CIA Aptitude Test study guide
CIA Aptitude Test · Work through your exam, one topic at a time.
The Certified Internal Auditor (CIA) credential is the global professional designation for internal auditors, awarded by the Institute of Internal Auditors (IIA). It signals that a practitioner can plan and supervise engagements, apply the International Standards for the Professional Practice of Internal Auditing, and advise on governance, risk, and control. The CIA Aptitude Test study guide has 10 sections and about 4,005 words.
01Foundations of Internal Auditing
This domain tests whether you know what internal auditing is, where its authority comes from, and which guidance binds the function. Questions look definitional but turn on precision: mandatory versus recommended guidance, functional versus administrative reporting, and assurance versus consulting work.
407 words, about 2 min02Independence and Objectivity
Independence and objectivity questions test whether you can separate two related but distinct concepts and say what must happen when a threat arises. The exam favors scenarios: a recent transfer, a consulting engagement, a gift, a reporting line.
417 words, about 2 min03Proficiency and Due Professional Care
This domain tests the competence standard and the care standard, and how they differ. Proficiency questions ask whether the audit team has the right skills; due care questions ask whether the work was planned and performed with the care a reasonably prudent auditor would show.
442 words, about 2 min04Quality Assurance and Improvement Program
QAIP questions test the mechanics of quality assurance: what the program must cover, how internal and external assessments differ, the five-year clock, the three conformance ratings, and who must be told about the results. Standard 1300: the CAE must develop and maintain a QAIP covering all aspects of the internal audit activity, providing reasonable assurance of conformance with the Standards and the Code of Ethics.
416 words, about 2 min05Governance, Risk Management, and Control
This domain tests how well you understand the frameworks internal audit works inside: how governance, risk management, and control fit together, and what the Standards require internal audit to evaluate and contribute to. Standard 2100 requires internal audit to evaluate governance and contribute to its improvement; 2110 covers ethical culture, performance management, and communication of risk and control information.
389 words, about 2 min06Fraud Risks and Controls
Fraud questions test a narrow point that is often missed: internal audit does not own fraud risk. The exam asks what auditors must know, what they must plan for, and how they must respond when fraud indicators appear.
392 words, about 2 min07Engagement Planning and Supervision
Planning and supervision questions test sequence and documentation: what must be settled before fieldwork starts, what the work program contains, and what a supervisor must review and approve. Standard 2200: each engagement needs a plan covering objectives, scope, timing, and resource allocation, based on a documented risk assessment of the activity.
374 words, about 2 min08Engagement Procedures and Evidence
Evidence questions test whether you can judge whether a conclusion is supportable. Expect items on evidence types, reliability, sampling, and documentation - and distractors that prize volume over quality.
373 words, about 2 min09Communicating Results and Monitoring Progress
The final report and the follow-up process are where good fieldwork earns or loses credit. Questions test required content, quality criteria, distribution, and what happens when management accepts the risk instead of acting.
405 words, about 2 min10Business Acumen and Organizational Behavior
This domain checks that you can audit inside a real organization: how it is structured, how money and decisions flow, how people are motivated, and how change creates risk. Functional, divisional, matrix, and flat structures distribute authority differently; matrix structures create dual reporting where accountability for a control can fall between managers.
390 words, about 2 min