CCBCO study plan

Map the full lending lifecycle from application through servicing and identify which regulation governs each stage (ECOA/Reg B, TILA/Reg Z, RESPA/Reg X, HMDA/Reg C, TRID, SAFE Act).

Distinguish disparate treatment from disparate impact and list the specific evidence regulators examine for each theory of discrimination.

Explain the purpose and required elements of a fair lending risk assessment, including the products, geographies, and borrower segments that raise risk.

Compare the timing and content requirements for Loan Estimate and Closing Disclosure delivery, including valid changed-circumstance triggers.

Apply adverse action notice requirements to three written scenarios and identify which notices were deficient and why.

Explain how Regulation B special-purpose credit programs and affirmative action provisions differ from prohibited preferential treatment.

Describe the role of the loan officer compensation rule in steering and fair lending risk.

Outline how HMDA data is collected, reported, and used in fair lending analysis, including the fields most often cited in error.

Map the deposit product lifecycle to the regulations that govern it: Truth in Savings/Reg DD, EFT Act/Reg E, Expedited Funds Availability/Reg CC, and reserve requirements/Reg D.

Explain error resolution timelines and provisional credit obligations under Regulation E with a worked timeline.

Distinguish the disclosure triggers for Regulation DD account-opening and change-in-terms notices.

Identify unfair, deceptive, or abusive acts or practices risk in overdraft, fee, and account-closing practices.

Explain the five pillars of an AML program and how each is documented for examination.

Differentiate suspicious activity report filing thresholds, timing, and confidentiality obligations for banks versus other covered institutions.

Describe customer due diligence and beneficial ownership requirements for legal entity customers, including certification and verification steps.

Outline OFAC screening obligations and the difference between an OFAC match and a SAR-triggering suspicious activity.

Draft the structure of a compliance program using the three-lines-of-defense model and assign responsibilities for each line.

Explain how a compliance risk assessment is scoped, scored, and refreshed, including the role of inherent risk, controls, and residual risk.

Identify the elements a compliance monitoring and testing plan must contain to satisfy examiner expectations.

Describe how internal audit independence and reporting lines affect the credibility of compliance testing.

Summarize the obligations under the Gramm-Leach-Bliley Act privacy rule and the safeguards rule, including notice and opt-out triggers.

Explain how third-party risk management applies to vendor due diligence, contract clauses, ongoing monitoring, and termination.

Describe how Community Reinvestment Act performance is evaluated across assessment areas, including the lending, investment, and service tests.

Distinguish Fair Housing Act prohibited practices from CRA obligations and identify where the two overlap in marketing and lending.

Describe a regulatory change management process from identification through impact assessment, implementation, and validation.

Explain the ethical obligations that attach to compliance professionals, including conflicts of interest, escalation, and whistleblower protections.

Design a monitoring calendar that ties testing frequency to risk rating and prior findings.

Explain how root cause analysis is used to convert findings into sustainable corrective action.

Complete a timed full-length practice set and score each domain separately to identify remaining gaps.

Re-review the three weakest domains using condensed notes and re-test those domains only.

Write out the key thresholds, timelines, and notice requirements most often tested across all domains from memory.

Simulate explaining a compliance finding to a business line owner in plain language, as the exam may test judgment and communication.