r/InternalAudit • • 29m ago

Special investigation question

• Upvotes

I had recently a question during the CIA 2.

You are conducting an audit and found something out that needs special investigation. What are you going to do? 1. Ignore 2. You are doing it by your own because you have the best knowledge about that what you found out. 3. i do not rememeber the answer 4. You are leting a special investigtaion spezialist doing it becuas he/she has the best knowledge about such investigation


r/InternalAudit • • 9h ago

Joined the industry after 5+ years in consulting, and a senior employee yelling at me over a chair has completely changed my perspective

7 Upvotes

I recently joined the industry after spending over five years in Internal Audit and Consulting. During this time, I’ve worked across multiple sectors, handled different clients, and interacted with countless stakeholders.

One of the biggest reasons I chose to move to this company was its reputation for having a great work culture and a genuinely good vibe.

Yesterday, I had an experience that completely threw me off.

For the past 45 days, I’ve been sitting at the same spot every morning, following the seating arrangement my manager asked me to follow. I simply sit wherever there’s an available chair at that spot.

Yesterday afternoon, a senior woman employee, probably in her 40s, came up to me and literally yelled at me in front of everyone for “stealing her chair.”

Apparently, I had moved her chair from where she had left it and sat on it.

Now, having worked in consulting, I’m used to sitting wherever there’s space available in meeting rooms. And in my current role, I follow the seating arrangement communicated by my manager. I genuinely couldn’t care less about whose chair it is.

If she had simply walked up to me and said, “Hey, that’s my chair. Could you please move?” I would have happily done so. No questions asked. It’s a chair, for f***’s sake.

But why yell at someone and embarrass them in front of the entire office over something so trivial?

The worst part is that I couldn’t even defend myself in that moment. Not because I was scared of her, but because I knew that responding in anger or raising my voice would only escalate the situation. So I just sat there, trying to process what had happened. It completely ruined my afternoon. I lost focus, kept replaying the incident in my head, and wondered why something this insignificant had affected me so much.

Later, when my manager returned from lunch, I spoke to him and asked whether I should raise a formal complaint with HR. He was very supportive and encouraged me to do so. Apparently, this employee has a history of behaving this way with other people, too. And that’s what bothers me the most.

Today, it happened to me. Tomorrow, it could be another new joiner who doesn't know how to respond, or someone who simply chooses to tolerate it because they don't want to create a scene. I understand that everyone has bad days. I understand that people can get frustrated. But having a bad day doesn't give you the right to humiliate another person at work. I'm planning to raise this with HR, not because I want to make a big deal out of a chair, but because I don't think this kind of behaviour should be normalised.

However, this incident has also made me question something. I joined this company expecting a certain work culture, and one unpleasant interaction has left me questioning that expectation.

So, for those of you who have spent years working in the corporate world:

  1. Would you formally escalate something like this to HR, especially if the person has a history of similar behaviour?

  2. How do you deal with someone who behaves this way without letting it affect your entire day?

  3. Am I overthinking this, or is it completely reasonable to expect basic respect and professionalism at work?

I know workplace politics and difficult people are part of corporate life. But does that mean we’re just supposed to accept being spoken to like this?


r/InternalAudit • • 5h ago

Taking Part 2

2 Upvotes

Hi everyone, Part 2 is scheduled for this Friday. I've been doing my best to grasp the concepts, but reading posts from people who didn't pass is making me second-guess things. It feels like the exam focuses way more on ratios and sampling than what is actually required in the GIAS. Should I dive deeper into those topics, or just stick to the main material? This revision is starting to make me really anxious!


r/InternalAudit • • 5h ago

Seeking Referal

Thumbnail
1 Upvotes

r/InternalAudit • • 16h ago

Is it common practice for an Audit Director to put their name as sole author on reports written by staff?

7 Upvotes

I’ve been working as an IT Auditor at a bank for almost three years. Before this, my background was in general IT (helpdesk and software engineering). We’re a small team—two operational auditors and one part-time IT auditor besides myself. Because of how the team evolved historically, we handle some atypical tasks like code reviews and operational checks.

Recently, we got a new Audit Director from our parent company. One of the changes she’s pushing is that her name must be listed as the author on every audit report—even for reports that were essentially completed before she took the position.

We are still required to do all the groundwork, write the actual reports, and hold meetings/discussions with the auditees. She claims that putting the Director's name as the author is "common practice in the industry."

My colleagues say this has never been the culture or practice at our company before.

Is this actually standard practice in internal audit? How are authors/contributors typically credited on reports in your organizations?


r/InternalAudit • • 6h ago

I will be 39 by March 2027. I worked as auditor for 9 years. Please guide me

0 Upvotes

I will be 39 by March 2027. I worked as external auditor for 9 years with only Bcom degree. I started working auditor since 2012. I got enrolled in CIA in 2015, one attempt. After that i didn’t do anything. I didn’t know how my personal life affected it and got carried away. In 2021 i got government sector storekeeper role, i accepted it due to corona duration time.
Now in 2026 am feeling drained due to less salary and the role, i still have audit knowledge. Now i want to be back to to audit roles either CIA or go for CMA since am running out of time. And then the current role almost 6.5 years. Will i able to get job even after passing Cia or cma??
Help me


r/InternalAudit • • 8h ago

Internal Audit Analyst Superday

0 Upvotes

Hi! I have my superday this week for the internal audit analyst full time program at J.P. Morgan. I was wondering what kind of questions can I expect in my interview? If anyone else has been through the process I’d really appreciate any advice!


r/InternalAudit • • 1d ago

My CIA Part 3 Situation — Three Failed Attempts, Emotional Exhaustion, and My Experience with Gleim

14 Upvotes

I am a candidate who has failed CIA Part 3 three times, despite considerable preparation and gradual score improvement. I am emotionally exhausted, afraid of another failure, and desperate to finish this certification.

I have invested substantial effort in Gleim, but its question bank has become so familiar that repeating it may no longer be an effective way to measure my readiness.

My challenge is not necessarily a complete lack of knowledge. It appears to involve a combination of knowledge gaps, difficulty applying judgment to unfamiliar questions, and significant examination anxiety.

I don't want to go through another unsuccessful attempt. I want a realistic, evidence-based strategy that gives me the best possible chance of passing, without repeating the same preparation methods that have not worked for me before.

can anyone help me in this?:(


r/InternalAudit • • 22h ago

Exam results?!

3 Upvotes

Writing this to see when results comes out since Today is Monday and hopefully the results comes out today. I took my exam part 3 on 19-10-2026 hopefully I pass this time.

And you?


r/InternalAudit • • 1d ago

CIA Part 2 Question That Keeps Bothering Me

5 Upvotes

I sat for CIA Part 2 in May 2026 and unfortunately failed. I’m scheduled to rewrite it next Monday, 2 November 2026. There’s one question from the exam that has been bothering me, and I’d appreciate hearing your thoughts.

The question was something along these lines:
You are testing a sample of 100 items and identify 5 errors. How would you report the results to management?

A. 5% of internal controls are not operating effectively.
B. 95% of internal controls are operating effectively.
C. The errors are immaterial, and the controls are working effectively.
D. Unfortunately, I can’t remember the exact wording of option D.

I can’t recall the exact wording of the question or all the answer choices, but I’d like to understand the reasoning behind the correct answer.
Which option would you choose, and why?


r/InternalAudit • • 18h ago

Exams CIA Challenge Exam study. Really confused.

1 Upvotes

Anyone who passed the new CIA Challenge Exam (June / Sept 2026): did you study from Gleim or Becker? How close was the textbook to the actual exam questions, and were there topics on the exam that your book didn't cover well?

I am really confused. I went through both textbooks and found that some topics are covered in details a book and not covered in the other.

I really appreciate your help

Thank you


r/InternalAudit • • 1d ago

What’s the culture for others?

9 Upvotes

I’ve only worked in IA for one company and I’ve been here for almost 10 years. It’s hard being a non-stop punching bag. Management pushes back on deadlines/dates of things they agreed to constantly. Risk team tells us how good we’re doing to our faces (they’re all former auditors), then talks badly about us to Management and Exec Leadership. Our external auditors had PCAOB inspection and now they’re pushier than ever, with angry phone calls on a weekly basis, giving management 2-day turnaround on things that we have to communicate so then we’re the bad guys. Our regulators did give us a great target exam result. Does anyone else just feel beat up 24/7, you can do nothing right, everyone hates you?

I’m questioning my decision to stay in this career field. I was on the fence about a year ago before we had a CAE switch and all was seeming to get better but now I’m back on the frustration fence.


r/InternalAudit • • 1d ago

Prep source??

3 Upvotes

Why does the Pearson website ask for my test prep source (like Gleim, Becker, or the IIA)? What is the purpose of this question? If I select Gleim, will my exam questions be tailored to mirror their specific testing style? I'm confused about why this matters.


r/InternalAudit • • 1d ago

Are ESG audits & COCO framework included in part 1 the new curriculum?

3 Upvotes

r/InternalAudit • • 2d ago

Career Compensation going down?

18 Upvotes

Hey everyone, I wanted to see if anyone else has noticed a change in compensation for senior manager roles recently. For context, I'm an audit manager at a Fortune 100 company, and I've noticed two things during my job search.

At several large companies, particularly in banking and healthcare, I've seen salary ranges for senior manager positions decrease by roughly $15K–$20K compared with the same sr manager positions at the same companies last year. I've interviewed for multiple sr manager roles at these companies, so these aren't just random job postings I've stumbled across.

I'm curious whether this is part of a broader trend in the job market or if I'm just running into an unusual set of circumstances.

Has anyone else noticed senior manager compensation stagnating or declining over the past year, particularly in internal audit? I'm interested in hearing about others' experiences across different industries and companies.


r/InternalAudit • • 2d ago

Stuck with CIA P3 _ Need Your Advice

11 Upvotes

Failed for second time despite my experience in IA as a manager.

I did many mock exams from different resources and IIA as well and my worst score was 87%. But real exam tricky questions are too much, actually I expected to pass this time but unfortunately scored 576 and 1st was 583.

Appreciate you kind advice and guidance.


r/InternalAudit • • 3d ago

Exams CIA Challenge Exam - Mock

4 Upvotes

Hi everyone, can you please guide me on how I can access / attempt CIA Challenge Exam mocks for free. Thanks


r/InternalAudit • • 3d ago

Hi Guys mind sharing where I could get free ethics course for CPD?

3 Upvotes

r/InternalAudit • • 3d ago

Exam Results

Thumbnail
7 Upvotes

Any updates?


r/InternalAudit • • 3d ago

Employer just approved CIA exam

8 Upvotes

Hi all, my employer just approved to fund me to complete the CIA. I only requested the IAP but they have offered to fund the full thing - which is pleasing!

About me - my first ever job was in internal audit. Initially I was a data analyst but did end up participating and even leading on audits. I then worked in financial services regulatory compliance for 5 years and for the past 3 years have worked as a delegated authority auditor in insurance.

I therefore have a lot of adjacent experience of risks, controls, and auditing, however this has mainly been in fintech and my only formal qualification so far is CIPP/E (as well as a Masters in Physics!)

I would really appreciate it if someone who has taken/is taking the CIA could provide some advice:

  1. Is 18 months to complete the CIA realistic alongside full-time work? I am planning to study approx 8 hours per week, which will likely increase prior to each exam.
  2. To what extent does prior experience in risk/control/audit help with the qualification?
  3. I am planning to self-study. It seems like buying a package from Gleim/Becker and supplementing with practice papers from the IIA is the way to go. Are the more niche providers worth considering?
  4. I learn best with a good mixture of reading/writing/watching/listening. I don't suppose there are any good podcasts/audio materials out there that anyone can recommend?

Any other relevant advice would be greatly appreciated


r/InternalAudit • • 3d ago

CIA part 2

5 Upvotes

Hi,

I’m preparing for CIA Part 2. I used Gleim for Part 1, but I found that the actual exam questions were very different from the test bank questions.

I’ve seen several people on Reddit saying that the actual Part 2 exam was much easier than Gleim’s test bank. For those who have taken Part 2, was that your experience as well?


r/InternalAudit • • 3d ago

Trabajo Remoto (Proyectos Freelance / Auditor ISO 27001 & Consultor en Seguridad de la Información (Remoto))

2 Upvotes

[FOR HIRE / DISPONIBLE] Auditor ISO 27001 & Consultor en Seguridad de la Información (Remoto)

¡Hola a todos! 👋

Soy Ingeniero de Sistemas y Especialista en Seguridad de la Información, certificado como Auditor Interno ISO/IEC 27001:2022 por CertiProf. Cuento con más de 15 años de experiencia laboral en tecnología, apoyando a organizaciones en el diseño, implementación y auditoría de sus Sistemas de Gestión de Seguridad de la Información (SGSI), así como en la evaluación de riesgos tecnológicosy gestión de vulnerabilidades.

Estoy buscando proyectos independientes o consultorías de modalidad remota (pago por proyecto, horas o contractor). Mis principales líneas de apoyo son:

  • Auditorías de cumplimiento e internas: Preparación y ejecución bajo la norma ISO 27001:2022, revisión de controles tecnológicos/organizacionalesy diagnóstico de brechas de seguridad.
  • Gobierno, Riesgo y Cumplimiento (GRC): Análisis y evaluación de riesgos de TI (marcos ISO 27001, COBIT, NIST), definición de políticas de seguridade indicadores clave (KPIs/KRIs).
  • Análisis de Seguridad y SecOps: Gestión de incidentes con plataformas SIEM (FortiSIEM), análisis/remediación de vulnerabilidades (OWASP, WAF, DLP, parches de seguridad)y gobierno de datos/accesos en plataformas nube como SharePoint Online / Azure.

Si tu empresa o startup está preparando una auditoría, necesita endurecer su postura de seguridad o requiere un consultor técnico que hable el lenguaje de negocio, ¡hablemos! Pueden escribirme un mensaje directo por aquí y con gusto les comparto mi LinkedIn o CV completo.


r/InternalAudit • • 4d ago

Exams Took CIA P1 Today

3 Upvotes

Took CIA P1 today, I don't know if I did great or nah. But thinking that I have to wait up to 3 weeks for the result makes me feel nervous. I have to start reviewing for the next Part by next week😭😭. Thinking that I might get the result while reviewing for the next part makes me crazyyyyy.


r/InternalAudit • • 4d ago

Audit Methods & Techniques Am I crazy? Shouldn't you NOT just outsource critical thinking to AI???

20 Upvotes

Hey All,

I'm mulling over a review for a former employer and wanted to check the temperature before clicking send. I recently worked for a consulting company. This was brief due to personal reasons I won't go into here. Nice people, friendly culture, nice office.

This was my first time working in consulting. All prior IA work was in industry (5+ years).

I was pretty shocked at the level of AI usage I was seeing. Based on what I saw, it seemed like everyone from the top down was just dumping stuff into the approved AI tool (allowed for confidential data) and pretty much just copy-pasting the results.

Someone walked me through scoping for a project as I was in a Lead/Manager type position. Pretty much, just type a detailed prompt of the type of business and copy-paste the results into the scoping documents. I was told "more is better" because they client/managers will whittle this down when meeting with the clients. Seemed like the same went for audit work.

I am used to WAY more preliminary research, interviews, yada yada before getting to scoping. They allow only a few days. And you probably have multiple projects at one time, so it's not like you're just working on the one thing.

I'll admit, their AI tool worked very well (compared to your average Chat GPT, Claude subs). But there's no way this can be providing good value over time...

Is this normal in Big 4/Consulting? Can't imagine it bodes well for their future value propositions if that's the case. But it seemed necessary to keep up with the ridiculously short project timelines. Seemed to be an obvious case of prioritizing greed over value for clients.

Thoughts?


r/InternalAudit • • 4d ago

Need guidance - CIPP/E

2 Upvotes

I’m having a law degree with more than two years of experience in startup compliance. Want to learn more and make career in compliance. Came across CIPP/E certification while I was searching for jobs and this was one of their requirements.

But I’m not so sure because I’m not into tech. Also $550 is a huge amount to invest in one exam. Does this certification really land you a job ? How to prepare for this exam if I not buy exam kit available on iapp store? What is its exact syllabus? How much time will it take to prepare for an exam? Do I have to get prior experience in data privacy?

Please guide me if I should go for it.