CHC (CCB) study plan
CHC · Give each week a clear focus.
8 weeks · About 6 hours per week
Regulatory and Legal Requirements (e.g., fraud and abuse, privacy, coding/billing)
Map each major fraud-and-abuse statute (False Claims Act, Anti-Kickback Statute, Stark Law, Civil Monetary Penalties Law) to its prohibited conduct and penalty structure
Draft a one-page comparison of the HIPAA Privacy Rule, Security Rule, and Breach Notification Rule covering who they protect and what they require
Distinguish the roles of OIG, DOJ, OCR, and CMS in enforcement by writing a short summary of each agency's authority
Explain how the seven elements of an effective compliance program connect to the Federal Sentencing Guidelines
Your checkpoint
A 2-page regulatory reference sheet covering fraud-and-abuse statutes, privacy rules, and enforcement agencies, self-quizzed to 80% accuracy
Regulatory and Legal Requirements (e.g., fraud and abuse, privacy, coding/billing) & Standards, Policies, and Procedures
Differentiate coding and billing risk areas (upcoding, unbundling, medical necessity, modifier misuse) with an original example of each
Outline the structure of a compliance program charter, code of conduct, and written policies using the seven program elements as an organizing frame
Sequence the steps for developing, approving, and revising a policy from drafting through version control
Identify which regulatory changes typically trigger a policy update and describe a review cadence
Your checkpoint
A draft policy outline for one real or hypothetical policy topic, including purpose, scope, responsibilities, and review cycle
Monitoring, Auditing, and Internal Review & Risk Assessment and Management
Design an internal audit work plan that specifies scope, sampling approach, frequency, and assigned ownership
Build a risk assessment matrix that scores likelihood and impact across at least six compliance risk areas
Draft audit workpaper templates that capture testing objective, sample selection, findings, and corrective action
Write a corrective action plan template that assigns owners and due dates and defines verification of closure
Your checkpoint
A completed risk assessment matrix for a sample organization plus a one-page audit plan tied to the top three risks
Monitoring, Auditing, and Internal Review & Risk Assessment and Management
Perform a mock audit of a billing or documentation sample and record findings against defined criteria
Prioritize identified risks by residual risk score and justify each ranking in writing
Compare monitoring activities (ongoing) with auditing activities (periodic) and assign each to the right owner
Draft a findings report that separates observations, root cause, and recommendations
Your checkpoint
A mock audit report with at least three findings, root causes, and prioritized recommendations
Enforcement and Investigation & Compliance Program Administration
Describe the intake, triage, investigation, and resolution stages of a compliance investigation
Outline how to preserve confidentiality, avoid conflicts of interest, and document an investigation file
Draft interview questions for a witness and a subject in a hypothetical billing-integrity matter
Map the compliance committee's structure, quorum, reporting lines, and escalation path to the governing body
Explain how to apply a disciplinary and sanctions matrix consistently across roles
Your checkpoint
An investigation protocol flowchart plus a sanctions matrix table covering at least four violation categories
Education and Training & Communication and Reporting
Design a role-based training curriculum that sets distinct objectives for staff, managers, and leadership
Write measurable learning objectives and select an assessment method for each training module
Draft a communication plan that specifies audience, channel, frequency, and message for compliance updates
Create a reporting-mechanism description covering anonymity, non-retaliation, and hotline routing
Compose a sample compliance newsletter item and a leadership talking-points sheet
Your checkpoint
A training and communication plan for one year, including a module list, objectives, delivery method, and completion-tracking approach
Compliance Program Administration & Standards, Policies, and Procedures
Assemble the components of an annual compliance work plan and assign quarter-by-quarter activities
Draft board or committee meeting minutes that document decisions, risk discussions, and follow-ups
Reconcile program documentation (charter, policies, training records, audit reports) against the seven program elements to find gaps
Write a gap-closure action list with owners and target dates
Your checkpoint
A seven-element gap analysis with a prioritized closure plan
Regulatory and Legal Requirements (e.g., fraud and abuse, privacy, coding/billing) & Monitoring, Auditing, and Internal Review & Enforcement and Investigation
Complete timed practice sets weighted toward the heaviest domains and log every missed item by domain
Re-teach the three weakest concepts by writing plain-language explanations without notes
Summarize the fraud-and-abuse, privacy, and investigation content into a single condensed review sheet
Simulate exam-day pacing with a full-length timed practice session and record per-domain accuracy
Your checkpoint
A final one-page condensed review sheet plus a scored practice log showing at least 80% overall accuracy
Milestones
Week 2: Score at least 75% on a self-made quiz covering fraud-and-abuse statutes, privacy rules, and the seven program elements
Week 4: Complete the risk assessment matrix and mock audit report, with each finding traceable to a documented risk
Week 6: Finalize the training and communication plan and demonstrate the hotline and non-retaliation reporting path end to end
Week 8: Achieve at least 80% overall on a timed full-length practice session, with no single domain below 70%