CIG Cheat Sheet 2026

The 30 highest-yield CIG facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. What is the primary goal of risk management? → Identify and mitigate risks
2. When an OIG issues a management advisory rather than a formal audit report, it typically indicates: → The matter involves less significant issues that do not warrant a full audit report
3. Which of the following is a preventive control? → Access restrictions
4. Which law protects federal contractor employees, subcontractor employees, and grantee employees who report fraud, waste, or abuse on federal contracts? → 41 U.S.C. § 4712 (contractor whistleblower protections)
5. A Certified Inspector General (CIG) must maintain continuing professional education primarily to: → Satisfy certification renewal requirements and maintain competency
6. In government settings, 'ghost employees' are best detected by which of the following procedures? → Cross-referencing payroll records with HR active employee files
7. What is the PRIMARY reason for regulatory compliance in the Certified Inspector General profession? → To protect public safety, ensure quality, and maintain professional integrity
8. Which statement about electronic documentation in Certified Inspector General practice is MOST accurate? → Electronic documentation must meet the same standards as paper records
9. Why is risk assessment important in governance? → Identify and manage risks
10. What role does calibration play in maintaining technical accuracy for Certified Inspector General professionals? → It ensures instruments produce accurate, consistent results over time
11. A program office implements a new internal control but never tests it after deployment. This is an example of a failure in which COSO component? → Monitoring Activities
12. What is a common tool used for documenting investigation findings? → Investigation reports
13. An agency's audit committee that includes a majority of non-federal-employee members BEST supports which governance principle? → Independence of oversight
14. Which regulatory requirement is UNIVERSAL across all Certified Inspector General practice settings? → Maintaining current certification and continuing education
15. The principle of 'objectivity' in IG work requires that findings be based on: → Evidence gathered independently without bias or prejudgment
16. Which of the following is a key distinction between an IG administrative investigation and an IG criminal investigation? → Criminal investigations require referral authority and coordination with prosecutors
17. How can technology support governance and controls? → Automate and monitor processes
18. When an IG audit reveals findings that are embarrassing to the current administration, the IG should: → Report findings fully and objectively regardless of political consequences
19. What is the purpose of a 'control self-assessment' (CSA) in a compliance program? → To engage process owners in evaluating the effectiveness of their own controls
20. How should Certified Inspector General professionals respond to quality audit findings? → Develop and implement an action plan with measurable goals and timelines
21. When a CIG professional makes an error in documentation, the CORRECT procedure is to: → Draw a single line through the error, initial, date, and write the correction
22. A staff member in an IG office discovers that a colleague has fabricated interview notes. The discovering employee is ethically obligated to: → Report the misconduct through appropriate channels immediately
23. In enterprise risk management, what does 'risk aggregation' refer to? → Combining multiple low-level risks to assess their cumulative enterprise-wide effect
24. Under the Inspector General Act, when must an IG notify the agency head and Congress of a particularly serious problem? → Immediately and in writing under Section 5(d) urgent notification
25. Which scenario BEST demonstrates a control activity addressing authorization and approval? → Requiring the CFO to approve all contracts over $100,000
26. In governance frameworks, 'three lines of defense' refers to which arrangement? → Operational management, risk/compliance functions, and internal audit
27. Under the False Claims Act, what percentage of government recoveries may a relator (whistleblower) receive if the government intervenes and pursues the case? → 15 to 25 percent
28. Which action by an IG would most undermine the office's credibility and independence? → Accepting gifts from a contractor under audit
29. How many days does a federal employee generally have to file a whistleblower reprisal complaint with the Office of Special Counsel? → 90 days
30. Who is responsible for governance in an organization? → Board and senior management