IPPC study guide
IPPC · Work through your exam, one topic at a time.
The International Professional Practices Certification (IPPC) is a professional credential for practitioners who audit, govern, and improve organizational processes against a recognized body of professional standards. It is aimed at internal auditors, assurance and compliance professionals, risk and control specialists, and consultants who want to demonstrate that they can plan engagements, gather and evaluate evidence, communicate findings, and uphold ethical and independence requirements. The IPPC study guide has 7 sections and about 2,024 words.
01Professional Practices Framework and Standards
This domain tests whether you can navigate the International Professional Practices Framework (IPPF) and distinguish mandatory requirements from recommended guidance, then apply the Global Internal Audit Standards (GIAS) to real engagement decisions. The IPPF's mandatory elements are the Global Internal Audit Standards and the Code of Ethics.
324 words, about 2 min02Governance, Risk, and Internal Control
This domain tests how internal audit fits into governance, how risk is owned and managed, and how control frameworks are used to evaluate design and operation. The board provides oversight and sets risk appetite; senior management executes strategy and manages risk within that appetite.
316 words, about 2 min03Audit and Assurance Engagement Planning
This domain tests whether you can turn a broad request into a scoped, risk-based engagement with clear objectives, criteria, and a work program that supports a conclusion. Engagement planning establishes objectives, scope, criteria, risks, resources, and communication.
281 words, about 1 min04Evidence Collection and Testing Techniques
This domain tests whether you can select procedures that produce sufficient and appropriate evidence, test controls and substantiate balances, and document conclusions that another auditor could review. Evidence must be sufficient in quantity and appropriate in relevance and reliability.
275 words, about 1 min05Reporting, Communication, and Follow-up
This domain tests whether findings are clear, supported, and actionable, and whether communication continues through management responses and verified remediation. An engagement report typically states objectives, scope, results, conclusion, and recommendations, with management responses.
278 words, about 1 min06Ethics, Independence, and Professional Conduct
This domain tests the Code of Ethics principles and the practical judgments that protect objectivity, confidentiality, and the credibility of internal audit. The Code's principles are integrity, objectivity, confidentiality, and competency.
267 words, about 1 min07Quality Assurance and Continuous Improvement
This domain tests how the internal audit function assures conformance, measures its performance, and improves through internal and external assessment. A quality assurance and improvement program covers all internal audit activities and provides reasonable assurance of conformance with the standards and effectiveness of the function.
283 words, about 1 min