CIG Cheat Sheet 2026

The 30 highest-yield CIG facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. What is the primary goal of risk management? → Identify and mitigate risks
2. Which of the following is a preventive control? → Access restrictions
3. Which law protects federal contractor employees, subcontractor employees, and grantee employees who report fraud, waste, or abuse on federal contracts? → 41 U.S.C. § 4712 (contractor whistleblower protections)
4. In government settings, 'ghost employees' are best detected by which of the following procedures? → Cross-referencing payroll records with HR active employee files
5. What is the PRIMARY reason for regulatory compliance in the Certified Inspector General profession? → To protect public safety, ensure quality, and maintain professional integrity
6. Which statement about electronic documentation in Certified Inspector General practice is MOST accurate? → Electronic documentation must meet the same standards as paper records
7. Why is risk assessment important in governance? → Identify and manage risks
8. What role does calibration play in maintaining technical accuracy for Certified Inspector General professionals? → It ensures instruments produce accurate, consistent results over time
9. What is a common tool used for documenting investigation findings? → Investigation reports
10. An agency's audit committee that includes a majority of non-federal-employee members BEST supports which governance principle? → Independence of oversight
11. Which regulatory requirement is UNIVERSAL across all Certified Inspector General practice settings? → Maintaining current certification and continuing education
12. How can technology support governance and controls? → Automate and monitor processes
13. How should Certified Inspector General professionals respond to quality audit findings? → Develop and implement an action plan with measurable goals and timelines
14. When a CIG professional makes an error in documentation, the CORRECT procedure is to: → Draw a single line through the error, initial, date, and write the correction
15. Which scenario BEST demonstrates a control activity addressing authorization and approval? → Requiring the CFO to approve all contracts over $100,000
16. In governance frameworks, 'three lines of defense' refers to which arrangement? → Operational management, risk/compliance functions, and internal audit
17. Under the False Claims Act, what percentage of government recoveries may a relator (whistleblower) receive if the government intervenes and pursues the case? → 15 to 25 percent
18. How many days does a federal employee generally have to file a whistleblower reprisal complaint with the Office of Special Counsel? → 90 days
19. Who is responsible for governance in an organization? → Board and senior management
20. Effective communication between Certified Inspector General professionals and stakeholders requires which essential element? → Adapting communication style to the audience while maintaining accuracy
21. In Certified Inspector General practice, what is the CORRECT sequence when performing a technical procedure? → Plan, prepare, execute, verify, and document
22. An OIG concludes an investigation and determines the allegations are 'unsubstantiated.' This disposition means: → The investigation found insufficient evidence to prove or disprove the allegation
23. Which documentation practice BEST demonstrates regulatory compliance for CIG certified professionals? → Maintaining organized, dated, and signed records of all activities
24. How long should CIG professionals typically retain official documentation? → According to applicable regulatory requirements and organizational policies
25. What is the tone at the top? → Leadership setting ethical example
26. The fraud triangle identifies three elements that contribute to fraudulent behavior. Which of the following is NOT one of those elements? → Retaliation
27. What is the significance of audit standards in investigations? → Ensure consistency and quality
28. Which behavior best exemplifies the professional standard of due professional care in IG work? → Applying appropriate skepticism and gathering sufficient evidence
29. A conflict of interest in contracting most commonly occurs when: → An agency employee has a financial interest in an awarded vendor
30. What is the purpose of a 'continuous monitoring' program in fraud prevention? → To provide real-time or ongoing automated review of transactions for anomalies