CCBCO study guide
CCBCO · Work through your exam, one topic at a time.
The Certified Community Bank Compliance Officer (CCBCO) is a professional credential for compliance staff at community banks - people who often carry the entire compliance function rather than one slice of it. It suits compliance officers, compliance analysts, internal auditors with a compliance portfolio, and operations or lending managers who own regulatory responsibilities alongside their line duties. The CCBCO study guide has 8 sections and about 3,167 words.
01Compliance Program Management and Governance: Board Oversight and the Three Lines
This domain tests how a community bank builds a compliance program that is board-approved, risk-based, and operating day to day. Expect questions on governance, the compliance officer’s authority, the three lines of defense, training, monitoring, audit, issue escalation, and board reporting.
410 words, about 2 min02Deposit Regulations and Consumer Protection: Reg DD, Reg E, Reg CC, and FDIC Insurance
This domain tests the rules that govern deposit accounts and consumer protections. Expect questions on Truth in Savings disclosures, electronic fund transfers and error resolution, funds availability, overdraft consent, deposit insurance, and unfair or deceptive acts or practices.
436 words, about 2 min03Lending Regulations and Fair Lending: ECOA, TILA, HMDA, RESPA, and Flood
This domain tests consumer and mortgage lending rules plus fair lending risk. Expect questions on adverse action, disclosures, high-cost mortgage protections, HMDA data, RESPA prohibitions, flood insurance, and disparate treatment or impact.
411 words, about 2 min04Bank Secrecy Act and Anti-Money Laundering: CIP, CDD, SARs, CTRs, and OFAC
This domain tests the Bank Secrecy Act and anti-money-laundering program. Expect questions on risk assessment, customer identification, customer due diligence, beneficial ownership, currency transaction reports, suspicious activity reports, recordkeeping, information sharing, and OFAC sanctions.
425 words, about 2 min05Privacy, Information Security, and Third-Party Risk: GLBA, Safeguards, and Vendor Oversight
This domain tests consumer privacy, information security, and third-party risk management. Expect questions on GLBA privacy notices, opt-out rights, safeguards, data disposal, identity theft red flags, incident response, and vendor contract controls.
370 words, about 2 min06Community Reinvestment Act and Fair Housing: Positive Obligations and Prohibited Discrimination
This domain tests the Community Reinvestment Act and fair housing rules. Expect questions on assessment areas, CRA tests, ratings, community development, HMDA context, Fair Housing Act prohibitions, reasonable accommodations, advertising, and disparate impact.
381 words, about 2 min07Risk Assessment, Monitoring, and Audit: Inherent Risk, Controls, and Independent Testing
This domain tests how a bank identifies compliance risk, designs monitoring, and uses audit for independent assurance. Expect questions on inherent and residual risk, control design, testing, sampling, issue management, root cause, and reporting.
368 words, about 2 min08Regulatory Change Management and Ethics: Implementation Discipline and Professional Judgment
This domain tests how a bank tracks regulatory changes, assesses impact, implements changes, and validates compliance. It also tests ethical judgment, conflicts of interest, confidentiality, and escalation.
366 words, about 2 min