BCCP study plan
BCCP · Give each week a clear focus.
8 weeks · About 6 hours per week
Governance, Risk, and Compliance Program Structure
Map the full BCCP exam blueprint and allocate study hours across all eight domains by weight.
Define the core elements of a compliance program structure and explain how each element supports the others.
Draft a one-page outline of a governance framework covering board oversight, senior management accountability, and the three lines of defense model.
Identify the roles and responsibilities of a compliance officer, compliance committee, and business unit owners.
Your checkpoint
A one-page compliance program framework diagram with labeled governance roles and a written justification of each reporting line.
Governance, Risk, and Compliance Program Structure & Risk Assessment and Compliance Risk Management
Connect risk appetite statements to compliance program design and escalation thresholds.
Build a risk register from a hypothetical scenario with at least ten risks scored on likelihood and impact.
Differentiate inherent risk, residual risk, and control effectiveness in written analysis.
Explain how risk assessment outputs drive policy priorities and monitoring frequency.
Your checkpoint
A completed ten-item risk register with likelihood and impact scores, residual risk ratings, and a short memo recommending the top three program priorities.
Regulatory Environment and Legal Foundations
Summarize the major regulatory regimes relevant to compliance professionals and the conduct they prohibit.
Explain the elements of an effective compliance program as described in commonly cited regulatory guidance.
Trace how a regulatory requirement becomes an internal control through a written mapping exercise.
Describe the roles of regulators, self-regulatory bodies, and enforcement agencies in the compliance landscape.
Your checkpoint
A regulation-to-control mapping table linking five regulatory requirements to specific internal controls and the evidence each control produces.
Risk Assessment and Compliance Risk Management & Policies, Procedures, and Internal Controls
Draft a compliance policy from a risk assessment finding, including scope, requirements, and exceptions.
Design a control set that addresses a defined risk with preventive, detective, and corrective layers.
Write procedures that translate policy requirements into step-by-step operational tasks.
Evaluate a sample control design for gaps in ownership, evidence, and escalation.
Your checkpoint
A complete policy and procedure package for one risk area, including a control matrix with owners, frequency, and evidence requirements.
Compliance Monitoring, Auditing, and Testing
Distinguish monitoring, auditing, and testing by purpose, independence, and output.
Build a risk-based monitoring plan with sampling rationale and testing frequency.
Write test scripts that produce pass or fail evidence for three separate controls.
Interpret testing results and draft findings with severity ratings and remediation recommendations.
Your checkpoint
A monitoring and testing plan with three executable test scripts and a sample findings report containing at least three rated issues.
Training and Communication & Investigations, Enforcement, and Corrective Action
Design a role-based training curriculum with completion targets and content priorities.
Draft a communications plan covering tone at the top, policy rollouts, and escalation channels.
Outline the stages of an investigation from intake through documentation and reporting.
Explain how corrective action plans are tracked, validated, and closed.
Your checkpoint
A combined training and communications calendar for one year plus an investigation and corrective action workflow diagram with defined decision points.
Ethics and Professional Conduct & Regulatory Environment and Legal Foundations
Apply an ethical decision-making framework to three ambiguous compliance scenarios.
Analyze conflicts of interest, confidentiality obligations, and reporting duties in professional conduct.
Revisit regulatory foundations and close gaps identified in the week three mapping exercise.
Practice articulating ethical reasoning in writing with defensible conclusions.
Your checkpoint
Three written scenario analyses applying a stated ethical framework, each concluding with a recommended action and its rationale.
Governance, Risk, and Compliance Program Structure & Risk Assessment and Compliance Risk Management & Compliance Monitoring, Auditing, and Testing & Investigations, Enforcement, and Corrective Action
Synthesize all eight domains into a single integrated program narrative.
Complete timed practice questions across every domain and log error patterns by topic.
Review weak areas flagged during practice and rewrite condensed summary notes.
Rehearse explaining program design, risk linkage, and corrective action flow aloud.
Your checkpoint
A final integrated study summary of no more than five pages plus a scored practice set with an error log and remediation notes.
Milestones
Week 2: Explain the three lines of defense and produce a scored risk register without notes.
Week 4: Produce a policy, procedure, and control matrix package that a reviewer could audit for completeness.
Week 6: Describe the full investigation and corrective action lifecycle from memory in under ten minutes.
Week 8: Score at or above target on a full-length timed practice set and demonstrate closed gaps on all logged errors.