CIA Part 2 study guide
CIA Part 2 · Work through your exam, one topic at a time.
The Certified Internal Auditor (CIA) is The Institute of Internal Auditors' global internal audit designation, held by more than 220,000 professionals across 170 countries. The credential is aimed at practitioners who want to demonstrate the knowledge, skills, and competencies required to perform internal audit services anywhere in the world, and eligibility paths are tailored to a candidate's education and experience - master's degree, bachelor's degree, active Internal Audit Practitioner, or qualified accountant routes each carry different experience requirements. The CIA program is a three-part exam, and Part 2 is the middle part, covering the engagement itself: how work is planned, performed, communicated, and monitored through to follow-up. It is a computer-based, multiple-choice exam of 100 questions with a 120-minute time limit, delivered at secure global test centers. The CIA Part 2 study guide has 4 sections and about 1,358 words.
01Engagement Planning
Engagement planning turns the broad direction of the audit plan into a specific, achievable engagement. The internal auditor defines the engagement objectives (what the engagement is meant to accomplish), the scope (processes, locations, systems, and period included, plus explicit exclusions), and then performs a preliminary risk assessment to identify the significant risks facing the activity.
361 words, about 2 min02Engagement Execution
Execution is where the engagement is actually performed: gathering information, testing controls and transactions, applying analytical procedures, interviewing, sampling, and documenting results in workpapers. The governing test is whether evidence is sufficient (enough of it) and appropriate (relevant to the objective and reliable in source).
333 words, about 2 min03Engagement Communication
Communication runs throughout the engagement, not only at the end. Interim communication alerts management to significant risks, fraud indicators, or control failures while correction is still possible.
326 words, about 2 min04Engagement Monitoring
Monitoring progress confirms that management's actions on reported findings are actually implemented and effective. It is not a full re-audit; it is risk-based verification that the agreed action occurred and addressed the condition.
338 words, about 2 min