CIA Aptitude Test study plan
CIA Aptitude Test · Give each week a clear focus.
8 weeks · About 7 hours per week
Foundations of Internal Auditing & Governance, Risk Management, and Control
Define internal auditing's purpose, authority, and scope, and distinguish assurance from consulting services in your own written summary
Map the three lines model to a hypothetical organization and label each line's responsibilities and reporting relationships
Explain the difference between the IIA's mandatory guidance (Core Principles, Definition, Code of Ethics, Standards) and recommended guidance
Sketch how governance, risk management, and control interrelate, listing at least three control types with one example each
Your checkpoint
A two-page concept map plus 30 flashcards covering Domain 1 and Domain 5 terminology, scored at 80% or better on a self-quiz
Governance, Risk Management, and Control & Fraud Risks and Controls
Apply a risk assessment approach to rank five organizational risks by likelihood and impact, and justify each ranking
Identify control design weaknesses in three short scenarios and propose a compensating control for each
Differentiate fraud risk factors (pressure, opportunity, rationalization) and classify ten given indicators into the correct category
Describe the auditor's responsibilities for fraud detection versus fraud investigation and when to escalate to management or the board
Your checkpoint
A written risk-and-control case analysis (500+ words) covering one fraud scenario, including red flags, control gaps, and recommended actions
Independence and Objectivity & Proficiency and Due Professional Care
Distinguish independence from objectivity and list at least five threats to each with a mitigation
Analyze three impairment scenarios and determine whether disclosure or reassignment is required
Explain the proficiency requirements for the internal audit function and how to obtain external expertise when the team lacks it
Describe due professional care and why it does not imply infallibility or absolute assurance
Your checkpoint
A decision table of ten independence-impairment scenarios with a ruling and one-line rationale for each, reviewed against the Standards
Quality Assurance and Improvement Program & Engagement Planning and Supervision
Outline the components of a quality assurance and improvement program, including internal assessments and the external assessment requirement and timing
Draft an engagement-level planning checklist covering objectives, scope, risk, resources, and timing
Write engagement objectives that are specific and testable, and pair each with the evidence type that would satisfy it
Explain supervision responsibilities and how workpaper review provides evidence of adequate supervision
Your checkpoint
A complete engagement planning memo for a simulated audit, including objectives, scope, risk summary, resource plan, and supervision notes
Engagement Procedures and Evidence & Communicating Results and Monitoring Progress
Classify ten evidence items by reliability and sufficiency, and justify the ranking
Select appropriate sampling or testing techniques for three stated engagement objectives
Structure an audit report with findings written as criteria, condition, cause, effect, and recommendation
Draft a monitoring plan for tracking management's corrective actions through to closure
Your checkpoint
A full draft audit report with at least three findings in proper form, plus a follow-up tracking table with owners and due dates
Business Acumen and Organizational Behavior & Fraud Risks and Controls
Explain how organizational structure, culture, and motivation affect control environment and audit risk
Identify behavioral biases that influence management decisions and describe how an auditor accounts for them
Design a fraud risk assessment for a process of your choice, covering incentive, opportunity, and rationalization
List interview and communication techniques that improve evidence quality during fieldwork
Your checkpoint
A one-page fraud risk assessment matrix for a chosen business process, with at least six fraud schemes and corresponding controls
Foundations of Internal Auditing & Independence and Objectivity & Proficiency and Due Professional Care & Quality Assurance and Improvement Program
Re-synthesize the foundations, independence, proficiency, and quality domains into a single condensed outline
Answer 60 mixed practice questions across the four domains and log every miss with the underlying concept
Re-teach the three weakest concepts aloud or in writing without notes
Resolve any remaining conflicts between your notes and the Standards' wording
Your checkpoint
An error log of all missed practice questions with corrected reasoning, plus a one-page cheat sheet for Domains 1 through 4
Governance, Risk Management, and Control & Fraud Risks and Controls & Engagement Planning and Supervision & Engagement Procedures and Evidence & Communicating Results and Monitoring Progress & Business Acumen and Organizational Behavior
Answer 80 mixed practice questions across the heavier domains under timed conditions
Review every missed item and convert each into a flashcard or rule statement
Simulate a full-length timed practice exam and analyze pacing and section-level scores
Consolidate all eight weeks of notes into a final review sheet limited to five pages
Your checkpoint
A timed full-length practice exam with a score breakdown by domain and a prioritized list of the five concepts to review in the final 48 hours
Milestones
Week 2: Score 80% or better on a 25-question quiz covering Domains 1, 5, and 6, and explain the three lines model and fraud triangle from memory
Week 4: Produce an engagement planning memo that a reviewer would accept without major rework, and correctly rule on at least 8 of 10 independence scenarios
Week 6: Score 75% or better on a 40-question mixed quiz across all ten domains, with no domain below 60%
Week 8: Achieve 80% or better on the timed full-length practice exam, with the heavier domains (5, 6, 7, 8, 9) averaging at least 75%