Certified Compliance & Ethics Professional (CCEP) Exam Guide
Validates knowledge of running corporate compliance and ethics programs, including policies, oversight, training, monitoring, investigations and risk assessment.
CCEP tests whether you can run and oversee a compliance and ethics program, mostly through situational questions about the best next step. CCB publishes no study guide: compare your experience with the content outline, fill gaps through CEU events and reading, and learn the government guidance the outline is based on.
1Understand the exam
Syllabus
1Standards, policies and procedures15%
ADevelop, review, or update operational policies and procedures
BConsult with appropriate subject matter resources
CAssure the compliance and ethics strategic plan is in alignment with the overall business objectives
DMaintain a code of conduct that ensures organizational value statements reflect a commitment to a culture of integrity
EAssure policies address interactions with third parties and are reflected in contractual agreements
FDocument the compliance and ethics program
2Compliance and ethics program oversight and administration17%
AAdminister compliance program
BCollaborate internally and externally with others to institute best practices
CManage the aspects of the compliance oversight committee
DMaintain knowledge of relevant laws and regulations
ERecognize the need for external expertise
FVerify that the governing authority understands its responsibilities related to the compliance and ethics program and culture
Example scenario: The board asks for assurance that the compliance program works. What would you report, and how would you show its effectiveness?
3Communication, education and training17%
ACommunicate general and targeted compliance and ethics information throughout the organization
BEvaluate the effectiveness of compliance and ethics training
CAssure that employees are aware of their obligation to seek guidance and clarification and report misconduct
DAssure that employees are aware of their job-specific compliance and ethics responsibilities
EPromote a culture of compliance and ethics throughout the organization
FIdentify and train individuals that receive questions and concerns on how to identify potential compliance and ethics issues
GManage a compliance and ethics education program
4Monitoring, auditing, and internal reporting systems17%
AProtect anonymity and confidentiality within legal and practical limits for individuals reporting issues
BDevelop and publicize the reporting methods to employees, vendors, and third parties
CDevelop processes and/or monitor for organizational misconduct
DDevelop risk-based audit plans, conduct audits, and analyze results
EEnsure audit results from external entities are addressed
FEvaluate the effectiveness of the compliance and ethics program
GInclude compliance and ethics questions in exit interviews
Example scenario: Hotline reports from one region have dropped to zero after a reorganization. What would you check?
5Investigation and responses, discipline and incentives24%
AAssure that discipline is proportionate to violation, consistent across the organization, and documented
BEncourage incentives for compliant and ethical behavior, including metrics for performance evaluations
CAssure compliance with the organization's non-retaliation policy
DRespond to compliance and ethics concerns
EReport investigative findings through appropriate channels within the organization
FAssure management develops corrective action plans in response to noncompliance
GMonitor the effectiveness of corrective action plans
HConduct internal investigations and maintain records
IRespond to government inquiries and investigations
JCollaborate with decision makers regarding voluntary disclosure process
KCoordinate investigations to preserve applicable privileges
Example scenario: A manager is accused of retaliating against an employee who raised a concern. What are your first steps?
6Risk assessment10%
AAssure the risk assessment methodology is scalable for the organization
BAssure compliance and ethics risk assessments are conducted across the organization
CAssure management action plans are developed and executed based on risk assessment findings
DAssure due diligence is performed on third parties
Multiple choice. Choose the one correct answer to each question, which tests either recall of specific knowledge or applying it to a situation.
CertUp example
An employee reports a suspected conflict of interest to the compliance hotline and asks to stay anonymous. What should the compliance officer do first?
Ask the employee to identify themselves before taking action
Protect the reporter's anonymity and start an assessment of the concern
Forward the report to the employee's manager
Wait for a second report before acting
Show answer
B. Protect the reporter's anonymity and start an assessment of the concern. Reports are handled confidentially and assessed without exposing the reporter.
Eligibility and booking
Required before you can sit the exam
1 year of compliance work
Required
A full-time compliance role for at least a year, or 1,500 hours of direct compliance duties in the two years before you apply. Your duties must match the tasks in the content outline.
Standard route
1 year full time, or 1,500 hours within 2 years
Graduate of a CCB-accredited university compliance program
Experience waived for 24 months after completion
20 CCB CEUs, including 10 live
Required
Earned within the 12 months before your exam date, in CCB’s compliance subject areas, and approved by CCB before you apply. Webinars and events from other organizations can count.
Standard route
20 CEUs, 10 from live training
Graduate of a CCB-accredited university compliance program
Waived for 12 months after completion
CCB reviews each application before you can schedule. SCCE or HCCA membership is not required.
Submit your CEUs, then apply and pay online. After CCB approves the application, schedule with PSI or register for a paper exam at an SCCE or HCCA event. Computer results usually appear right after the exam; paper results take 4 to 6 weeks. If you fail twice within 180 days, wait 180 days before retesting.