CCT Cheat Sheet 2026

The 30 highest-yield CCT facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. How does transparency affect corporate governance? → Promotes trust and informed decisions
2. Which standard outlines best practices for internal controls? → COSO framework
3. How does compliance affect organizational reputation? → It builds trust and reduces legal risks
4. What is the role of a compliance officer? → To monitor policy violations and ensure legal compliance
5. Why is whistleblower protection essential in corporate governance? → It allows anonymous reporting without fear
6. Why is timely compliance reporting important? → To meet regulatory deadlines and avoid fines
7. What is the primary purpose of regulatory compliance in healthcare settings? → To ensure laws and standards are followed for patient safety and data security
8. What does an effective compliance training program include? → Clear guidelines and real-world examples
9. Which agency enforces workplace safety regulations? → OSHA
10. Which department is primarily responsible for implementing internal controls? → Management
11. How can technology improve compliance monitoring? → By automating monitoring and reporting processes
12. Which of the following is a detective control? → Surveillance camera footage review
13. Which element of the Seven Elements of Compliance specifically addresses employee education and training? → Training and education
14. A compliance officer is reviewing documentation for a potential billing error. Which document is MOST important to review first? → The medical record supporting the claim
15. What does 'role-specific' compliance training mean in practice? → Training content is tailored to the compliance risks specific to each job function
16. Which of the following is a key element of ethical corporate governance? → Accountability and transparency
17. Under the False Claims Act, what is 'qui tam' litigation? → A whistleblower lawsuit filed by a private individual on behalf of the government
18. What is the primary purpose of ICD-10-CM codes in medical billing? → To identify the diagnoses, symptoms, and conditions that justify services provided
19. How does management monitor internal controls? → Through regular audits and performance reviews
20. Which of the following is NOT a patient right granted under the HIPAA Privacy Rule? → The right to demand deletion of their entire medical record for any reason.
21. What is the benefit of having a whistleblower policy? → To encourage reporting unethical behavior without fear
22. What is 'upcoding' in medical billing? → Billing for a more complex or expensive service than was actually provided
23. Under an effective CCT compliance program, how often should general compliance training be provided to all employees? → At least annually
24. When an organization updates its compliance policies due to a regulatory change, training on the new policy should occur: → Within a reasonable timeframe of the policy update
25. A compliance officer wants to verify that training is effective. Which method BEST evaluates knowledge retention? → Post-training knowledge assessments or tests
26. Which of the following scenarios would most likely trigger a *mandatory* exclusion from federal healthcare programs by the OIG? → A felony conviction for healthcare fraud related to Medicare.
27. A compliance training program that includes real-world case studies and role-playing scenarios is primarily designed to achieve what outcome? → Improve employee engagement and retention of compliance concepts
28. Which of the following is an example of a HIPAA Security Rule 'technical safeguard'? → Using encryption to render electronic protected health information (ePHI) unreadable.
29. Why are audits important in compliance programs? → They verify adherence and detect non-compliance
30. What is a conflict of interest in corporate ethics? → Allowing personal interests to influence actions