Keep one short miss log with only three tags: wrong control breakdown, wrong owner, and wrong escalation or remediation.
Treat CCC as a compliance-judgment paper, not as a regulators-only vocabulary paper.
Because the official structure is 100 questions in 3 hours, pacing matters, but the bigger differentiator is recognizing where the control framework broke first.
Why this order works
Study stage
What you are stabilizing
regulators, governance, and compliance regime first
the authority and framework layer for everything else
supervision and surveillance second
the main detection and control-ownership layer
conflicts and complaints third
the practical response layer that creates many near-miss questions
regulator interaction and legal action last
the escalation and consequence layer once the control framework is already clear
Recommended tracks
Track
Sequence
30-day intensive
Regulators and governance -> compliance regime and supervision -> surveillance, conflicts, and complaints -> regulator interaction and mixed timed review
60-day balanced
Weeks 1-2 regulators and governance; weeks 3-4 regime and supervision; weeks 5-6 surveillance, conflicts, complaints; weeks 7-8 regulator interaction, legal exposure, and timed mixed sets
90-day part-time
Add one major topic block every 1-2 weeks, then spend the final two weeks only on mixed-case review and remediation logic
30-day intensive plan
Week
Focus
What to do
1
Regulators, governance, and the compliance regime
Lock down which body does what, how dealer obligations are framed, and where the compliance function sits in the firm.
2
Supervision and surveillance
Build a clean distinction between supervisory review, exception monitoring, surveillance follow-up, and evidence retention.
3
Conflicts, complaints, and conduct events
Drill escalation, disclosure, remediation, and complaint-handling logic until you can identify the first real failure quickly.
4
Regulator interaction, enforcement, and mixed review
Finish with reporting, investigations, and formal response logic, then move into timed mixed sets.
60-day balanced plan
Week
Focus
What to do
1
The Regulators
Build the authority map and the role boundary between dealer obligations and regulator actions.
2
Governance and the compliance regime
Stabilize who owns what, how policies become controls, and how oversight actually works.
3
Compliance supervision
Learn branch, desk, and supervisory review logic with a simple ownership checklist.
4
Surveillance and reviews
Focus on exception detection, follow-up, documentation, and closure discipline.
5
Conflicts of interest
Distinguish avoid, control, disclose, and escalate.
6
Complaints and conduct events
Practice fact patterns where the issue becomes a complaint before litigation or formal enforcement.
7
Regulator interaction and legal exposure
Learn reporting, examination, and response sequencing.
8
Mixed timed review
Use exact practice to combine ownership, remediation, and consequence logic under time pressure.
90-day part-time plan
Weeks
Focus
What to do
1-2
Regulators and governance
Build the authority map and keep one-page notes only on actual role boundaries.
3-4
Compliance regime
Tie policies, controls, documentation, and supervision into one workflow.
5-6
Supervision
Practice who reviews what, when escalation starts, and what evidence is expected.
7-8
Surveillance and reviews
Train exception handling, follow-up testing, and remediation proof.
9-10
Conflicts and complaints
Rework near-miss cases where disclosure alone is not enough.
11-12
Regulator interaction and final review
Finish with mixed review and shorten the miss log into reusable rules.
Order of attack
Start with regulators, governance, and the compliance regime.
Move into supervision and surveillance once the control vocabulary is stable.
Finish with conflicts, complaints, regulator interaction, and legal-action consequences.
Final stretch
Rework every miss into a one-line rule: what was the control failure, who owned it, and what should have happened next?
Spend the final week on mixed sets rather than isolated topic drilling.
Keep a running list of weak scenarios where the wrong answer failed because it skipped documentation or follow-up.
Weight-aware build order
Domain
Weight
Why it matters
Compliance Supervision
16%
the heaviest block and the center of many scenarios
The Regulators
13%
the main authority and response frame
Surveillance and Reviews
12%
the main detection and follow-up block
Conflicts of Interest
10%
a frequent source of near-miss answers
How to review misses well
Rewrite each miss as control failure -> owner -> required escalation or remediation -> evidence that should exist.
If two answers looked plausible, check whether one actually solves the problem while the other only describes it.
Treat regulator questions as workflow questions first: prevention, remediation, reporting, or enforcement response.