Certified Regulatory Compliance Manager credential artwork

Certified Regulatory Compliance Manager (CRCM) Exam Guide

Validates knowledge of US banking compliance, including consumer protection rules, BSA/AML requirements and compliance management systems.

The CRCM exam tests whether you can apply US banking laws and run a compliance program, often by choosing the first or best action in a scenario. Review the outline against your own experience, study the rules you use least and practise judgment questions.

Understand the exam

Syllabus

Domain 1Core compliance37%
  1. Core Regulation 1Electronic Fund Transfers Act / Regulation E
  2. Core Regulation 2Truth in Savings Act / Regulation DD
  3. Core Regulation 3Equal Credit Opportunity Act / Regulation B
  4. Core Regulation 4Flood Insurance Laws and Regulations including Interagency Q&A
  5. Core Regulation 5Truth in Lending Act / Regulation Z
  6. Core Regulation 6Home Mortgage Disclosure Act / Regulation C
  7. Core Regulation 7Community Reinvestment Act, Implementing Regulations and Interagency Q&A
  8. Core Regulation 8Unfair, Deceptive, or (Abusive) Acts or Practices (UDAP/UDAAP)
  9. Core Regulation 9Bank Secrecy Act (BSA)

Example scenario: A customer reports an unauthorized debit card transaction 45 days after the statement date. Which Regulation E timing rules decide the bank's liability and next steps?

Domain 2Foundational compliance, primary rules23%
  1. 1Consumer Leasing Act / Regulation M
  2. 2ESIGN Act
  3. 3Expedited Funds Availability Act / Regulation CC
  4. 4Fair Credit Reporting Act / Regulations V and FF
  5. 5Fair Debt Collection Practices Act
  6. 6Fair Housing Act
  7. 7Federal Benefit Payment Garnishment Rule
  8. 8FFIEC Joint Overdraft Guidance
  9. 9FFIEC Social Media Guidance
  10. 10Information Security Provisions of GLBA / FFIEC Guidelines
  11. 11Loans to Executive Officers, Directors, and Principal Shareholders of Member Banks (Insider Lending) / Regulation O
  12. 12Interstate Branching and Banking Efficiency Act
  13. 13Military Lending Act
  14. 14Office of Foreign Asset Control Regulations
  15. 15Privacy of Consumer Financial Information / Regulation P
  16. 16Real Estate Settlement Procedures Act / Regulation X
  17. 17Servicemembers Civil Relief Act
  18. 18Telephone Consumer Protection Act (TCPA)
Domain 2Foundational compliance, ancillary rules14%
  1. 1Bank Bribery Act
  2. 2Bank Protection Act
  3. 3Branch Closing Policy Statements
  4. 4Children’s Online Privacy Protection Act
  5. 5Consumer Protection in Sales of Insurance Regulations
  6. 6Controlling the Assault of Non-Solicited Pornography and Marketing Act (CAN-SPAM Act)
  7. 7CRA Sunshine Act and Implementing Regulations
  8. 8Credit by Banks for the Purpose of Purchasing or Carrying Margin Stocks / Regulation U
  9. 9Debit Card Interchange Fees and Routing / Regulation II
  10. 10Exceptions from Broker-Dealer Requirements / Regulation R
  11. 11FDIC Deposit Insurance Regulations
  12. 12FFIEC Guidance on Authentication in an Internet Banking Environment
  13. 13Financial Records Reimbursement / Regulation S
  14. 14FIRREA Civil Money Penalties
  15. 15Foreign Corrupt Practices Act
  16. 16General Data Protection Regulation (GDPR)
  17. 17Homeowners Protection Act
  18. 18IRS Information Reporting and Withholding Regulations
  19. 19Privacy of Protected Health Information (HIPAA / HITECH Act)
  20. 20Real Estate Appraisal Regulations
  21. 21Reserve Requirements / Regulation D
  22. 22Retail Non-deposit Investment Products Guidance
  23. 23Right to Financial Privacy Act
  24. 24Secure and Fair Enforcement for Mortgage Licensing Act (SAFE Act) / Regulation G
  25. 25Telemarketing Sales Rule (TSR)
  26. 26Title III of the Americans with Disabilities Act
  27. 27Transactions with Affiliates / Regulation W
  28. 28Unlawful Internet Gambling Enforcement Act / Regulation GG
Domain 3Compliance management system (CMS)26%
  1. 1.1Governance and oversight: reporting to board and senior management
  2. 1.2Governance and oversight: risk assessments
  3. 2.1Compliance program components: policies and procedures
  4. 2.2Compliance program components: training
  5. 2.3Compliance program components: complaint management
  6. 2.4Compliance program components: third-party risk management
  7. 2.5Compliance program components: compliance monitoring
  8. 3.1Managing regulatory expectations: issue management
  9. 3.2Managing regulatory expectations: regulatory reporting
  10. 3.3Managing regulatory expectations: regulatory change management
  11. 3.4Managing regulatory expectations: examination management

Example scenario: A new rule takes effect in six months and affects three business lines. What should the compliance manager do first, and how would you show the board the bank is on track?

CRCM Exam Content Outline · Effective June 2026

Format

Questions
200
Duration
4h
Passing score
500 / 800
Delivery
Test centre or online
Languages
English

Question types

Multiple choice. Choose the single best answer from four options.

CertUp example

A customer disputes a debit card charge and tells the bank about it by phone. What should the bank do first?

  1. Wait for a written complaint before starting
  2. Treat the oral notice as a valid error notice and start the investigation
  3. Refer the customer to the card network
  4. Close the account until the dispute is settled
Show answer

B. Under Regulation E a bank cannot require written confirmation before it begins investigating, so an oral notice starts the process.

Eligibility and booking

Experience required before you apply

3 to 6 years of US compliance experience

Required

Your work must involve managing compliance risk programs or testing compliance controls, such as risk assessments, compliance audits, program management or policy oversight. Operational roles that carry out compliance controls do not count.

3 years + 2 training optionsAll within the last 5 years
6 yearsWithin the last 10 years, with 3 in the last 5

Code of Ethics and disclosure

Required

Sign the ABA Professional Certifications Code of Ethics and disclose any convictions or pleas involving fraud, embezzlement or securities violations.

Training options for the 3-year route: ABA Compliance School Foundational or Intermediate, the three Compliance Professionals Certificates, CRCM Exam Online Prep, an ABA In-Bank Compliance School, or 30 credits of compliance training tied to the exam outline.

Apply and pay through ABA's Certification Manager before the deadline for your window. ABA approves or denies applications within about two weeks. Once approved, book a test site or online appointment within your window.

Make a study plan

Rate yourself against each regulation in the outline before you start studying.

Most candidates spend 60–120 hours. Plan for the low end if you manage compliance across most of the regulations in the outline; plan for the high end if several of them are new to you.

12 weeksto be ready
  1. 1Understand the examRead the syllabus and format, check you’re eligible and pick a target date.5 h
  2. 3Learn the core conceptsWork through one main course or book, topic by topic.53 h
  3. 4Practice with mock examsTake timed practice tests and review every mistake.27 h
  4. 5Prepare for exam dayBook the exam and check the ID and delivery rules.5 h

Learn the core concepts

Use ABA's online prep course for structure and the Reference Guide for technical detail.

See all 3 CRCM courses →

Practice with mock exams

Start with ABA's free sample questions, then use the practice exams in the Online Prep course.

See all 2 CRCM practice tests →

Are you ready?

  • You can explain why one answer is the first or best step when several are technically correct
  • You know the core regulations' timing rules and thresholds without looking them up
  • You can finish 200 questions in four hours with time to review flagged items

Prepare for exam day

Use the checklist for your delivery route.

Before travelling to Meazure Learning

  • Bring one valid, unexpired government photo ID and a copy of your emailed Confirmation Notice
  • Allow the full four hours for all 200 questions in one sitting
  • Most test sites show a pass or fail result at the end; the official score arrives by email within six weeks after the window closes
  • Rescheduling within your window costs $50 after the application deadline; changes two business days or less before the exam forfeit the fee
  • Retakes need a window that starts at least three months after your previous one
  • You must pass within three years of your first attempt or reapply with the full fee

CRCM exam application

Advice from exam takers