BR-ANAC-PLH
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The BR-ANAC-PLH credential is a professional certification for practitioners working in anti-corruption, compliance, and legal-hygiene roles in Brazil. Candidates typically come from compliance departments, legal teams, internal audit, risk, procurement, and public-sector integrity offices, and the exam is designed to confirm that they can reason about program design and day-to-day case handling rather than just recite rules. The blueprint spans nine domains weighted from 8% to 15%, covering the regulatory framework and governance, compliance program design and risk assessment, policies and internal controls, training and communication, monitoring and testing, reporting and investigation, enforcement and sanctions, ethics and professional conduct, and data, records, and confidentiality. Preparation should follow the weights: build a solid base in the two 15% domains first, then move through the mid-weight operational domains, and finish with the 8% domains. Working through realistic scenarios, drafting control descriptions, and practicing judgment calls on investigation and sanction decisions tend to be more useful than memorizing statutes. The administering body publishes current details on format, scheduling, fees, and scoring on its official site, so confirm those figures there before you register.
What you'll study
About BR-ANAC-PLH preparation
What is the exam format?
The exam is delivered as multiple-choice questions, and the profile lists that as the only format. Expect scenario-based stems that ask you to choose the best course of action, not just definitions. The official body publishes the current question count, time limit, and delivery method on its site, so check there before scheduling.
How difficult is it?
Difficulty is moderate for candidates with compliance or audit experience and harder for those coming from a purely legal or purely operational background. The challenge is applying concepts to messy scenarios where more than one answer looks defensible. The 15% domains reward depth, while the 8% domains reward breadth. Expect to need several weeks of structured study.
Can I retake it if I fail?
Retake rules, waiting periods, and any fees are set by the administering body and are not fixed in the exam profile. Check the official site for the current retake policy before you sit the exam. Practically, treat a first attempt as diagnostic: note which domains you missed and rebuild those areas before rebooking.
How long does it take to prepare?
Most working professionals need six to ten weeks of part-time study. Start with the two 15% domains, since they carry the most weight, then move through the 12% operational domains, and finish with the 8% domains. Reserve the final two weeks for scenario practice and reviewing your weakest areas rather than rereading notes.
What study order do you recommend?
Begin with regulatory framework and governance and program design and risk assessment. Then take policies and controls, monitoring and auditing, and reporting and investigation together, because they reinforce each other. Add enforcement and sanctions next. Finish with training and communication, ethics, and data and confidentiality, which are shorter and easier to consolidate late.
Where do candidates most often lose points?
Common failure modes include confusing monitoring with auditing, jumping to investigation before escalation, recommending sanctions without documented findings, and ignoring confidentiality and records obligations during case handling. Another frequent error is answering what the organization should ideally do rather than what the framework requires at that stage. Read each stem for the decision point being tested.
Do I need to memorize Brazilian statutes?
You need working familiarity with the regulatory landscape and how governance structures interact with it, not verbatim recall. Questions test application: which control fits a risk, when to escalate, how to document a finding. If a question hinges on a specific legal threshold you cannot recall, use the answer choices to identify the most defensible process-based option.
Is the credential affiliated with a government body?
This page is independent study material and is not affiliated with, endorsed by, or sponsored by the administering organization. Always treat the official site as the authoritative source for eligibility, registration, fees, scoring, and any policy changes. Use third-party guides only as supplements to the official blueprint.
How should I handle questions about data and confidentiality?
Treat them as process questions. Identify who may access the information, what the lawful basis is, how long it is retained, and how it is protected during an investigation. Answers that expand access casually or skip documentation are usually wrong. The 8% weight means fewer questions, so precision matters more than volume here.
What should I bring on exam day?
Check the official site for identification and testing-environment requirements, since these vary by delivery method and location. Plan to arrive early, and confirm whether any materials are permitted. The night before, review your weakest domain summary rather than attempting new material, and get a full night's sleep.