1. About this handbook
This Certification Handbook describes the Certified Compliance Officer (CCO®) credential awarded by International Security Certification Board LLC under the accreditation of the ANSI National Accreditation Board (ANAB, ID 9115), in conformance with ISO/IEC 17024:2012. It supersedes all prior versions and is effective on its publication date.
2. About ISCB®
International Security Certification Board (ISCB®) is an independent personnel certification body operating in the United States through International Security Certification Board LLC and in Colombia through International Security Certification Board SAS. Our mission is to certify, under international standards, the technical and ethical competence of polygraph and compliance professionals.
ISCB® operates under an audited ISO/IEC 17024 management system with clear separation between training and assessment, documented impartiality, and multi-stakeholder participation in all schemes.
3. The credential
The Certified Compliance Officer (CCO®) is ISCB®'s certification for compliance program leaders. It is designed for compliance officers, CCOs, internal auditors and risk officers operating under complex, cross-border regulatory frameworks with corporate-governance demands.
4. Accreditation & credential identity
Same scheme, two accreditation paths
The ISCB® Compliance Officer scheme is published under two accreditation paths. This page describes the international (ANAB) path; the equivalent Colombian version is issued as Oficial de Cumplimiento via ONAC.
| Path | Issuing entity | Accreditor | Certificate name |
|---|---|---|---|
| This page | ISCB LLC · USA | ANAB · ID 9115 | CCO® · Certified Compliance Officer |
| Colombia | ISCB SAS · Colombia | ONAC · ISO/IEC 17024:2012 | Oficial de Cumplimiento |
The body of knowledge, examination structure and technical requirements are equivalent under both paths. Selection depends on the candidate's jurisdiction and intended professional scope.
ANAB accreditation validity: granted 9/17/2024 · valid through 9/17/2029.
5. Scheme Committee
The Compliance Officer scheme is governed by the ISCB® Scheme Committee, comprising representatives from employers, certified compliance officers, academia and sector supervisors. The Committee approves the occupational profile, body of knowledge and assessment mechanisms, and reviews scheme validity annually.
6. Eligibility requirements
- University degree in law, business, accounting, audit, economics, engineering or a related field.
- Minimum 3 years of experience leading or actively participating in compliance programs.
- Formal training equivalent to 80 hours across AML, corporate ethics, audit or data privacy.
- Two professional reference letters signed by certified compliance officers or direct supervisors.
- Acceptance of the ISCB® Code of Ethics.
7. Body of knowledge (BoK)
The examination assesses the following domains, derived from the ISCB® P-EOC-01 scheme and aligned with FATF, Wolfsberg, ISO 37301 and ISO 37001:
- International AML/CFT: FATF, OFAC, EU 5AMLD/6AMLD, Wolfsberg.
- Corporate governance, ethics and codes of conduct (COSO, ISO 37301, ISO 37001).
- Compliance audit and continuous monitoring.
- Data privacy: GDPR, CCPA, Colombia Law 1581, LGPD.
- Enterprise risk management (ERM) and internal controls.
- Internal investigations, whistleblowing and regulatory sanctions.
- Anti-corruption: FCPA, UK Bribery Act, Colombia Law 2195/2022.
8. Application process
- Submit application with supporting documentation (F-CER-02, résumé, diplomas, reference letters, training evidence).
- Document review by the ISCB® Certification team.
- Admission notification and signature of the certification agreement (F-CER-01).
- Fee payment in USD and exam scheduling.
- Delivery of the proctored examination.
- Certificate issuance upon passing, with verifiable registry number.
9. Fees
| Item | Amount | Notes |
|---|---|---|
| Full certification | ≈ USD 950 | Covers admission, examination and certificate issuance. Aligned with market standards (ASIS range). |
| Retake | Contact ISCB for current policy | The retake policy for the ANAB path is published in the candidate portal at exam time. |
| Recertification (every 5 years) | Contact ISCB | Current fee published on the portal before the cycle begins. |
Payments are made in US dollars (USD) and invoiced under International Security Certification Board LLC. Fees are reviewed annually.
10. Examination
Format and duration
Comprehensive exam of 180 multiple-choice questions plus 3 open-response case studies graded by the Technical Committee. Total duration: 4 hours.
Minimum passing score
75% overall and 70% per domain. The cut score is technically determined using the modified Angoff method, documented in P-CER-02.
Delivery and proctoring
Delivered online via live remote proctoring through the official ISCB® proctoring partner (the same provider for all accreditation paths). A government-issued ID and a controlled environment are required.
Scheduling and rescheduling
Scheduling is done through the ISCB® portal. Rescheduling is allowed up to 72 hours before the appointment without penalty.
Cancellation and no-show
No-show without documented justification within the next 14 days counts as a consumed attempt.
11. Scoring and results
Results are communicated within 15 business days after the examination, via the ISCB® portal and official email. The report indicates the overall outcome (pass / fail) and domain-level performance. Specific item content is not disclosed, consistent with the exam security policy.
12. Retake policy
The retake policy for the ANAB path is published in the candidate portal at exam time and is consistent with applicable market standards. Candidates may contact ISCB LLC for current fees and conditions before scheduling a second attempt.
13. Recertification
The CCO® credential is valid for 5 years. It is maintained with 120 continuing-education credits, active participation in a compliance role, and continuous adherence to the Code of Ethics. Recertification is available by credits (preferred path) or by re-examination.
14. Code of Ethics
Every candidate and certified professional accepts and is bound by the ISCB® Code of Ethics: professional integrity, impartiality, confidentiality, prohibition of undisclosed conflicts of interest, correct use of the trademark, and cooperation with internal investigations. Ethical violations may lead to suspension or revocation of the certificate.
15. Appeals and complaints
Any candidate or third party may file an appeal against a certification decision or a complaint about a certified professional's conduct. The appeal window is 30 calendar days from decision notice. Appeals are resolved by an independent committee within 90 days. Procedures are documented in P-CER-04.
16. Privacy and data protection
ISCB LLC processes personal data in accordance with applicable US federal and state law (including, where applicable, CCPA for California residents). The full policy is published at ecertify.org.
17. Non-discrimination and accessibility
ISCB® provides equal access to the certification process without discrimination based on race, gender, orientation, religion, nationality, disability or other status. Candidates requiring reasonable accommodations (ADA) may request them at the time of application.