IIA CRMA
Certification in Risk Management Assurance (CRMA)
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The Certification in Risk Management Assurance (CRMA) is an IIA credential for professionals who provide risk management assurance to audit committees and executive management. The IIA describes the program as reflecting the in-depth organizational knowledge and skillsets required for that role, and notes that the CRMA no longer requires the CIA prerequisite, so candidates can pursue it independently of the CIA. The exam is a 150-minute, 120-question computer-based test delivered at secure global test centers, using interactive question types that ask you to apply concepts, analyze and evaluate data, make sound judgments, and formulate conclusions and recommendations. The syllabus is currently supported by the 2017 Standards; the IIA states there are currently no plans to update the CRMA exam to reflect the Global Internal Audit Standards, and that the core principles of risk management and internal auditing remain consistent. Eligibility depends on your education: a master's degree or higher requires proof of 1 year of internal audit experience, a bachelor's degree requires 2 years, and without a degree you need 5 years, with 2 of those years within the past 3. Active IAP holders also have a pathway. You have two years from acceptance into the program to complete eligibility requirements and must pass the exam within 2 years of applying. Preparation resources include the CRMA exam syllabus, an interactive question demonstration, the study guide and practice questions, a review course, and the Certification Candidate Handbook.
What you'll study
About IIA CRMA preparation
What is the CRMA exam format?
It is a computer-based exam delivered at secure global test centers. You get 150 minutes to answer 120 questions. Items include interactive question types that test application, analysis, evaluation, and judgment rather than plain recall, so expect scenarios requiring conclusions and recommendations.
Do I need the CIA before earning the CRMA?
No. The IIA states the CRMA no longer requires the CIA prerequisite. You can apply to the CRMA program directly, provided you meet the education and internal audit experience requirements for your education level.
How much internal audit experience do I need?
With a master's degree or equivalent or higher, 1 year. With a bachelor's degree or equivalent, 2 years. Without a degree, 5 years, and 2 of those 5 years must fall within the past 3 years. Experience can come from internal audit, quality assurance, risk management, compliance, external audit, internal control, and related areas.
How long do I have to finish the process?
You have two years from the date you are accepted into the CRMA program to complete the eligibility requirements. Separately, you must pass the exam within 2 years of applying. You may sit for the exam before obtaining the requisite work experience.
What does the exam cost?
The CRMA application is $100 USD for members and $220 USD for non-members. The exam is $465 USD for members and $610 USD for non-members. Fees are non-refundable and non-transferable, and pricing may differ where exams are administered through National Institutes.
When will I get my results?
You receive a single, official exam result within three weeks of your exam date. Once results are available, you get a system-generated email notification. Plan for that window rather than expecting an immediate score at the test center.
Is the exam still based on the 2017 Standards?
Yes. The IIA states the CRMA syllabus is currently supported by the 2017 Standards and that there are currently no plans to update the CRMA exam to reflect the Global Internal Audit Standards. The IIA says the core principles remain consistent and the 2017 Standards remain a strong foundation.
What should I study, and in what order?
Start with the CRMA exam syllabus to see the domain topics, then use the interactive question demonstration to learn the item types. Work through the study guide and practice questions, and consider the review course, which follows the program structure and includes the study guide. Review the key references the IIA lists as the body of knowledge for risk management assurance.
What is a common reason candidates struggle?
Treating the exam as a definitions test. The IIA says questions test your ability to apply concepts, analyze and evaluate data, make sound judgments, and formulate conclusions and recommendations. Practice scenario-based reasoning about risk, governance, and assurance rather than memorizing terminology alone.
How do I apply and schedule the exam?
Submit your application in the CCMS with proof of education and a valid government-issued photo ID, then pay. After your documents and application are approved, register for the exam in CCMS and schedule it. You cannot register until approval. After passing and completing experience verification, your designation appears within 14 business days.