More study resources

About this exam

AU-M is an internal audit certification-style exam built around eight practice domains: auditing fundamentals, planning and risk assessment, internal control and control testing, evidence and procedures, sampling and data analysis, reporting and communication, professional ethics and independence, and information technology in audit. The weighting is deliberate. Evidence and procedures carries the largest share, followed by the three foundational domains, so the exam rewards candidates who can reason from risk to procedure to conclusion rather than candidates who memorise definitions. It suits practitioners who already touch audit work, whether in an internal audit function, an assurance or compliance role, or a finance team preparing for audit scrutiny, and it also suits career changers who want a structured way to demonstrate audit literacy. Preparation should be active. Work through each domain in weighting order, but treat evidence, sampling and internal control as one connected skill set, because exam scenarios rarely isolate them. Practise writing short justifications for why a procedure addresses a specific risk, and rehearse the ethical reasoning behind independence questions. This page is an independent study resource and is not affiliated with any examining or professional body. Confirm all administrative details with the official body that administers the credential before you register.

What you'll study

Common questions

About AU-M preparation

What is the exam format?

The exam uses multiple-choice questions delivered in a single sitting. Expect scenario-based items that describe a client or auditee situation and ask for the most appropriate response, alongside shorter recall items on definitions and standards. Because the format rewards discrimination between plausible options, practise choosing the best answer rather than the only correct one.

How long is the exam, and how many questions are there?

The official body publishes the current question count and time limit, and these are the only reliable figures. Check its website before you book. Do not plan around numbers quoted in forums or older study guides, since they change. When you sit a timed practice set, use the official timing so your pacing habits match the real exam.

How difficult is AU-M?

Difficulty is moderate for candidates with audit exposure and higher for those without. The challenge is rarely the terminology; it is applying judgement to ambiguous scenarios, particularly in internal control, sampling and ethics. Candidates who can explain why a procedure fits a risk usually find the items manageable. Those who memorise lists without linking them to risk tend to struggle.

What does it cost, and what is the passing score?

Fees and the passing standard are set by the administering body and are published on its official site. They are not fixed here because they change and vary by region and membership status. Check the official page for the current fee schedule and the score required, and confirm any membership discounts before paying.

Can I retake the exam if I fail?

Retake rules, waiting periods and any limits on attempts are set by the official body, so confirm them on its site before you rely on a particular policy. Practically, diagnose the failure by domain rather than resitting immediately. If your weakest area was sampling or control testing, rebuild that section before booking a second attempt.

In what order should I study the domains?

Start with fundamentals, planning and risk assessment, and internal control, because later domains assume that vocabulary. Then spend the most time on evidence and procedures, the heaviest domain. Add sampling and data analysis next, since it depends on evidence concepts. Finish with reporting, ethics and IT, which are lighter but easy to lose marks on through careless reading.

Why do candidates fail, and how do I avoid it?

Common failure modes are memorising standards without applying them, misreading scenario stems that ask for the least appropriate action, and neglecting the smaller domains entirely. Another is poor time management on long scenarios. Avoid these by practising timed sets, reading the final line of each question first, and reviewing every wrong answer until you can state the principle it tested.

How should I prepare in the final weeks?

Shift from reading to retrieval. Work through mixed-topic question sets under time pressure, then review errors by domain and note the underlying principle rather than the specific answer. Rehearse ethics and independence scenarios aloud, since explaining the reasoning exposes gaps that recognition alone hides. Keep the last few days for light review and rest rather than new material.

Is this page affiliated with the exam's official body?

No. This is an independent study resource and makes no claim of affiliation, endorsement or sponsorship. Names, domain weightings and administrative details are provided for orientation only. Always verify registration, scheduling, fees, identification requirements and results policies directly with the official examining body before making decisions.