AAPC's credential for healthcare compliance professionals, validating the ability to build, implement, and oversee an effective healthcare compliance program. CPCO is aimed at the people responsible for ensuring a healthcare organization follows federal and state fraud, waste, and abuse laws, payer regulations, and internal policy — a role distinct from medical coding or billing certifications, though many CPCO holders come from a coding or billing background.
Who it's for
Compliance officers, compliance analysts, healthcare attorneys, practice managers, and auditors responsible for designing or running a healthcare organization's compliance program — spanning physician practices, hospitals, and other healthcare entities subject to federal fraud and abuse enforcement. It's also pursued by coding and billing professionals moving into compliance-focused roles.
What's covered
- Compliance Program Elements & Governance (30%) — the structural components of an effective compliance program, based on OIG guidance, including written policies, a compliance officer/committee, and a code of conduct
- Auditing, Monitoring & Risk Assessment (25%) — proactive auditing and monitoring practices, risk assessment methodology, and using audit findings to correct compliance gaps
- Fraud, Waste, Abuse & Regulatory Law (30%) — the False Claims Act, Anti-Kickback Statute, Stark Law, HIPAA, and other federal statutes that define prohibited conduct in healthcare billing and referrals
- Reporting, Investigations & Enforcement (15%) — internal reporting mechanisms, investigation procedures, corrective action plans, and self-disclosure processes
What to expect
The CPCO exam consists of multiple-choice questions covering the domains above, drawing heavily on named federal statutes and OIG compliance program guidance. Unlike purely procedural coding exams, CPCO questions frequently test whether a candidate understands the legal boundaries and intent behind specific compliance requirements, not just the steps of a compliance program checklist.
How to prepare
Because the exam draws so heavily on named legislation (False Claims Act, Anti-Kickback Statute, Stark Law) and specific regulatory bodies (OIG, CMS), candidates without a legal or regulatory background typically need focused, deliberate review of each law's specific prohibitions and penalties, rather than general compliance intuition. Understanding the seven elements of an effective compliance program as defined by OIG guidance provides a useful organizing framework for most of the exam's other content.