ICG AC (CGCAT)

It is a multiple-choice examination. Expect scenario-based items that ask you to pick the best control, escalation or legal characterisation rather than recite definitions. Confirm the current number of items, delivery method and any proctoring requirements with the ICG, as the official body publishes the current specifications.

It is pitched at working professionals, not beginners. Candidates with two or more years in compliance, audit, legal or finance find the legal framework and controls domains familiar. The hardest part for most is precision: distinguishing similar legal concepts and choosing the single best answer when several options sound reasonable.

Start with domain 1 terminology, because later questions use those terms without explanation. Then take the international framework, since FCPA and UK Bribery Act distinctions recur throughout risk, third-party and enforcement questions. Leave programme design and investigations until you can apply the legal concepts, as those domains test judgement built on the earlier material.

Most candidates need several weeks of part-time study rather than a few days. Weight your time by domain weighting: the international framework and risk assessment domains carry the most marks. Read a short source, then immediately answer scenario questions on it; passive reading alone tends to produce shallow recall that fails on applied items.

Candidates lose marks by confusing FCPA books-and-records and internal-controls provisions with its anti-bribery provisions, by treating facilitation payments as lawful everywhere, and by missing that UK Bribery Act failure-to-prevent liability turns on adequate procedures. Others underweight red flags in financial data and answer investigations questions with what feels fair rather than the correct process.

It depends on the applicable law, which is exactly what the exam tests. Under the UK Bribery Act they are not permitted, and many multinationals prohibit them globally. Under the FCPA there is a narrow exception, but it is construed tightly and does not protect payments that are unlawful under local law. Learn the distinction rather than a blanket rule.

It tests process discipline: scoping, preserving evidence, privilege and legal advice, interviewing, documenting findings, and deciding on remediation and disclosure. Expect questions on when to escalate to the board or authorities and how whistleblower channels should be designed so reports are triaged and protected.

Retake rules, waiting periods, fees and validity periods are set by the ICG and can change. Check the ICG website for the current retake policy and recertification or continuing-education requirements before you book. Do not rely on figures quoted in forums or older study guides.

Read for the qualifier: 'best', 'first', 'most appropriate'. Prefer the answer that reflects a documented, risk-based process over one that depends on individual discretion. Eliminate options that are absolute ('always', 'never') unless the law genuinely is absolute, and be wary of answers that skip escalation steps.