A manager is accused of retaliating against an employee who raised a concern. What are your first steps?

6Risk assessment10%
  1. AAssure the risk assessment methodology is scalable for the organization
  2. BAssure compliance and ethics risk assessments are conducted across the organization
  3. CAssure management action plans are developed and executed based on risk assessment findings
  4. DAssure due diligence is performed on third parties

CCEP Detailed Content Outline · 2026 Candidate Handbook

Format

Questions
115
Duration
2h
Delivery
Test centre or online
Languages
English

Question types

Multiple choice. Choose the one correct answer to each question, which tests either recall of specific knowledge or applying it to a situation.

CertUp example

An employee reports a suspected conflict of interest to the compliance hotline and asks to stay anonymous. What should the compliance officer do first?

  1. Ask the employee to identify themselves before taking action
  2. Protect the reporter's anonymity and start an assessment of the concern
  3. Forward the report to the employee's manager
  4. Wait for a second report before acting
Show answer

B. Protect the reporter's anonymity and start an assessment of the concern. Reports are handled confidentially and assessed without exposing the reporter.

Eligibility and booking

Required before you can sit the exam

1 year of compliance work

Required

A full-time compliance role for at least a year, or 1,500 hours of direct compliance duties in the two years before you apply. Your duties must match the tasks in the content outline.

Standard route1 year full time, or 1,500 hours within 2 years
Graduate of a CCB-accredited university compliance programExperience waived for 24 months after completion

20 CCB CEUs, including 10 live

Required

Earned within the 12 months before your exam date, in CCB’s compliance subject areas, and approved by CCB before you apply. Webinars and events from other organizations can count.

Standard route20 CEUs, 10 from live training
Graduate of a CCB-accredited university compliance programWaived for 12 months after completion

CCB reviews each application before you can schedule. SCCE or HCCA membership is not required.

Submit your CEUs, then apply and pay online. After CCB approves the application, schedule with PSI or register for a paper exam at an SCCE or HCCA event. Computer results usually appear right after the exam; paper results take 4 to 6 weeks. If you fail twice within 180 days, wait 180 days before retesting.

Make a study plan

Rate your experience against each domain of the content outline, then plan CEUs that cover the weakest areas.

Most candidates spend 40–70 hours. Plan for the low end if you already work in compliance across most domains; add time for domains outside your usual work.

10 weeksto be ready
  1. 1Understand the examRead the syllabus and format, check you’re eligible and pick a target date.3 h
  2. 3Learn the core conceptsWork through one main course or book, topic by topic.29 h
  3. 4Practice with mock examsTake timed practice tests and review every mistake.15 h
  4. 5Prepare for exam dayBook the exam and check the ID and delivery rules.3 h

Learn the core concepts

Use the outline, the government guidance it draws on and CEU events that cover your weaker domains.

See all 2 CCEP courses →

Answer as the program owner. Pick the step that follows the organization’s process and protects the program, not a quick fix.

Practice with mock exams

Official practice material is small. Use it to learn the question style and the testing platform.

See all 2 CCEP practice tests →

Are you ready?

  • You can explain each domain of the outline with examples from a real program.
  • You can choose the best next step in an investigation, hotline or training scenario.
  • You know the effective-program elements in the Sentencing Guidelines.
  • You are comfortable with domains outside your own sector.

Prepare for exam day

Check your ID and arrival rules for your testing method.

Before travelling to PSI

  • Bring two current IDs with your name and signature; one must have a photo.
  • Use your legal name on the application exactly as it appears on your ID.
  • Arrive up to 30 minutes early. You will not be admitted more than 15 minutes late.
  • Leave phones, watches, papers and bags in your vehicle.
Find a PSI test centre

CCEP Candidate Handbook

Advice from exam takers