CCB Cheat Sheet 2026

The 30 highest-yield CCB facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. In the context of CCB certification, what is the most important consideration when implementing regulatory reporting requirements? → Ensuring alignment with established standards, stakeholder needs, and best practices
2. A subcontractor on a government contract fails to comply with the required labor standards. Who bears primary compliance responsibility? → The prime contractor
3. How does compliance support business strategy? → It supports ethical and legal operations
4. A board is evaluating its own governance practices. What is this process called? → Board self-assessment or board evaluation
5. In U.S. compliance, which type of data is specifically protected under COPPA? → Personal information of children under 13
6. What is corporate governance? → A structure for managing and overseeing a company
7. Under the 'reasonable person' standard used in compliance, a policy should be written so that: → An average employee in the relevant role can understand and apply it
8. Under the EU AI Act, compliance AI systems classified as 'high-risk' are required to have which of the following? → Human oversight mechanisms and detailed documentation
9. A material weakness in internal control over financial reporting is best defined as: → A deficiency that could result in a material misstatement not being prevented or detected
10. Which of the following best describes a key competency required for financial crime prevention in CCB practice? → Strong analytical skills combined with effective communication and ethical judgment
11. Which of the following best describes the 'loan-back' money laundering technique? → Depositing illicit funds offshore then borrowing them back as a legitimate loan
12. Which RegTech capability is MOST useful for automating the mapping of internal controls to multiple regulatory frameworks simultaneously? → Regulatory change management software with cross-framework tagging
13. Country-by-Country Reporting (CbCR) under OECD BEPS Action 13 requires large multinationals to report which information to tax authorities? → Revenue, profit, taxes paid, and employee headcount broken down by jurisdiction
14. The purpose of an exit conference at the end of an internal audit is to: → Discuss findings and recommendations with management before the report is issued
15. A compliance officer discovers that a recently implemented policy conflicts with a newly enacted federal regulation. What is the FIRST step? → Conduct a gap analysis to document the conflict and its scope
16. In an information security compliance program, what is the role of a 'Business Continuity Plan' (BCP)? → To ensure critical business functions can continue during and after a disruption
17. Under the Corporate Transparency Act (CTA), which entity type is generally EXEMPT from beneficial ownership reporting requirements to FinCEN? → SEC-reporting public companies
18. Which contract management best practice helps prevent disputes about deliverable quality after the fact? → Defining clear, measurable acceptance criteria in the contract
19. A bank holding company subject to the Federal Reserve's capital adequacy rules must submit which quarterly report? → FR Y-9C
20. How can conflicts of interest be avoided in governance? → By implementing conflict of interest policies
21. In the context of CCB certification, what is the most important consideration when implementing compliance technology & regtech? → Ensuring alignment with established standards, stakeholder needs, and best practices
22. In the context of operational risk, what does a 'near miss' event represent? → An event that could have caused a loss but did not
23. Which of the following best describes 'contract novation'? → Transferring all rights and obligations from one party to a new third party
24. A whistleblower hotline report escalated to the board reveals an allegation against the CFO. What is the MOST appropriate governance response? → Refer the matter to independent board members and engage outside counsel
25. Which standard-setting body issues the International Standards for the Professional Practice of Internal Auditing? → IIA (Institute of Internal Auditors)
26. The CFTC requires swap dealers to submit Large Trader reports. What is the primary purpose of these position reports? → To monitor market concentration and detect manipulation
27. Under IRS regulations, a company that pays $600 or more in non-employee compensation must issue which information return by January 31? → Form 1099-NEC
28. What is the primary purpose of an I-9 form in U.S. HR compliance? → To verify an employee's identity and authorization to work in the United States
29. A 'mandatory' policy differs from a 'recommended' guideline primarily in that: → Mandatory policies require compliance; guidelines suggest best practices
30. The Volcker Rule requires banking entities to report quantitative trading metrics to regulators. Which agencies have joint enforcement authority over this rule? → Federal Reserve, OCC, FDIC, SEC, and CFTC jointly