CCO logo
Focused certification exam prep
Start practice

CCO Cheat Sheet 2026: One-Page Review of Must-Know Facts

TL;DR
  • The CCO exam covers four domains: Regulatory Basics, Deposit/Account Compliance, Lending Compliance, and BSA/AML.
  • Each domain maps to a distinct job function - know which regulations belong where before test day.
  • Lending Compliance and BSA/AML tend to carry the densest rule sets and deserve the most review time.
  • Registration mechanics and fees should be confirmed early so scheduling doesn't derail your prep timeline.

How to Use This Cheat Sheet

This page is designed to be the last thing you skim before you sit down for the Credit Union Compliance Officer exam - not the first thing you study. If you're just starting your prep, back up to the CCO Study Guide 2026: How to Pass on Your First Attempt for a full roadmap, or review the CCO Exam Domains 2026: Complete Guide to All 4 Content Areas for a deeper breakdown of what each domain actually tests.

Everything below is organized by the exam's four official domains, followed by exam-day mechanics and registration facts. Read it once during your final review week, then again the morning of the test. It won't teach you compliance from scratch, but it will remind you exactly which term, rule, or process tends to trip candidates up in each content area.

Quick Orientation: The CCO exam tests four domains - Credit Union Regulatory Basics, Deposit and Account Compliance, Lending Compliance, and BSA/AML and Operational Compliance. Everything you'll be asked ties back to one of these four buckets.

Domain 1: Credit Union Regulatory Basics

This domain is the foundation the other three sit on. Questions here focus less on calculation and more on structure: how credit unions are chartered, supervised, and held accountable, and how that differs from a bank's regulatory environment.

Credit Union Regulatory Basics

Candidates must understand the regulatory bodies, charter types, and governance structures unique to credit unions, plus the baseline compliance framework every other domain builds on.

  • Federal vs. state charter distinctions and the supervisory bodies tied to each
  • The role of examiners and how examination cycles influence internal compliance programs
  • Board and management responsibilities for maintaining a compliance management system
  • Core vocabulary: member vs. customer, field of membership, not-for-profit cooperative structure

Expect questions that test whether you can identify which entity has jurisdiction in a given scenario, and whether you understand why credit union compliance obligations sometimes diverge from bank compliance obligations even when the underlying consumer protection rule is identical.

Domain 2: Deposit and Account Compliance

This domain shifts into member-facing account operations - the rules governing how accounts are opened, disclosed, and serviced. It's heavily scenario-based, so memorizing definitions alone won't be enough.

Deposit and Account Compliance

Candidates need working fluency in disclosure timing, fee transparency, and account-opening procedures, plus the ability to spot compliance gaps in a described process.

  • Truth in Savings-style disclosure requirements and timing rules
  • Funds availability expectations and hold procedures
  • Overdraft and fee disclosure practices
  • Account ownership types and their compliance implications (joint, POD, trust)

Key Takeaway

When a Domain 2 question describes a member complaint or a teller error, look for the disclosure or timing rule that was skipped - that's almost always the tested concept.

Domain 3: Lending Compliance

Lending Compliance is typically the most rule-dense domain on the exam. It spans consumer lending, real estate-secured lending, and the fair lending principles that cut across both. Candidates who underestimate this domain tend to run out of prep time before covering it fully - a pattern discussed in detail in How Hard Is the CCO Exam? Complete Difficulty Guide 2026.

Lending Compliance

Candidates must be able to apply disclosure and fair lending rules to specific loan scenarios, not just recite requirements in isolation.

  • Adverse action notice content and timing requirements
  • Fair lending principles and prohibited basis factors
  • Disclosure sequencing for consumer and real estate-secured loans
  • Loan file documentation standards examiners look for during review

A common exam pattern here presents a loan file or denial scenario and asks which requirement was missed or violated. Practicing with scenario-based questions - rather than flashcards alone - is the most efficient way to prepare for this domain.

Domain 4: BSA/AML and Operational Compliance

This domain covers the anti-money laundering framework and the day-to-day operational controls that keep a credit union's compliance program functioning. It's the domain most closely tied to real audit and examination activity.

BSA/AML and Operational Compliance

Candidates should know reporting thresholds, recordkeeping duties, and how a compliance program's operational controls are structured and tested.

  • Currency Transaction Report and Suspicious Activity Report triggers and filing responsibilities
  • Customer Identification Program and due diligence expectations
  • Recordkeeping retention rules and internal audit trail requirements
  • Risk-based monitoring and how compliance officers escalate red flags internally

Questions in this domain often blend a BSA trigger with an operational follow-up step - for example, identifying a reportable transaction and then selecting the correct internal escalation or filing deadline. Both halves of that chain need to be memorized together.

Domain Weighting Reminder: Lending Compliance and BSA/AML tend to require the most study hours because of their rule density and scenario-based question style. Budget your review time accordingly rather than splitting it evenly across all four domains.

Exam Format and Question Style

The CCO exam draws its questions from the four domains above, with scenario-based items concentrated in Lending Compliance and BSA/AML, and more definitional or structural questions in Domain 1. Expect multiple-choice items that describe a short situation - a loan file, a member account issue, a suspicious transaction - and ask you to identify the correct compliance action or the rule that was violated.

Knowing the passing threshold in advance helps you pace your review; see CCO Passing Score 2026: Exactly What You Need to Pass for exact details on what's required to pass. If you want a broader sense of how test-takers generally perform, CCO Pass Rate 2026: What the Data Shows covers the available data without relying on guesswork.

DomainPrimary FocusTypical Question Style
1. Regulatory BasicsCharters, governance, oversight bodiesDefinitional / structural
2. Deposit and Account ComplianceDisclosures, funds availability, account typesScenario-based
3. Lending ComplianceFair lending, adverse action, disclosuresScenario-based, file review
4. BSA/AML and Operational ComplianceReporting triggers, recordkeeping, escalationChained scenario (trigger + action)

Registration, Fees, and Scheduling

Before you lock in a study schedule, confirm the current registration mechanics for the Credit Union Compliance Officer certification exam - eligibility rules, fee amounts, and testing windows can shift year to year. The CCO Requirements 2026: Eligibility, Prerequisites & How to Qualify page walks through who qualifies to sit for the exam, and CCO Certification Cost 2026: Complete Pricing Breakdown breaks down every fee you should budget for.

Timing matters too. Rather than assuming a testing window is always open, check CCO Exam Dates 2026: Testing Windows, Deadlines & Scheduling so your study plan actually ends on a date you can test.

Key Takeaway

Confirm your registration deadline and fee amount before building a study calendar - a mistimed registration is the single most avoidable reason candidates delay their exam by a full cycle.

Final-Week Review Sequence

If you've already done the deep work, your last week should be sequenced by domain difficulty rather than domain order. This is the one place a generic study technique - spaced repetition - earns its spot here, applied specifically to CCO content.

Day 1-2

Lending Compliance re-pass

  • Re-drill adverse action timing and fair lending scenarios
  • Rework any missed practice questions from this domain
Day 3-4

BSA/AML re-pass

  • Rebuild the CTR/SAR trigger-to-filing chain from memory
  • Review recordkeeping retention periods
Day 5

Deposit and Account Compliance

  • Skim disclosure timing rules and funds availability exceptions
Day 6

Regulatory Basics

  • Review charter types and oversight structure vocabulary
Day 7

Full simulation

Notice the order: hardest domains first, lightest review last. This keeps your working memory sharpest on the content that carries the most scenario-based risk.

Who Actually Hires CCO Holders

The credential is most commonly held by compliance officers, BSA officers, and risk managers working inside credit unions, though it also shows up on the resumes of internal auditors and vendor-side compliance consultants who serve credit union clients. If you're weighing whether the credential is worth pursuing relative to your career goals, Is the CCO Certification Worth It? Complete ROI Analysis 2026 lays out the tradeoffs, and CCO Salary Guide 2026: Complete Earnings Analysis covers earnings data without inventing figures beyond what's publicly documented.

For readers still mapping out job titles and openings, CCO Jobs and CCO Training are useful companion reads, as are the foundational explainer pages What Is CCO?, CCO Meaning, and What Does CCO Stand For? if you're just getting oriented to the field.

Before Exam Day: Re-read the four domain lists above one final time, confirm your registration and testing window details, and run at least one full timed practice session on CCO Exam Prep's practice test platform to check pacing.

Frequently Asked Questions

What are the four CCO exam domains, exactly?

Credit Union Regulatory Basics, Deposit and Account Compliance, Lending Compliance, and BSA/AML and Operational Compliance. Every question on the exam maps back to one of these four areas.

Which domain should I study first?

Start with Credit Union Regulatory Basics since it establishes vocabulary and structure used throughout the other three domains, then move into Lending Compliance and BSA/AML, which typically require the most review time.

Is this cheat sheet enough to pass the CCO exam on its own?

No. It's a compressed review tool meant for final-week reinforcement. For full preparation, work through the CCO Study Guide 2026 and the detailed CCO Exam Domains 2026 guide first.

What question format should I expect on exam day?

Multiple-choice questions, many of them scenario-based, especially in Lending Compliance and BSA/AML, where you'll often need to identify a compliance trigger and the correct follow-up action in the same question.

Where can I confirm current fees and testing dates?

Check CCO Certification Cost 2026 for pricing and CCO Exam Dates 2026 for testing windows before you finalize your study schedule.

Ready to pass your CCO exam?

Put this into practice with free CCO questions across every exam domain.