The Library · internalauditguide.com
All Guides
Every guide on the site, on one page — grouped by theme, then by category, and listed alphabetically. Each guide appears once, under its most specific category. Prefer a curated path? Start Here, Topics, By Role and the Risk Library each walk you in. For the free browser tools, see IA QuickTools.
300+
guides
11
themes
65
categories
$0
paywalls, ever
Jump to a theme
- Recently Rewritten
- Internal Audit Foundations
- Audit Process & Methodology
- Risk & Risk Management
- Governance, Standards & Regulation
- Roles & Audiences
- Careers & Certifications
- Technology, Data & the Future
- Running the Audit Function
- Communication & Influence
- Insights & Commentary
- Industries & Sectors
Updated August 2026 · new guides join this page as they publish
Recently rewritten87 guides, September 2026
Eighty-seven guides rebuilt or substantially extended in September 2026 with new test programs, worked examples, and templates, at their original addresses: forty-five from the back catalog and forty-two from the August and September 2026 IT general controls, SOX, analytics, Standards, internal controls, templates, findings-craft and process-audit cluster.
- IT General Controls (ITGC) Audit: The Complete Primer for Non-IT Auditors
- Auditing Cybersecurity Programs: A Complete Guide for Internal Auditors
- Auditing Cloud Computing: An Internal Audit Guide to Cloud Risks and Controls
- AI Audit Framework: Auditing AI and Algorithms for Fairness, Transparency, and Control
- Model Risk Audit: How Internal Audit Validates the Models Management Relies On
- Substantive Testing in Internal Audit: Types, Procedures, and How to Design a Test That Holds Up
- Internal Audit Sampling Techniques: Statistical, Non-Statistical and Risk-Based Methods
- Audit Workpaper Best Practices: Standards, Structure, Review, and What Fails Quality Assessments
- Fraud Risk Management and Internal Audit: Prevention, Detection, and Response
- Audit Walkthroughs: How to Plan, Conduct, and Document a Walkthrough That Actually Tests Design
- How to Prepare for an Internal Audit: The Step-by-Step Guide for Internal Audit Departments
- Issue Validation in Internal Audit: How to Validate Findings, What Evidence Counts, and When to Close an Issue
- Continuous Auditing vs. Continuous Monitoring: Differences, Architecture, and How to Implement Each
- Operational Risk: A Comprehensive Guide for Internal Auditors (Taxonomy, Framework, Measurement, and How to Audit It)
- Internal Audit’s Role in Risk Governance and ERM: Assurance, Advice, and the Lines You Must Not Cross
- Building a Governance, Risk, and Compliance (GRC) Framework: Structure, Operating Model, Technology, and Internal Audit’s Role
- Internal Audit in Financial Services: The Complete Guide to AML/KYC, Compliance Audits, and What Regulators Expect
- How to Set Up an Internal Audit Function in a Small Company: Charter, Staffing, Budget, and the First-Year Plan
- What to Expect During an Internal Audit: The Auditee’s Guide From Notification to Final Report
- CIA Exam Cost in 2026: Every Fee, Prep Course Prices, Hidden Expenses, and a Budget Worksheet
- CIA Exam Requirements in 2026: Education, Experience, Character Reference, and the Challenge Exam Routes
- How Hard Is the CIA Exam? Pass Rates by Part, Why Candidates Fail, and a First-Attempt Plan (2026)
- CIA CPE Requirements in 2026: Hours, Ethics, the Renewal Window, What Counts, Caps, Status Rules, and a Tracking System
- Audit Risk Explained: Inherent, Control, and Detection Risk, the Audit Risk Model, and How Internal Auditors Actually Use It
- What Is an Internal Control? Definition, Anatomy, Types, and a Library of 40 Examples Across Industries
- How to Build an Internal Audit Plan: From Risk Assessment to Board Approval, With a Complete Worked Plan
- How Much Does an Internal Audit Cost? Loaded Rates, the Eight Cost Components, Three Worked Estimates, and What a Function Costs at Four Company Sizes
- How to Write an Internal Audit Report People Actually Read: Structure, Language Rules, and a Before-and-After Rewrite
- How to Select a Random Sample in Excel and Google Sheets for Audit Testing: Simple, Systematic, Stratified, and Monetary-Unit Methods With Documentation That Survives Review
- Co-Sourcing vs. Outsourcing Internal Audit: A Board-Level Comparison on Independence, Regulation, Cost, and Control, With a Decision Matrix
- How to Audit Corporate Culture and Ethics: A Practitioner’s Method Built on the IIA’s Organizational Behavior Topical Requirement
- How to Audit Business Continuity and Organizational Resilience: BIA, RTO and RPO, Testing, Dependencies, and the IIA’s Organizational Resilience Topical Requirement
- UK SOX in 2026: What Provision 29 of the Corporate Governance Code Requires, How Boards Are Defining Material Controls, and Internal Audit’s Role in the Declaration
- Risk Management Frameworks Compared: COSO ERM, ISO 31000, NIST, Basel, FAIR, and the Three Lines Model, and How to Audit Whichever One Your Organization Uses
- How Long Does an Internal Audit Take? Timelines by Phase and Audit Type, the Ten Drivers of Duration, and How to Shorten One Without Cutting Assurance
- Internal Audit vs. Compliance: Roles, Reporting Lines, What Each Does That the Other Cannot, and How They Work Together Under the Three Lines Model
- CIA vs. CPA: Which Certification Is Right for You? Difficulty, Cost, Time, Career Impact, and Long-Term Payoff Compared
- CIA vs. CISA: Which Certification Should You Pursue First? Eligibility, Exams, Cost, Career Impact, and How to Hold Both
- Inside the Internal Audit Department: Every Role From Staff Auditor to Chief Audit Executive, How the Work Flows Between Them, and How the Function Is Governed and Measured
- What Are Internal Controls, Who Tests Them, and How the Three Lines Model Assigns the Work: Definitions, Types, Testing Methods, Sample Sizes, and a Worked Example
- CIA Exam Part 3, Internal Audit Function: The 2025 Syllabus Domain by Domain, What Changed From Business Knowledge, and How to Study for the 45 Percent That Decides It
- How to Run an ERP Segregation of Duties Analysis on Any Platform
- How to Perform a User Access Review That Actually Works
- ITGC vs Application Controls: The Dependency Everyone Gets Backwards
- SOX ITGC Scoping: Which Systems Are In and Why
- How to Audit Identity and Access Management: The Full IAM Program
- How to Audit Privileged Access: Admins, Break-Glass Accounts and Vaults
- Segregation of Duties Beyond the ERP: A Universal Framework
- SOX 404 Explained: The Complete Guide to ICFR Compliance
- SOX Scoping and Risk Assessment: The Top-Down Approach in Practice
- Evaluating Control Deficiencies: Deficiency, Significant Deficiency or Material Weakness
- How to Test Management Review Controls: 6 Precision Factors
- IPE Testing: Proving the Completeness and Accuracy of Information Produced by the Entity
- The Accounts Payable Analytics Catalog: 40 Tests With Logic
- The Payroll Analytics Catalog: 30 Tests for Ghost Employees and Beyond
- The Journal Entry Analytics Catalog: 25 Tests and a Composite Risk Score
- GIAS Domain II Explained: 13 Ethics Standards, With Evidence
- GIAS Domain III Explained: What the Board Must Provide
- GIAS Domain IV Explained: Strategy, Plan, Resources, Quality
- GIAS Domain V: Performing Engagements, Standard by Standard
- Old IPPF to New GIAS: The Complete Mapping Table
- Sawyer’s Guide for Internal Auditors: Summary, Editions and Study Notes
- The Audit Society by Michael Power: Summary and Key Ideas
- TOD vs TOE: Test of Design vs Operating Effectiveness
- IIA Topical Requirements: What’s Mandatory and When (2026)
- Third-Party Topical Requirement: What Applies From Sept 2026
- COSO 17 Principles: The Complete List With Examples
- Audit Planning Memo Template (Free) With Annotated Example
- Risk and Control Matrix (RCM) Template With Worked Examples
- How to Audit Accounts Payable: 14-Test Program and Example
- MRA and MRIA Lifecycle: From Finding to Closure (2026 Rules)
- History of IIA Standards: 1947 to GIAS 2024 and Beyond
- How to Audit Journal Entries: Scoring, Selection, Override
- How to Audit Payroll: Ghost Employees to Off-Cycle Payments
- How to Audit Travel and Expense: Analytics + Worked Example
- How to Audit Procurement: 14 Tests, Bid Rigging + Example
- How to Audit the Vendor Master File: 12 Tests + Example
- The 5 C’s of Audit Findings: A Masterclass
- Internal Audit Report Examples: 5 Model Reports, Annotated
- Risk Appetite Statements That Actually Guide Decisions
- Internal Audit Work Program: Template and Worked Example
- How to Audit Revenue Recognition (ASC 606 Test Program)
- Audit Evidence: Hierarchy, Corroboration, Sufficiency
- How to Audit Purchasing Cards (P-Card Audit Program)
- Preventive, Detective & Corrective Controls: 50 Examples
- Fraud Red Flags: 48 Warning Signs by Business Cycle
- Audit Finding Severity Ratings: The Calibrated Matrix
Internal Audit Foundations36 guides
History of Internal Audit
- Enterprise Risk Management History: A Timeline
- History of IIA Standards: 1947 to GIAS 2024 and Beyond
- History of Internal Audit and Internal Control in China
- History of Internal Audit: From the 1800s to Today
- Internal Audit History: Timeline From Ancient Rome to Today
Internal Audit Basics
- How to Prepare for an Internal Audit: The Step-by-Step Guide for Internal Audit Departments
- How to Set Up an Internal Audit Function in a Small Company: Charter, Staffing, Budget, and the First-Year Plan
- Internal Audit Authority: Can Anyone Refuse an Audit?
- Internal Audit FAQ: 50 Common Questions Answered
- Internal Audit Jargon Explained: Key Terms for New Auditors
- Internal Audit Step-by-Step Guide for Beginners
- Internal Audit vs. Compliance: Roles, Reporting Lines, What Each Does That the Other Cannot, and How They Work Together Under the Three Lines Model
- Is Internal Audit Accounting? Differences and Overlaps
- Types of Internal Audit: Overview of the Main Audit Types
- What Does Internal Audit Mean? Purpose, Process and Value
- What Is COSO in Internal Audit? A Beginner’s Guide
- What Is Internal Audit? Key Terms, Processes and Objectives
- Which Is Better: Internal Audit vs. External Audit?
Internal Controls
- Hospital Revenue Cycle Internal Controls: Key Risks
- Preventive, Detective & Corrective Controls: 50 Examples
- Risk and Control Matrix (RCM) Template With Worked Examples
- Segregation of Duties Beyond the ERP: A Universal Framework
- What Is an Internal Control? Definition, Anatomy, Types, and a Library of 40 Examples Across Industries
- What Are Internal Controls, Who Tests Them, and How the Three Lines Model Assigns the Work: Definitions, Types, Testing Methods, Sample Sizes, and a Worked Example
- How to Write a Control Description: The Five-Part Formula and Ten Before-and-After Rewrites
- Manual vs Automated vs IT-Dependent Controls: Testing Each
Role & Value of IA
- Enron, WorldCom, Theranos: Internal Audit Lessons
- How Internal Audit Builds Stature, Influence and Power
- How Internal Auditors Influence Without Formal Authority
- How to Audit a Digital Transformation Program
- Interest Rate Risk: What Internal Auditors Should Watch
- Inside the Internal Audit Department: Every Role From Staff Auditor to Chief Audit Executive, How the Work Flows Between Them, and How the Function Is Governed and Measured
- Leading Change in Internal Audit Without Losing What Works
- Professional Judgment in Audit: Reasonable vs. Rational
- Stewardship, Risk and Trust: Why Internal Audit Exists
- Three Lines of Defense: Why Internal Audit Is the Last Check
Audit Process & Methodology74 guides
Audit Planning
- How to Build an Internal Audit Plan: From Risk Assessment to Board Approval, With a Complete Worked Plan
- How to Create an Audit Universe and List Auditable Entities
- How to Identify Key Auditable Entities in an Audit Universe
- Internal Audit Risk Assessment: Step-by-Step Playbook
- The Annotated Internal Audit Plan Template
- Audit Planning Memo Template (Free) With Annotated Example
Fieldwork & Testing
- Audit Evidence: Hierarchy, Corroboration, Sufficiency
- Best Practices for Documenting Internal Audit Workpapers
- How to Audit Accounts Payable: 14-Test Program and Example
- How to Audit Journal Entries: Scoring, Selection, Override
- How to Audit Payroll: Ghost Employees to Off-Cycle Payments
- How to Audit Procurement: 14 Tests, Bid Rigging + Example
- How to Audit Purchasing Cards (P-Card Audit Program)
- How to Audit Revenue Recognition (ASC 606 Test Program)
- How to Audit the Vendor Master File: 12 Tests + Example
- How to Audit Travel and Expense: Analytics + Worked Example
- Audit Walkthroughs: How to Plan, Conduct, and Document a Walkthrough That Actually Tests Design
- Internal Audit Work Program: Template and Worked Example
- Internal Audit Workpapers: Elements That Survive Scrutiny
- Substantive Testing in Internal Audit: Types, Procedures, and How to Design a Test That Holds Up
- TOD vs TOE: Test of Design vs Operating Effectiveness
- The Walkthrough Documentation Template: Capturing a Process End-to-End
- Testing Automated Controls and System Configurations: A Non-IT Auditor’s Method
- Walkthrough vs Test of Controls: Different Evidence
- How to Audit Accounts Receivable: 14-Test Program + Example
- How to Audit Inventory: Counts, Costing, Shrink (14 Tests)
- How to Audit Treasury: Cash, Debt, Hedging (14-Test Program)
- How to Audit Wire Transfers and Payment Operations: 14 Tests
- How to Audit Bank Reconciliations and Cash: 14-Test Program
- How to Audit Procure-to-Pay End to End: The Integrated Audit
- How to Audit Order-to-Cash End to End: The Integrated Audit
- How to Audit Fixed Assets: 14 Tests, Counts, Capitalization
- How to Audit the Financial Close: 14 Tests + Worked Example
- How to Audit Account Reconciliations as a Program: 14 Tests
Findings & Reporting
- Audit Finding Severity Ratings: The Calibrated Matrix
- How to Write an Internal Audit Report People Actually Read: Structure, Language Rules, and a Before-and-After Rewrite
- How to Write an Internal Audit Report (Step-by-Step Guide)
- Internal Audit Report Examples: 5 Model Reports, Annotated
- The 5 C’s of Audit Findings: A Masterclass
- The Internal Audit Report Template Set: Full, Short-Form and Memo Shells, Annotated
- Three Reasons No One Reads Your Internal Audit Reports
- Root Cause Analysis for Audit Findings: Five Whys and Fishbone Worked on Three Real Findings
- Life of an Audit Finding: 12 Stages, Exception to Closure
- Evaluating Management Responses to Audit Findings: 5 Tests
- Risk Acceptance by Management: Authority, Record, GIAS 11.5
- Anatomy of an Internal Audit Report: 11 Parts, Templates
- Negotiating Audit Findings: Scripts, Tactics, Escalation
Issue Validation
- Audit Issue Tracking: Excel to AI-Enabled Systems
- High-Risk vs Low-Risk Audit Issues: Why Tailor Validation
- How Internal Audit Drives Continuous Regulatory Readiness
- Building a Governance, Risk, and Compliance (GRC) Framework: Structure, Operating Model, Technology, and Internal Audit’s Role
- Issue Validation in Internal Audit: How to Validate Findings, What Evidence Counts, and When to Close an Issue
- Issue Validation Workpapers: Basics for Junior Analysts
- Regulatory Thresholds Primer: US, EU, Japan and China
- The Finding and Issue Log Template: Field Dictionary, Status Taxonomy, Ageing Rules and a Worked Example
- MRA and MRIA Lifecycle: From Finding to Closure (2026 Rules)
Methodology & Quality
- Audit Risk Model Explained: IR, CR, DR in Practice
- UK Internal Audit Code of Practice: What to Implement
- Audit Risk Explained: Inherent, Control, and Detection Risk, the Audit Risk Model, and How Internal Auditors Actually Use It
- What Is Audit Risk? Model, Components, Examples
- Building a QAIP From Scratch: The Complete Playbook
- The QAIP Documentation Kit: Self-Assessment Workbook, QC Checklist, Metrics Sheet, and Annual Report Outline
Sampling & Analysis
- Audit Sample Sizes: Where 25, 40, and 60 Come From
- Internal Audit Sampling Techniques: Statistical, Non-Statistical and Risk-Based Methods
- Probability and Statistics for Internal Auditors
- How to Select a Random Sample in Excel and Google Sheets for Audit Testing: Simple, Systematic, Stratified, and Monetary-Unit Methods With Documentation That Survives Review
- Random Sampling in Internal Audit: When and How
- Judgmental Sampling That Survives Scrutiny: When Non-Statistical Selection Is Right and How to Document It
- The Sampling Memo Template: One Page That Documents Every Sampling Decision Before Testing
Workpapers & Documentation
- Audit Workpaper Best Practices: Standards, Structure, Review, and What Fails Quality Assessments
- Audit Workpaper Example: A Model Testing File, Annotated
- Internal Audit Workpapers: A Beginner’s Guide With Examples
- The Core Principles of Effective Documentation
- The Nature of Documentation: History, Evolution and Role
Risk & Risk Management52 guides
Business Continuity & Resilience
- Business Continuity Auditing: 5 Core Concepts
- How to Audit Business Continuity and Organizational Resilience: BIA, RTO and RPO, Testing, Dependencies, and the IIA’s Organizational Resilience Topical Requirement
- Internal Audit and Disaster Recovery: Before, During, After
- Third-Party Resilience: Continuity When a Supplier Fails
Compliance Risk
- Compliance vs. Compliance Risk: What’s the Difference?
- What Is Compliance Risk? How to Identify and Mitigate It
Credit Risk
- Auditing Credit Risk: Scope, Tests, and Red Flags
- Credit Risk for Internal Auditors: An Introduction
- Credit Risk Fundamentals: An Overview for Internal Auditors
- What Is Credit Risk? Definition, History, and Methodologies
Fraud Risk
- Fraud Red Flags: 48 Warning Signs by Business Cycle
- Fraud Risk Management and Internal Audit: Prevention, Detection, and Response
- UK Fraud and Corruption: Internal Audit’s Anti-Fraud Role
- What Is Fraud Risk? A Guide to Fraud Risk Management (FRM)
- How to Run a Fraud Risk Assessment: Method and Template
- ACFE Fraud Tree Explained: Every Scheme, Control, Analytic
- When Internal Audit Finds Fraud: The First 48 Hours Protocol
- Procurement Fraud Schemes: Bid Rigging, Kickbacks, Phantoms
- Financial Statement Fraud: Mechanisms, Cases, Who Catches It
Interest-Rate Risk & ALM
- How to Audit Interest Rate Risk in Banks
- Interest Rate Risk (IRR) vs Asset-Liability Management (ALM)
- IRR vs. IRRBB vs. SIRR: Interest Rate Risk in All Its Forms
- What Is Interest Rate Risk? IRRBB, EVE, and NII
Liquidity Risk
- Bank Runs in History: Notable Cases and Audit Lessons
- How to Audit Liquidity Risk Management at a Bank
- Liquidity Risk: Types, Metrics, and Warning Signs
Market Risk
- Market Risk 101: VaR, FRTB, and the Main Risk Types
- Market Risk Measurement: Key Tools and Measures Banks Use
- Market Risk vs. Price Risk: What’s the Difference?
- What Is Value at Risk (VaR)? Definition and Examples
Model Risk
- Model Risk Audit: How Internal Audit Validates the Models Management Relies On
- Model Risk for Internal Auditors: 10 Essentials
- Model Risk Simplified: Why Financial Models Go Wrong
- Vendor Model Validation: What to Do When You Cannot See In
Operational Risk
- Non-Financial Risk Indicators: What to Track and Why
- Operational Risk: A Comprehensive Guide for Internal Auditors (Taxonomy, Framework, Measurement, and How to Audit It)
- Third-Party Risk Management Program: The Full Lifecycle
- Vendor Due Diligence Checklist by Risk Tier: What to Check
- Fourth-Party Risk and Vendor Concentration: The Guide
Reputation Risk
Risk Management & ERM
- 5 Misconceptions About Enterprise Risk Management (ERM)
- ERM vs. Traditional Risk Management: What’s Different
- How to Run an RCSA (Risk & Control Self-Assessment)
- Internal Audit’s Role in Risk Governance and ERM: Assurance, Advice, and the Lines You Must Not Cross
- OCC Risk Categories: The 8 Risk Stripes Explained
- Risk Appetite Statements That Actually Guide Decisions
- Risk Control Matrix (RCM): Names, Variants and Approaches
- Risk Management Frameworks Compared: COSO ERM, ISO 31000, NIST, Basel, FAIR, and the Three Lines Model, and How to Audit Whichever One Your Organization Uses
- Risk Register Guide: Anatomy, Worked Example, Governance
- Risk-Based Internal Auditing: How to Build the Plan
Strategic Risk
Governance, Standards & Regulation32 guides
Audit Committee & Board
- Audit Committee Responsibilities: The Modern Mandate
- Hiring a Chief Audit Executive (CAE): Audit Committee Guide
- The Audit Committee Playbook: How to Win at Oversight
- UK Audit Committees: What They Expect from Internal Audit
- The CAE’s Audit Committee Deck Template: A Twelve-Slide Quarterly Reporting Pack
Governance & Oversight
- Internal Audit’s Role in Governance and Board Relations
- What Is Oversight? A Guide for Boards and Organizations
Regulation & Compliance
- How to Evaluate Control Deficiencies Under AS 2201
- IPE Testing: Completeness and Accuracy of Entity Reports
- Management Review Controls: Design, Evidence and Testing
- Post-Brexit UK Compliance: Challenges for Internal Auditors
- SOX 404 Explained: The Complete Guide to ICFR Compliance
- SOX ITGC Scoping: Which Systems Are In, and Why
- SOX Scoping and Risk Assessment: The Top-Down Approach in Practice
- UK SOX in 2026: What Provision 29 of the Corporate Governance Code Requires, How Boards Are Defining Material Controls, and Internal Audit’s Role in the Declaration
- What Do Regulators Really Expect From Internal Audit?
Standards & Frameworks
- COSO Framework Guide: An Introduction for Internal Auditors
- COSO 17 Principles: The Complete List With Examples
- GIAS Domain II: Ethics and Professionalism Explained
- GIAS Domain III: Governing the Internal Audit Function
- GIAS Domain IV: Managing the Internal Audit Function
- GIAS Domain V: Performing Engagements, Standard by Standard
- Global Internal Audit Standards 2024: What Changed
- Global Internal Audit Standards: A Complete Reference Map
- How to Conduct an ISO 14001 Internal Audit
- ISO 9001 Internal Audits: How the QMS Cycle Works
- IPPF to GIAS Mapping Table: Every 2017 Standard Crosswalked
- QAIP: Preparing for an External Quality Assessment (EQA)
- Third-Party Topical Requirement: What Applies From Sept 2026
- IIA Topical Requirements: What’s Mandatory and When (2026)
- What Is ISO? An Introduction to the Standards Organization
- IIA Cybersecurity Topical Requirement: Conformance Workbook
Roles & Audiences26 guides
Audit Management
Auditees & Management
- 10 Key Tips for Navigating an Internal Audit Smoothly
- Audit Anxiety: How to Cope with the Fear of Being Audited
- Five Reasons You Should Welcome an Internal Audit or Review
- How Long Does an Internal Audit Take? Timelines by Phase and Audit Type, the Ten Drivers of Duration, and How to Shorten One Without Cutting Assurance
- The Psychology of Auditees: Easing Audit Anxiety
- What Not to Say to Your Internal Auditor (and Why)
- What to Expect During an Internal Audit: The Auditee’s Guide From Notification to Final Report
- When Is an Internal Audit Most Likely? Triggers by Industry
- When You Disagree with Internal Audit Findings
- Why People Fear Internal Audits (and How to Fix It)
- The Auditee Communication Pack: Notification Letter, Kickoff Deck, Status One-Pager, and Closing Agenda
Auditors & Audit Leads
CAE & Audit Leadership
- 5 Leadership Tips for Chief Audit Executives (CAEs)
- How CAEs Can Use Internal Audit to Improve Collaboration
- How Much Does an Internal Audit Cost? Loaded Rates, the Eight Cost Components, Three Worked Estimates, and What a Function Costs at Four Company Sizes
- How to Become a Chief Audit Executive (CAE)
- How to Create an Internal Audit Charter: Step-by-Step
- Internal Audit Management Systems: Why Location Matters
- First 90 Days as CAE: Listening Tour, Health Check, Report
Executives & the C-Suite
New & Aspiring Auditors
Careers & Certifications57 guides
CIA Exam Prep
- The CIA Exam, Explained: Requirements, Parts, Cost, Study Plan and Practice Questions (hub)
- CIA Exam Practice Questions: A Free Interactive Question Bank for All Three Parts
- 10 Hardest CIA Exam Topics (and How to Master Them)
- 50 CIA Exam Practice Questions with Answers (Free)
- Certified Internal Auditor (CIA) Exam: How to Prepare
- CIA Exam Cost in 2026: Every Fee, Prep Course Prices, Hidden Expenses, and a Budget Worksheet
- CIA Exam Guide: How to Become a Certified Internal Auditor
- CIA Exam Part 1: Essentials of Internal Auditing Study Guide
- CIA Exam Part 2: Practice of Internal Auditing Study Guide
- CIA Exam Part 3, Internal Audit Function: The 2025 Syllabus Domain by Domain, What Changed From Business Knowledge, and How to Study for the 45 Percent That Decides It
- CIA Exam Requirements in 2026: Education, Experience, Character Reference, and the Challenge Exam Routes
- CIA Exam Study Hours: How Long to Prepare Each Part
- CIA Exam Study Plan: Preparing for All Three Parts
- CIA Exam Study Schedule: How to Create One and Stick to It
- CIA Exam: Test Center vs Online Proctoring
- Common CIA Exam Mistakes and How to Avoid Them
- How Hard Is the CIA Exam? Pass Rates by Part, Why Candidates Fail, and a First-Attempt Plan (2026)
- How to Pass the CIA Exam: A Step-by-Step Roadmap
- When to Take the CIA Exam: Timing by Career Stage
CPE & Continuing Education
- Best Online Internal Audit Courses (Free and Paid)
- CIA CPE Credits: How to Track, Record, and Organize Them
- CIA CPE Requirements in 2026: Hours, Ethics, the Renewal Window, What Counts, Caps, Status Rules, and a Tracking System
- CIA Renewal: Final Steps to Report and Document CPE Credits
- Claiming CIA CPE Credits: Common Mistakes to Avoid
- Free and Low-Cost CIA CPE Credits: Where to Find Them
- How Busy Auditors Fit CPE Into the CIA Renewal Cycle
- How to Earn CIA CPE Credits Through Affordable Self-Study
- How to Maintain Your CIA Certification (CPE, Fees, Ethics)
- How to Plan and Track CPE Hours for CIA Certification
- Internal Audit CPE Trends: What to Learn in 2026
- Online CPE Resources for Certified Internal Auditors (CIA)
Career Growth
- From External Audit to Internal Audit: How to Transition
- How to Leave Internal Audit: Exit Paths That Work
- Internal Audit Outside Banking: How the Job Changes
- Networking Your Way Out of Internal Audit
- Soft Skills for Internal Auditors: What Matters Most
- Top 7 Degrees for Internal Audit Success
- Internal Auditor Salary Guide 2026: Levels, Cities, Offers
- Internal Audit Career Path: Staff to CAE, Level by Level
- Internal Audit Exit Opportunities: Ten Destinations
- Is Internal Audit a Good Career? An Honest Assessment
Certifications
- CIA vs. CISA: Which Certification Should You Pursue First? Eligibility, Exams, Cost, Career Impact, and How to Hold Both
- CIA vs. CPA: Which Certification Is Right for You? Difficulty, Cost, Time, Career Impact, and Long-Term Payoff Compared
- CIA vs CFA: Difficulty, Cost, Salary and Which to Choose
- Free CPE for CIA: 10 Ways to Earn Credits Cheaply
- Internal Audit Certifications: CIA, CISA, CRMA and More
- CISA for Internal Auditors: Worth It? How to Pass in 2026
- CFE for Internal Auditors: Worth It? Exam, Points, Cost
- Internal Audit Certifications Roadmap: What to Earn When
Interviews & Job Prep
- Audit Manager and Director Interviews: The Questions That Test Leadership Judgment
- How to Prepare for an Internal Audit Interview
- Interviewing for CAE: The Audit Committee Panel and How to Command It
- Questions to Ask Your Interviewer: Reading an Audit Shop Before You Join
- The Audit Case Study Round: Practicing Scenario Interviews
- The Internal Audit Interview Question Bank: Staff and Senior Level (With Answer Frameworks)
- Top Questions for an Internal Audit Technical Interview
Skills & Capabilities
Technology, Data & the Future55 guides
AI in Internal Audit
- AI and Audit Evidence: When Logs Can’t Be Trusted
- AI Audit Framework: Auditing AI and Algorithms for Fairness, Transparency, and Control
- AI in Internal Audit: Tools, Use Cases, and Limits
- AI Literacy for Internal Auditors: 5 Hard Truths
- AI Risk Assessment: Beyond the Static Risk Register
- Rethinking Reasonable Assurance in an AI World
- Will AI Make Today’s Internal Audit Skills Obsolete?
- Will AI Make Traditional Controls Obsolete?
- The Auditor’s Prompt Library: Twelve Reusable Prompts for Audit Work, With Guardrails
Audit Technology & Tools
- Excel vs. Google Sheets vs. Apple Numbers
- Interest Rate Risk Management Systems and Tools for Auditors
- Internal Audit Tools: Documentation and Project Management
- Robotic Process Automation (RPA) in Internal Audit
- Top 20 Internal Audit Management Systems
- How to Select an Audit Management System: RFP Method
Crypto, Blockchain & Digital Assets
- Blockchain and Crypto: What Internal Auditors Need to Know
- How to Audit Blockchain: Practical Assurance Techniques
- Top 10 Cryptocurrency Risks for Organizations
Data Analytics & Continuous Auditing
- 5 Data Analytics Tools Every Internal Auditor Should Know
- Continuous Auditing vs. Continuous Monitoring: Differences, Architecture, and How to Implement Each
- Continuous Monitoring in Internal Audit: How to Start
- Key Risk Indicators: Example KRI Tables by Risk Type
- Accounts Payable Analytics: 40 Tests With Logic
- Journal Entry Analytics: 25 Tests and a Risk-Score Model
- Payroll Analytics: 30 Tests for Ghost Employees and More
- Top Excel and Data Analysis Tricks for Internal Auditors
- Top Five Data Analytics Skills for Internal Audit
- What Is Continuous Auditing? An Overview for Internal Audit
- The P2P Fraud Analytics Catalog: Twenty Cross-Stage Tests That Catch Collusion
IT & Cybersecurity Audit
- Auditing Cloud Computing: An Internal Audit Guide to Cloud Risks and Controls
- Auditing Cybersecurity Programs: A Complete Guide for Internal Auditors
- How to Audit Identity and Access Management (IAM)
- How to Audit Privileged Access: Admins, Break-Glass, Vaults
- How to Perform a User Access Review That Actually Works
- How to Run an ERP Segregation of Duties Analysis (Any Platform)
- IT General Controls (ITGC) Audit: The Complete Primer for Non-IT Auditors
- ITGC vs Application Controls: The Dependency Explained
- How to Audit IT Change Management: From Ticket to Production
- How to Audit Backups and Recovery: The Restore Test Is the Only Test
- How to Review a SOC 1 Report: A User Entity’s Working Method
- Building the IT Audit Plan: From IT Risk Assessment to Coverage Map
- How to Audit Incident Response: Detection to Post-Mortem
- How to Review a SOC 2 Report: A Ten-Question Method
- How to Audit Patch and Vulnerability Management
- How to Audit Data Privacy Compliance (GDPR-Anchored)
- How to Audit Active Directory and Entra ID
- NIST CSF 2.0 Assessment: An Internal Audit Method
- How to Audit the SDLC and DevOps Pipeline
- How to Audit End-User Computing and Spreadsheet Risk
- DORA for Internal Auditors: The Five Pillars, Tested
- Auditing Cyber Resilience: Can You Actually Recover?
- How to Audit Cloud Security: A Control-by-Control Program
- How to Audit AWS: A Practical Program With Exact Evidence
The Future of Internal Audit
Running the Audit Function14 guides
Co-Sourcing & Outsourcing
- Advanced Co-Sourcing: Getting More from Your Provider
- How to Select an Internal Audit Consulting Firm
- In-House vs Co-Sourced vs Outsourced Internal Audit
- Internal Audit Co-Sourcing 102: Strategies to Maximize Value
- Internal Audit Co-Sourcing 103: Politics and Your Career
- Internal Audit Co-Sourcing Benefits: The Business Case
- Internal Audit Co-Sourcing in NYC: Current State and Outlook
- Co-Sourcing vs. Outsourcing Internal Audit: A Board-Level Comparison on Independence, Regulation, Cost, and Control, With a Decision Matrix
- Internal Audit Co-Sourcing: Best Practices for CAEs
- Internal Audit Co-Sourcing: How It Works and When to Use It
- Internal Audit Co-Sourcing: What It Is and When to Use It
- Outsourcing Audit Data Analytics: When It Pays Off
- ROI of Internal Audit Co-Sourcing: Making the Business Case
- When to Co-Source Internal Audit: 10 Signs You Need Help
Communication & Influence23 guides
Influence & Stakeholder Management
- Communication in Internal Audit: From Analyst to CAE
- How to Explain Internal Audit to People Outside It
- How to Handle a Disagreement With Your Internal Auditors
- How to Persuade Management to Act on Audit Findings
- If It Isn’t Documented, It Isn’t Done: Data Storytelling
Writing
- Audit Memos and Emails: Business Writing for Auditors
- Common Writing Mistakes to Avoid (and How to Fix Them)
- Creative Writing 101: Techniques for Compelling Stories
- Grammar 101: Key Grammar Rules Every Writer Should Know
- Grammar and Style: A Handbook for Clear, Effective Writing
- How to Write Audit Findings: 10 Rules with Examples
- Self-Editing and Proofreading: How to Revise Your Writing
- Technical Writing and Documentation: A Practical Guide
- The 10 Types of Writer’s Block and How to Get Past Each
- Tone and Voice in Writing: Examples and Exercises
- Writing for the Web: SEO Best Practices and Techniques
- Writing Process: 5 Steps From Brainstorming to Publishing
- Writing Skills for Internal Auditors: A 90-Day Plan
- Writing Audit Finding Conditions: 7 Properties, 12 Rewrites
- Writing Audit Finding Causes: 6 Families, Patterns, Rewrites
- Writing Audit Finding Consequences: Methods and Rewrites
- Writing Audit Recommendations That Get Implemented: A Guide
- Audit Finding Makeovers: 5 Weak Findings Rewritten
Insights & Commentary29 guides
Accounting, ESG & Ethics
- 5 Accounting Concepts Every Internal Auditor Should Know
- Auditing Climate Risk: Scope, Data, and Disclosures
- How to Audit Corporate Culture and Ethics: A Practitioner’s Method Built on the IIA’s Organizational Behavior Topical Requirement
- ESG Auditing: Internal Audit’s Role in ESG Assurance
Audit & Corporate Life
Book Reviews & Summaries
- Against the Gods (Peter L. Bernstein): Summary & Review
- Bad Blood (John Carreyrou): Summary & Review
- Barbarians at the Gate: Summary & Review for Auditors
- Brave New World: Summary & Review for Auditors
- Corporate Governance (Monks & Minow): Summary & Review
- Fahrenheit 451: Summary & Review for Auditors
- Fooled by Randomness (Taleb): Summary & Review
- Lord of the Flies: Summary & Review for Auditors
- Managing the Risk of Fraud and Misconduct: Book Review
- Nineteen Eighty-Four (1984): Summary & Review for Auditors
- Risk: A User’s Guide (McChrystal): Summary & Review
- Sawyer’s Guide for Internal Auditors: Summary and PDF Notes
- The Audit Society by Michael Power: Summary and Key Ideas
- The Big Short (Michael Lewis): Summary & Review
- The Checklist Manifesto: Summary & Review for Auditors
- The Circle (Dave Eggers): Summary & Review
- The Lean Startup (Eric Ries): Summary & Review
- The Power Broker: Governance Lessons for Auditors
- The Psychology of Persuasion (Cialdini): Summary & Review
- The Smartest Guys in the Room: Summary & Review for Auditors
- Thinking, Fast and Slow (Kahneman): Summary & Review
- Too Big to Fail: Summary & Review for Auditors
- Who Moved My Cheese? (Spencer Johnson): Summary & Review
Industries & Sectors2 guides
Financial Services & Banking
Prefer a guided path?
Start Here gives newcomers a ten-read order. Topics maps the whole site by theme. By Role matches guides to your seat, and the Risk Library takes risk apart type by type.
Spotted a gap or an error? Tell us.