- What the 13 CCBSO Learning Objectives Actually Are
- Domains 1-4: Regulation, Observation, Confrontation, and Embezzlement
- Domains 5-8: Media, Robbery, Physical Security, and Case Methodology
- Domains 9-13: Crime Scenes, Interviews, Board Reporting, Records, and Cash-Intensive Businesses
- Exam Format, Fees, and Registration Mechanics
- Who Hires for This Role and Why the Domains Matter
- Mapping a Study Schedule to the 13 Objectives
- Frequently Asked Questions
- ICBA's Bank Security Institute publishes 13 learning objectives - these are preparation topics, not a confirmed weighted exam blueprint.
- No official domain weighting or question-count breakdown has been verified for the 2026 CCBSO exam.
- Passing requires 70%; the exam is closed book with no outside materials or assistance.
- 2026 exam fee is $500, separate from Institute tuition of $1,699 (member) or $2,199 (non-member).
What the 13 CCBSO Learning Objectives Actually Are
Anyone researching the Certified Community Bank Security Officer (CCBSO) credential quickly runs into a naming problem: several unrelated certifications share the same acronym. This article covers only the CCBSO issued through ICBA Education's Bank Security Institute, and every fact below is drawn from the published Institute learning objectives - not from any other program that happens to use the same four letters.
ICBA has not released a numbered exam version, a weighted content outline, or a confirmed domain count for the certification exam itself. What is publicly available are 13 reviewed Institute learning objectives, listed in the order ICBA presents them. These objectives describe what the Institute curriculum teaches and what candidates are expected to know going into the exam - they are preparation topics, not a verified scoring blueprint. No percentage weighting, highest-weighted area, or official domain label has been confirmed in any public source.
For a broader orientation to the credential before diving into content, see What Is CCBSO Certification? and CCBSO Requirements 2026: Eligibility, Prerequisites & How to Qualify, which cover who should attend the Institute in the first place.
Domains 1-4: Regulation, Observation, Confrontation, and Embezzlement
The first four learning objectives build the compliance and behavioral-awareness foundation that the rest of the curriculum builds on.
Domain 1: Regulation H, Staff Supervision, and Training Requirements
Security officers must know what Regulation H obligates them to do, including how security program duties are supervised and documented, and what training staff must receive on an ongoing basis.
- Know the security officer's regulatory reporting obligations
- Understand how training requirements apply to frontline staff, not just the officer
Domain 2: Observation Skills and Threat Detection
This objective focuses on sharpening situational awareness - noticing behavioral and environmental cues that indicate a developing threat before it escalates.
- Practice scanning lobby and teller-line activity for anomalies
- Connect observation skills to earlier intervention in Domain 3 scenarios
Domain 3: Body Language and Confrontation De-escalation
Candidates must be able to read body language during a tense interaction and respond to verbal - and potentially physical - confrontations proactively rather than reactively.
- Distinguish escalating versus de-escalating body language signals
- Know proactive steps to defuse a confrontation before it turns physical
Domain 4: Warning Signs of Embezzlement
This objective covers the behavioral and procedural red flags a security officer should recognize when an employee may be embezzling funds internally.
- Identify lifestyle, behavioral, and procedural warning signs
- Understand how embezzlement detection ties into the record-retention practices in Domain 12
Domains 5-8: Media, Robbery, Physical Security, and Case Methodology
The middle set of objectives moves from internal threats to external incident response, physical hardening, and investigative method.
Domain 5: Speaking With the Media
Officers must recognize the dos and don'ts of media communication following a security incident - what can be shared, what must be withheld, and who should be the designated spokesperson.
Domain 6: Robbery Preparation
This objective outlines the key steps for preparing a bank and its staff for a robbery event, including pre-incident planning and staff conduct during the event itself.
- Know pre-robbery preparation steps for the branch
- Understand staff behavior protocols during an active robbery
Domain 7: Physical Security Enhancements
Candidates need to identify concrete physical security improvements - cameras, access control, lighting, barriers - that reduce vulnerability at a branch.
Domain 8: Scientific Case-Solving Methodology
This objective teaches a methodical, scientific approach to solving a security case rather than relying on guesswork or assumption.
Domains 9-13: Crime Scenes, Interviews, Board Reporting, Records, and Cash-Intensive Businesses
The final five objectives round out post-incident response, governance reporting, and higher-risk customer relationships.
Domain 9: Recognizing a Crime Scene
Officers must be able to recognize when a situation constitutes a crime scene and understand the implications for preservation and evidence handling.
Domain 10: Conducting an Interview After an Incident
This objective covers the components of a proper post-incident interview, including structure and approach for gathering reliable information.
Domain 11: Effective Security Reporting to the Board
Security officers are expected to institute effective reporting practices to the bank's board of directors - a governance responsibility distinct from day-to-day operational tasks.
Domain 12: Records Retention for Security Management
Candidates must identify which specific records to retain to support effective, ongoing security management and future investigations.
Domain 13: Security Gaps With Cash-Intensive Businesses
This objective addresses recognizing security gaps when onboarding or servicing cash-intensive business customers - including casinos, private ATM operators, and marijuana-related businesses.
Key Takeaway
Domains 9-13 are heavily procedural: crime-scene recognition, interview structure, board reporting, records retention, and cash-intensive-business onboarding all reward candidates who can describe a correct process, not just a definition. Build short process checklists for each as you review.
Exam Format, Fees, and Registration Mechanics
Beyond content, candidates need to understand the mechanics of how the CCBSO exam is actually administered in 2026. Several details are not publicly disclosed, and it's important not to guess at numbers that haven't been confirmed.
- Delivery: The exam is administered online through the ICBA Online Portal; no external testing or proctoring vendor has been verified.
- Format: Closed book, with no outside assistance or materials permitted, delivered as an uninterrupted timed sitting with immediate results.
- Passing score: 70%. See CCBSO Passing Score 2026: Exactly What You Need to Pass for a closer look at how this threshold is applied.
- Timing: The published 2026 Institute agenda schedules the exam for a 105-minute block on August 10 (10-11:45 a.m.) as part of the August 4-6 cohort schedule, but this reflects an agenda block, not an independently verified universal exam timer. Actual exam duration is not confirmed.
- Question count and format: Not publicly disclosed, including whether there is a scored/unscored item split.
- Retake: A published retake date of August 20, 2026 is available for candidates who do not pass on the first attempt. A second failure requires repeating the full Institute and exam.
| Cost Item | Amount |
|---|---|
| 2026 Exam Fee | $500 (no member/non-member distinction) |
| Institute Tuition (member) | $1,699 |
| Institute Tuition (non-member) | $2,199 |
| Tuition + Exam Total (member) | $2,199 |
| Tuition + Exam Total (non-member) | $2,699 |
| Non-banker tuition category | $2,699 (subject to approval) |
| Annual maintenance | $150 plus 15 relevant CPE per two-year cycle, at least half live |
These are retained 2026 prices rather than a next-cohort quotation, so candidates budgeting for a future sitting should confirm current pricing directly with ICBA. For a line-by-line breakdown, see CCBSO Certification Cost 2026: Complete Pricing Breakdown.
Who Hires for This Role and Why the Domains Matter
Community banks hire security officers to carry out exactly the duties the 13 learning objectives describe: Regulation H compliance, staff training oversight, robbery preparedness, physical security assessment, board reporting, and vendor/customer risk screening for cash-intensive relationships. Because ICBA's membership base is community banks, the role itself tends to sit within compliance, operations, or risk departments at smaller institutions rather than at large national banks.
This is useful context when evaluating whether to pursue the credential. If you're weighing the time and tuition investment against career impact, Is the CCBSO Certification Worth It? Complete ROI Analysis 2026 and CCBSO Salary Guide 2026: Complete Earnings Analysis dig into that question further, and CCBSO Jobs looks at where the credential shows up in job postings.
Mapping a Study Schedule to the 13 Objectives
Because no weighting has been verified, the safest approach is to allocate roughly even review time across all 13 objectives rather than guessing which ones carry more exam weight. A simple way to do this is to group related objectives into weekly blocks that mirror the incident lifecycle they represent.
Regulatory Foundation
- Domain 1: Regulation H, supervision, and training requirements
- Domain 12: records to retain for security management
Behavioral Awareness
- Domain 2: observation and threat detection
- Domain 3: body language and confrontation
- Domain 4: embezzlement warning signs
Incident Response
- Domain 6: robbery preparation
- Domain 7: physical security enhancements
- Domain 5: media communication
Investigation and Governance
- Domain 8: case-solving methodology
- Domain 9: crime scene recognition
- Domain 10: post-incident interviews
- Domain 11: board reporting
- Domain 13: cash-intensive business gaps
Spacing review across four weeks and revisiting earlier domains briefly each week (a basic form of spaced repetition) helps retention without over-engineering the schedule - the specific technique matters far less here than making sure all 13 objectives get comparable attention before exam day. For a more detailed week-by-week plan, see CCBSO Study Guide 2026: How to Pass on Your First Attempt.
Once you've worked through the content, running timed practice questions on our practice test platform is a useful way to simulate the closed-book, uninterrupted format before the real exam. You can also use practice sessions to identify which of the 13 objectives need another review pass.
Frequently Asked Questions
Not exactly. ICBA has not published a verified, weighted domain outline for the exam itself. The 13 items are reviewed Institute learning objectives used for preparation, and this article's positive count of 13 reflects that published list only - it does not establish an official examination domain count or weighting.
No highest-weighted area has been verified in any public source. Candidates should prepare across all 13 objectives rather than assuming one topic dominates the exam.
The exact question count, scored/unscored split, and official item format have not been publicly disclosed. What is confirmed is that the exam is online, closed book, and uses a 70% passing threshold.
A published retake date (August 20, 2026) allows a second attempt after an initial failure. A second failure requires repeating the full Bank Security Institute and exam, not just the test itself.
There is no verified degree, work-experience-hour, or reference requirement. Candidates need basic bank-security knowledge, full Institute attendance with completed assignments, and a separate exam registration and testing agreement. See CCBSO Requirements 2026 for full detail.