III IC-85 cheat sheet

IC-85 refers to a professional certification exam; its syllabus is not publicly enumerated, so candidates should anchor study on the governing body's published objectives and current edition of referenced standards.

Most professional certification exams of this type test a four-layer structure: definitions and terminology, regulatory or standards requirements, applied analysis, and professional judgment in ambiguous cases.

Terminology precision is scored: exam items frequently hinge on distinguishing near-synonyms (for example, 'shall' versus 'should', or 'audit' versus 'review'), so candidates should memorize exact defined terms.

A recurring decision rule: when a question presents a conflict between a general principle and a specific written requirement, the specific written requirement prevails unless the item explicitly asks about principle-level reasoning.

Quantitative items usually require unit consistency first, formula selection second, and arithmetic last; dimensional analysis catches most trap answers.

Answers that are 'technically true but not responsive' are common distractors; the correct option must address the exact question asked, including any stated scope limits.

Where a scenario includes an escalation path (report to supervisor, regulator, or committee), the earliest required notification point is usually the correct answer over a later, more dramatic action.

Documentation and record-retention obligations typically attach at the moment of the event, not at the end of the engagement; retroactive documentation is a classic wrong answer.

Compliance items test the hierarchy: statute or regulation overrides standard, standard overrides internal policy, and internal policy overrides informal practice.

A control is effective only if it is both designed appropriately and operating as designed; exam items often supply one condition and omit the other to create a trap.

Materiality and risk-based thresholds drive scoping decisions; applying a stricter threshold than required is generally acceptable, while applying a looser one is not.

Independence and conflict-of-interest rules: a reviewer must not review work they performed or supervised within the lookback period defined by the applicable standard.

Evidence hierarchy for compliance conclusions: direct observation or system-generated records outrank interviews, which outrank management assertion alone.

Exception handling follows a fixed sequence: identify, contain, root-cause, remediate, verify, and report; skipping verification is the most common distractor.

Regulatory reporting deadlines are calendar-based and do not pause for internal investigation; late filing is a separate violation from the underlying issue.

Sampling must be documented with population definition, selection method, and rationale; a sample chosen by convenience cannot support a conclusion about the population.

Risk score = likelihood x impact; when a matrix is used, the score maps to a band, and treatment (avoid, reduce, transfer, accept) is selected from the band, not from the raw number alone.

Inherent risk is assessed before controls; residual risk after controls; the gap between them is the control's demonstrated effect and must be evidenced.

Root-cause analysis distinguishes proximate cause (the triggering event) from systemic cause (the condition that allowed it); exam items reward the systemic cause when asked for prevention.

Correlation versus causation: an item that shows two variables moving together without a controlled comparison supports association only, never a causal claim.

Cost-benefit tests in exam scenarios compare total cost of control against expected loss reduction (probability x impact avoided), not against the full asset value.

Trend analysis requires a consistent baseline; changing the measurement definition mid-series invalidates comparison and is a standard trap in data-interpretation items.

When data are incomplete, the defensible answer states the limitation and the resulting confidence level rather than extrapolating a precise figure.

Prioritization rule: address items that are both high-impact and time-critical first; urgency alone does not outrank impact when resources are constrained.

Ethical frameworks in certification exams generally rank public interest and legal compliance above employer loyalty, and employer loyalty above personal convenience.

A conflict between an employer instruction and a professional standard is resolved by escalating internally first, then to the external authority named in the standard or regulation.

Confidentiality survives the end of the engagement; disclosure is permitted only where required by law, authorized by the client, or necessary to prevent serious harm as defined in the applicable code.

Professional skepticism means neither assuming wrongdoing nor accepting assertions without corroboration; it is assessed by whether the candidate sought independent evidence.

Written findings follow a structure: condition, criteria, cause, effect, and recommendation; a recommendation without an identified cause is unsupported.

Recommendations must be within the auditee's authority to implement; recommending an action the auditee cannot take is a common incorrect option.

Objectivity requires that conclusions be supported by evidence documented before the conclusion was formed; conclusions reverse-engineered from a desired outcome fail the test.

Continuing professional education and competence limits: a practitioner should decline work outside demonstrated competence rather than learn on the client's risk.

Stem qualifiers change the answer: 'most likely', 'best', 'primary', and 'first' each select a different correct option from the same fact pattern.

Negative stems ('EXCEPT', 'NOT') require re-reading the option set; the correct answer is the outlier, so three options must be verifiably true.

Absolute words in options ('always', 'never', 'all', 'guaranteed') are usually wrong in professional-judgment items because standards permit documented exceptions.

Longest-option bias is unreliable; instead, eliminate options that exceed the scope of the stem or introduce facts not given.

When two options are both defensible, the tiebreaker is usually the one that is earlier in the required process sequence or more conservative in scope.

Calculation items: estimate the answer before computing; an option an order of magnitude away is a distractor regardless of arithmetic.

Scenario items reward the action required by the role named in the stem; a correct action performed by the wrong role is a distractor.

Time management rule for scored exams: answer confident items first, flag uncertain ones, and reserve final minutes for flagged items rather than re-reading settled ones.