What is CCEP and which variant should I take?
CCEP is the Certified Compliance and Ethics Professional credential from the Compliance Certification Board, the certifying body associated with the compliance and ethics professional associations. It is the general-industry credential in a family that also includes sector-specific alternatives — healthcare compliance, healthcare privacy, healthcare research compliance and an international variant among them — and choosing the right one matters, because a healthcare compliance officer sitting the general examination will meet less of the regulatory content that dominates their work. All are structured around the elements of an effective compliance and ethics programme: written standards and policies, programme oversight and governance, education and training, effective lines of communication including reporting mechanisms, monitoring and auditing, enforcement and discipline, and response and prevention. To apply, candidates need documented compliance work experience and a specified quantity of recent continuing education units recognised by the board. The examination covers those programme elements alongside the substantive legal and regulatory risk areas compliance functions manage. Certification is renewed on a two-year cycle through continuing education units.
- CCEP is the general-industry credential in a family that includes healthcare, privacy, research and international variants.
- It is structured around the recognised elements of an effective compliance and ethics programme.
- Applicants need documented compliance experience plus recent continuing education units before they may test.
- Renewal runs on a two-year continuing education cycle, shorter than most professional credentials.
CCEP at a glance
| Cost | Application, examination and renewal fees are set by the certification board and priced differently for association members — see its current fee schedule |
| Duration | A single computer-based examination, once the experience and continuing education requirements are documented |
| Issued by | Compliance Certification Board (CCB) |
| Format | Computer-based multiple-choice examination including scored and unscored pretest items |
| Expiry | 2-year renewal cycle through continuing education units |
| Who needs it | Compliance officers, ethics and compliance managers, programme analysts and investigators across general industry |
| Application gate | Documented compliance work experience plus a specified quantity of recent continuing education units before you may sit |
| Sector variants | Healthcare compliance, healthcare privacy, healthcare research compliance and international variants exist from the same board |
Sources: Compliance Certification Board — certifications · Compliance Certification Board — certification maintenance. Reviewed August 2026 by the GlobalCybers team.
The Programme Elements and Choosing Your Variant
Structured around what a programme must contain
The credential is organised around the recognised elements of an effective compliance and ethics programme: written standards, programme oversight, training and education, communication and reporting channels, monitoring and auditing, enforcement and discipline, and response and prevention. Those elements are not academic — they are the framework regulators and prosecutors use when judging whether an organisation's programme was real or decorative, which is why the credential is built on them rather than on a list of laws.
Which credential fits which role
Where compliance certification matters
Compliance officers are a distinct occupation in federal wage statistics, spanning everything from regulatory inspection to corporate ethics programmes. The credential's traction comes from the enforcement environment: organisations under a settlement, monitorship or heightened scrutiny are expected to demonstrate a properly resourced programme, and credentialed staff are part of how that is evidenced.
GlobalCybers reimburses certification fees after a successful permanent placement through our network.
What CCEP Covers, Programme Design to Enforcement
Standards & Policy
Code of conduct and policy design that people can actually follow, ownership and review cycles, and the difference between a policy library and a governing framework.
Governance
Reporting lines, board and audit committee engagement, the compliance officer's independence and authority, and resourcing the function adequately.
Risk Assessment
Identifying and prioritising compliance risk across the organisation and using it to drive the work plan rather than reacting to whatever surfaced last.
Reporting Channels
Hotline design, anonymity, triage, non-retaliation protection and the follow-through that determines whether anyone uses the channel a second time.
Investigations
Scoping, privilege considerations, interviewing, documentation, and reaching conclusions that withstand later review by a regulator.
Consistent Discipline
Applying consequences consistently regardless of seniority — the element that most visibly determines whether staff believe the programme is genuine.
How do you get CCEP certified, step by step?
Pick the variant matching your sector
The board offers general-industry, healthcare, privacy, research and international variants. A healthcare compliance officer taking the general examination will find much of their daily regulatory subject matter absent. Choose based on where you work and where you intend to stay rather than on which credential is best known.
Meet the continuing education requirement before applying
The application requires a specified quantity of recent continuing education units recognised by the board, in addition to work experience. This catches people who apply expecting the education to follow the examination. Conferences and association education are the usual route, and the requirement has a recency window.
Study the programme elements as an operating framework
The examination is built on the elements of an effective programme, and questions are about how they work in practice — what makes a hotline effective, when a risk assessment should drive the plan, how discipline consistency is judged. Learn them as a working framework rather than a list to recite.
Sit the examination and maintain on the two-year cycle
Renewal runs on a two-year continuing education cycle, which is short compared with many credentials. Compliance professionals attending association conferences and sector education typically satisfy it without extra effort, but the units must be recorded and submitted rather than assumed.
No Law Names the Credential — Enforcement Names the Programme
No statute requires a compliance officer to be certified. What regulators and prosecutors do assess, when deciding how to treat an organisation that has failed, is whether its compliance programme was genuinely effective — adequately resourced, independent, informed by risk assessment, and taken seriously by management. Certification is one of the ways organisations evidence competence in that assessment, particularly where a settlement or monitorship has put the programme itself under examination.
CCEP, Frequently Asked Questions
Compliance certified? Programmes are being built.
Organisations across regulated industries are resourcing compliance functions properly. Set your sector and let them find you.
Join the Network →More about CCEP
Your career research journey
Do your homework, then let the network do the rest.Get the job, then keep rising
FreeSet your intent, matching jobs come to you. No applying.
A roadmap to your next licence tier and higher pay band.
Once placed, we cover all certification, licence & career-guide fees.
Hiring trade workers?
Get a verified shortlist of 3–5 qualified candidates in 48 hours
GlobalCybers verifies active state licenses, trade certifications, Intent and right-to-work status before any candidate reaches your portal. Flat $2,999/mo RPO (Recruitment Process Outsourcing), up to 3 concurrent roles, or a free trial (pay on hire). 90-day written guarantee.