Certified Inspector General® (CIG) — Questions and Answers

Question 1: What is a common tool used for documenting investigation findings?

Investigation reports (Correct answer)
Financial statements
Training manuals
Marketing materials

Correct answer: Investigation reports

Investigation reports are formal, structured documents used to systematically present the findings, evidence, analysis, and conclusions of an investigation. They serve as a comprehensive record of the investigative process and its outcomes. These reports are essential for communicating findings to relevant parties, supporting recommendations, and providing a basis for any subsequent actions.

Question 2: Which of the following is a primary indicator that an employee may be committing expense reimbursement fraud?

Claiming reimbursement for personal expenses as business-related (Correct answer)
Submitting receipts with all required documentation
Booking travel through the agency's approved travel system
Requesting per diem at the authorized government rate

Correct answer: Claiming reimbursement for personal expenses as business-related

Seeking reimbursement for personal expenses by mischaracterizing them as official business expenses is a core form of expense reimbursement fraud.

Question 3: A compliance program is considered effective when it does which of the following?

Transfers all compliance risk to external auditors
Ensures every employee passes an annual ethics test
Detects, prevents, and corrects violations while promoting an ethical culture (Correct answer)
Eliminates all instances of non-compliance

Correct answer: Detects, prevents, and corrects violations while promoting an ethical culture

An effective compliance program combines preventive, detective, and corrective elements within a culture of integrity—not a guarantee of zero violations.

Question 4: Which scenario BEST demonstrates a control activity addressing authorization and approval?

Requiring the CFO to approve all contracts over $100,000 (Correct answer)
Training employees on ethics policies annually
Reconciling bank statements monthly
Storing blank checks in a locked safe

Correct answer: Requiring the CFO to approve all contracts over $100,000

Requiring CFO approval above a dollar threshold is a classic authorization control that ensures transactions meet management's criteria before execution.

Question 5: Under what circumstances is a federal investigator required to provide a Miranda warning before questioning a suspect?

Before any administrative interview conducted under oath
Before any OIG interview involving a federal employee
When the suspect is in custody and subject to interrogation in a criminal investigation (Correct answer)
Whenever financial misconduct is suspected

Correct answer: When the suspect is in custody and subject to interrogation in a criminal investigation

Miranda warnings are required only when a suspect is in custody (i.e., not free to leave) AND is about to be subjected to interrogation in a criminal investigation — they do not apply to administrative interviews.

Question 6: Which governance principle requires that no single individual controls all phases of a transaction from initiation to completion?

Dual authorization
Separation of duties (Correct answer)
Independent verification
Management override

Correct answer: Separation of duties

Separation of duties divides key functions so no one person can initiate, approve, execute, and record a transaction, reducing fraud and error risk.

Question 7: An Inspector General is investigating a reprisal complaint. The alleged retaliating official claims the adverse action was taken for documented performance reasons. Under the WPA framework, this claim functions as:

An absolute defense that ends the investigation
The agency's attempt to demonstrate by clear and convincing evidence it would have taken the same action regardless of the disclosure (Correct answer)
Proof that the employee's disclosure was not protected
Grounds for transferring jurisdiction to the Department of Justice

Correct answer: The agency's attempt to demonstrate by clear and convincing evidence it would have taken the same action regardless of the disclosure

The agency's performance-based justification is its attempt to meet the 'clear and convincing evidence' burden to show the adverse action would have occurred regardless of the protected disclosure.

Question 8: An IG identifies potential criminal conduct during an audit. Under GAGAS and DOJ referral protocols, the IG should:

Refer the matter to appropriate law enforcement and adjust audit procedures accordingly (Correct answer)
Complete the audit first and include criminal findings in the final report
Immediately arrest the individual using IG law enforcement authority
Ignore it if it falls outside audit objectives

Correct answer: Refer the matter to appropriate law enforcement and adjust audit procedures accordingly

Discovered criminal conduct must be referred to appropriate law enforcement while audit procedures are adjusted to avoid compromising any criminal investigation.

Question 9: When an OIG issues a management advisory rather than a formal audit report, it typically indicates:

The matter involves less significant issues that do not warrant a full audit report (Correct answer)
The audit was conducted under different standards than GAGAS
Management has already agreed to correct all findings
The findings are too serious to be included in a routine report

Correct answer: The matter involves less significant issues that do not warrant a full audit report

Management advisories are used to communicate less significant observations that do not rise to the level requiring a formal audit report but still warrant management attention.

Question 10: What is the role of follow-up in audits and investigations?

Delay reporting
Cancel findings
Ignore recommendations
Verify implementation of actions (Correct answer)

Correct answer: Verify implementation of actions

The role of follow-up in audits and investigations is to verify that recommended corrective actions and improvements have been effectively implemented. This step ensures accountability, confirms that identified issues have been addressed, and helps prevent their recurrence. Follow-up activities are essential for realizing the full benefits of audit and investigation findings.

Question 11: An auditor uses stratified sampling to review grant disbursements. The primary advantage of this technique over simple random sampling is that it:

Reduces the total number of transactions that must be examined
Allows greater focus on higher-risk or higher-dollar strata (Correct answer)
Ensures every transaction has an equal probability of selection
Eliminates the need for statistical calculations

Correct answer: Allows greater focus on higher-risk or higher-dollar strata

Stratified sampling allows auditors to allocate more sample items to high-risk or high-dollar strata, improving audit efficiency and coverage of material items.

Question 12: Who is responsible for governance in an organization?

External auditors
Customers
Board and senior management (Correct answer)
Employees only

Correct answer: Board and senior management

Governance refers to the system by which an organization is directed and controlled, and the ultimate responsibility for this lies with the Board of Directors and senior management. The Board sets the strategic direction, oversees operations, and ensures accountability, while senior management implements these strategies and maintains effective internal controls and compliance frameworks. Their combined leadership ensures the organization operates ethically and effectively.

Question 13: Which type of question during an investigative interview is most likely to elicit a narrative, detailed response from the subject?

Open-ended questions (Correct answer)
Leading questions
Hypothetical questions
Closed-ended questions

Correct answer: Open-ended questions

Open-ended questions invite the subject to provide a full narrative in their own words, yielding richer information and reducing the risk of the investigator inadvertently suggesting answers.

Question 14: What is a 'tone at the top' indicator that an inspector general might review to assess an organization's compliance culture?

Whether senior leaders publicly endorse ethics policies and hold violators accountable (Correct answer)
Annual travel expense totals
Number of vendor invoices processed monthly
The ratio of auditors to program staff

Correct answer: Whether senior leaders publicly endorse ethics policies and hold violators accountable

Tone at the top is demonstrated by leadership's visible commitment to ethics—including communications, accountability actions, and consistency between stated values and behavior.

Question 15: When an IG issues a management advisory rather than a formal audit report, the PRIMARY governance implication is that:

The deficiency is too minor to warrant any documentation
The issue requires immediate referral to law enforcement
The matter is advisory in nature and management response is not mandated by statute (Correct answer)
Congressional notification is still required within 30 days

Correct answer: The matter is advisory in nature and management response is not mandated by statute

Management advisories communicate control concerns informally without the statutory follow-up and response requirements triggered by formal audit reports.

Question 16: Which of the following is a key distinction between an IG administrative investigation and an IG criminal investigation?

Criminal investigations do not require Miranda warnings
Administrative investigations can result in imprisonment
Criminal investigations require referral authority and coordination with prosecutors (Correct answer)
Administrative investigations use higher evidence standards than criminal ones

Correct answer: Criminal investigations require referral authority and coordination with prosecutors

Criminal investigations require coordination with prosecutors, proper legal authorities, and specific procedural protections that administrative investigations do not require.

Question 17: An IG investigator learns during a non-related audit that an agency employee may have committed fraud. Under professional standards, the investigator should:

Include findings in the current audit report without further investigation
Ignore it since it is outside the audit scope
Document and refer the information through proper channels (Correct answer)
Confront the employee directly

Correct answer: Document and refer the information through proper channels

Government Auditing Standards require auditors to communicate information about fraud or illegal acts discovered incidentally to those responsible for action.

Question 18: Why is accountability important in investigations?

Avoid responsibility
Ensure responsibility for actions (Correct answer)
Blame others
Ignore consequences

Correct answer: Ensure responsibility for actions

Accountability in investigations means that individuals, including the Inspector General and their staff, are responsible for their decisions, actions, and the outcomes of their work. It ensures that investigations are conducted thoroughly, fairly, and in accordance with established procedures. This principle builds public confidence, promotes ethical conduct, and helps to maintain the integrity of the investigative process by ensuring everyone is answerable for their conduct.

Question 19: Under the Inspector General Act, which of the following best describes an IG's relationship to the agency head?

The IG operates independently but reports administratively to the agency head (Correct answer)
The IG is appointed by and serves at the pleasure of the agency head
The IG reports directly to and takes direction from the agency head
The IG is fully separate from the agency and reports only to Congress

Correct answer: The IG operates independently but reports administratively to the agency head

IGs have administrative reporting relationships to agency heads but maintain operational independence to avoid influence over their oversight activities.

Question 20: Which quality management tool is MOST useful for CIG professionals identifying root causes?

Random audits without focus
Root cause analysis using fishbone diagrams or the 5 Whys method (Correct answer)
A suggestion box
Employee satisfaction surveys

Correct answer: Root cause analysis using fishbone diagrams or the 5 Whys method

Root cause analysis tools systematically trace problems to their underlying causes.

Question 21: The Government Accountability Office (GAO) Standards for Internal Control in the Federal Government (Green Book) is organized around how many principles?

17 (Correct answer)
10
22
25

Correct answer: 17

The GAO Green Book contains 17 principles organized under the five internal control components aligned with the COSO framework.

Question 22: The CIGIE model legislation requires IGs to report to Congress when their access to records is unreasonably denied. This requirement primarily serves to protect:

The agency's internal processes
Congressional oversight authority (Correct answer)
The IG's personal reputation
The IG's budget allocation

Correct answer: Congressional oversight authority

Reporting obstruction to Congress preserves Congressional oversight by ensuring that legislative bodies know when executive agencies are impeding IG functions.

Question 23: What is the role of internal audit in governance?

Ignore control weaknesses
Manage operations
Assess and improve controls (Correct answer)
Approve budgets

Correct answer: Assess and improve controls

Internal audit plays a crucial role in governance by providing independent and objective assurance and consulting services. Its primary function is to assess and improve the effectiveness of an organization's risk management, control, and governance processes. By identifying weaknesses and recommending enhancements, internal audit helps strengthen the reliability of financial reporting, operational efficiency, and compliance with laws and regulations.

Question 24: Which type of audit evidence is generally considered most reliable when auditing a government procurement program?

Original contracts and purchase orders obtained directly from agency files (Correct answer)
Oral representations from procurement officers
Internal memoranda prepared by program staff
Management-prepared summaries of contract awards

Correct answer: Original contracts and purchase orders obtained directly from agency files

Original source documents obtained directly from agency files are more reliable than summaries or oral representations because they are unaltered primary evidence.

Question 25: How should Certified Inspector General professionals handle procedures that have been updated or revised?

Only apply updates to new cases
Review updates, complete required training, and implement revised procedures (Correct answer)
Wait for mandatory enforcement
Continue using the original method

Correct answer: Review updates, complete required training, and implement revised procedures

Professionals must review changes, complete training, and implement revised procedures.

Question 26: What should an Inspector General do if faced with unethical behavior?

Report according to protocol (Correct answer)
Participate in it
Ignore it
Cover it up

Correct answer: Report according to protocol

An Inspector General is ethically and professionally obligated to address unethical behavior, whether observed or reported. The correct action is to report it through established channels and protocols, which may involve internal reporting mechanisms or external regulatory bodies. This ensures that the behavior is properly investigated and addressed, maintaining the integrity of the organization and upholding ethical standards.

Question 27: The principle of 'objectivity' in IG work requires that findings be based on:

Majority opinion among staff investigators
Prior similar cases and their outcomes
Evidence gathered independently without bias or prejudgment (Correct answer)
Agency leadership's assessment of the facts

Correct answer: Evidence gathered independently without bias or prejudgment

Objectivity demands that conclusions be grounded in independently gathered evidence rather than predetermined views, agency preferences, or peer consensus.

Question 28: Which concept describes the OIG's responsibility to follow up on previously issued audit recommendations?

Resolution and closure (Correct answer)
Continuous auditing
Corrective action monitoring
Follow-on engagement

Correct answer: Resolution and closure

Resolution and closure is the process by which OIGs track management's implementation of audit recommendations to ensure corrective actions are completed.

Question 29: The concept of 'independence in appearance' in auditing means that:

Auditors must be physically separate from the auditee's offices
Auditors must avoid situations that would lead a reasonable person to question their objectivity (Correct answer)
Auditors must not have worked in government for less than two years
Auditors must dress professionally during fieldwork

Correct answer: Auditors must avoid situations that would lead a reasonable person to question their objectivity

Independence in appearance requires that auditors avoid circumstances that would cause a reasonable person to doubt their objectivity, even if actual independence is maintained.

Question 30: In the context of fraud investigations, what is 'asset tracing'?

Physically locating missing government equipment
Auditing an agency's fixed asset inventory
Tracking contractor deliverables against contract milestones
Following the movement of fraudulently obtained funds through financial records (Correct answer)

Correct answer: Following the movement of fraudulently obtained funds through financial records

Asset tracing is a forensic technique that follows the flow of money or property obtained through fraud through bank accounts, financial instruments, and transactions to identify where proceeds went.

Question 31: An IG staff member uses government databases to research a personal legal matter. This conduct most directly violates which principle?

Public trust and proper use of government resources (Correct answer)
Effectiveness
Transparency
Economy

Correct answer: Public trust and proper use of government resources

Using government resources, including information systems, for personal benefit violates the public trust and is prohibited by federal ethics regulations.

Question 32: What is a risk assessment?

Evaluate risk likelihood and impact (Correct answer)
Increase vulnerabilities
Delay risk response
Ignoring threats

Correct answer: Evaluate risk likelihood and impact

A risk assessment is a fundamental process within risk management that systematically identifies potential risks an organization faces. Its core purpose is to analyze each identified risk by evaluating both the probability of it occurring (likelihood) and the potential consequences if it does (impact). This evaluation helps organizations prioritize risks and allocate resources effectively for mitigation strategies.

Question 33: In Certified Inspector General practice, what is the CORRECT sequence when performing a technical procedure?

Execute immediately and document only if issues arise
Document, execute, then plan
Execute, then plan and review
Plan, prepare, execute, verify, and document (Correct answer)

Correct answer: Plan, prepare, execute, verify, and document

The correct sequence follows: plan, prepare, execute, verify, and document.

Question 34: Under the Whistleblower Protection Act, which of the following is NOT considered a prohibited personnel practice against a whistleblower?

Reprimand or suspension
Significant change in duties
Assigning the employee to a different geographic location for a legitimate operational reason (Correct answer)
Removal or demotion

Correct answer: Assigning the employee to a different geographic location for a legitimate operational reason

A legitimate geographic reassignment based on genuine operational needs, unconnected to protected disclosures, does not constitute a prohibited personnel practice under the WPA.

Question 35: Which compliance risk is MOST directly associated with rapidly changing regulations in a heavily regulated program area?

Reputational risk
Operational risk
Corruption risk
Regulatory change risk (Correct answer)

Correct answer: Regulatory change risk

Regulatory change risk arises when the pace of rule changes outstrips an organization's ability to update policies, training, and controls to stay compliant.

Question 36: An IG receives a complaint against a close personal friend who is also a senior official in the agency. What is the most appropriate action?

Dismiss the complaint to protect the relationship
Investigate the complaint personally to ensure fairness
Recuse from the matter and refer it to the appropriate authority (Correct answer)
Informally warn the friend before proceeding

Correct answer: Recuse from the matter and refer it to the appropriate authority

Recusal is required when a personal relationship creates an actual or apparent conflict of interest that could compromise objectivity.

Question 37: Which metric is MOST valuable for measuring quality outcomes in CIG practice?

Measurable outcomes compared against established benchmarks (Correct answer)
Hours worked per week
Cost savings from shortcuts
Volume of work completed

Correct answer: Measurable outcomes compared against established benchmarks

Measuring outcomes against benchmarks provides objective evidence of quality.

Question 38: When a CIG professional makes an error in documentation, the CORRECT procedure is to:

Draw a single line through the error, initial, date, and write the correction (Correct answer)
Remove the page and rewrite it entirely
Use correction fluid to cover the error
Ignore the error if it seems minor

Correct answer: Draw a single line through the error, initial, date, and write the correction

Draw a single line through the error, initial and date the correction, maintaining transparency.

Question 39: Why must auditors maintain professional skepticism?

Ignore contradictions
Critically evaluate evidence (Correct answer)
Accept all information
Trust all parties blindly

Correct answer: Critically evaluate evidence

Professional skepticism requires auditors to maintain a questioning mind and critically evaluate the validity and sufficiency of all evidence, even if it initially appears plausible. It means not blindly accepting information but seeking corroboration and being alert to conditions that may indicate misstatement or fraud. This critical approach enhances the reliability of audit findings.

Question 40: An IG finds that program managers are not documenting decisions because they fear audits. This behavior is an example of what compliance risk?

Risk aversion causing operational opacity (Correct answer)
Segregation of duties failure
Conflict of interest
Regulatory capture

Correct answer: Risk aversion causing operational opacity

When fear of oversight causes employees to avoid documentation, it creates opacity and undermines accountability—a compliance risk tied to culture and control environment.

Question 41: Which value supports transparency in professional ethics?

Deception
Concealment
Secrecy
Openness and honesty (Correct answer)

Correct answer: Openness and honesty

Transparency in professional ethics is fundamentally supported by openness and honesty, meaning that actions and decisions are conducted in a clear, straightforward manner. For an Inspector General, this involves being forthright about investigative processes (where appropriate), findings, and recommendations. Transparency builds public trust, reduces suspicion, and demonstrates a commitment to ethical governance and accountability.

Question 42: Under the Standards for Internal Audit (IIA Standards), due professional care requires internal auditors to consider which factor?

The likelihood of significant errors, fraud, or noncompliance (Correct answer)
Whether findings will be politically sensitive
The audit client's budget constraints
The personal reputation of program managers

Correct answer: The likelihood of significant errors, fraud, or noncompliance

Due professional care requires auditors to consider the probability of significant errors, irregularities, or noncompliance when planning and executing audit work.

Question 43: The 'right to representation' (Weingarten rights) entitles a federal employee to:

Request legal counsel paid for by the government during any interview
Review all investigative documents before being interviewed
Have a union representative present during an investigative interview that may result in discipline (Correct answer)
Refuse to answer any questions without a written Miranda warning

Correct answer: Have a union representative present during an investigative interview that may result in discipline

Weingarten rights entitle federal employees who are union members to request union representation during investigative interviews they reasonably believe could lead to disciplinary action.

Question 44: What is the MOST effective approach to quality assurance in Certified Inspector General?

Inspecting finished work only
Reviewing only when complaints are received
Integrating quality checks throughout the entire process (Correct answer)
Assigning quality to a single person

Correct answer: Integrating quality checks throughout the entire process

Quality assurance is most effective when integrated throughout the entire process.

Question 45: In Certified Inspector General practice, what is the PRIMARY goal of a quality improvement program?

To reduce costs above all else
To systematically enhance processes, outcomes, and stakeholder satisfaction (Correct answer)
To meet minimum regulatory requirements
To identify and discipline underperforming staff

Correct answer: To systematically enhance processes, outcomes, and stakeholder satisfaction

Quality improvement aims to enhance processes, outcomes, and satisfaction through continuous evaluation.

Question 46: Under the Federal Acquisition Regulation (FAR), which clause is specifically designed to protect the government against contractor fraud involving false cost or pricing data?

Truth in Negotiations Act (TINA) (Correct answer)
Prompt Payment Act
Anti-Kickback Act
Service Contract Act

Correct answer: Truth in Negotiations Act (TINA)

The Truth in Negotiations Act (TINA), implemented through FAR 15.403, requires contractors to submit certified cost or pricing data and protects the government from fraud involving inflated or false pricing submissions.

Question 47: Which documentation practice BEST demonstrates regulatory compliance for CIG certified professionals?

Relying on memory for routine procedures
Filing documents only when audited
Maintaining organized, dated, and signed records of all activities (Correct answer)
Keeping informal handwritten notes

Correct answer: Maintaining organized, dated, and signed records of all activities

Organized, dated, and signed records demonstrate systematic regulatory compliance.

Question 48: A whistleblower provides information to an IG office and requests confidentiality. The IG should:

Reveal the identity only to senior investigators
Protect the identity to the maximum extent permitted by law (Correct answer)
Disclose the identity if the agency demands it
Decline the information unless confidentiality can be waived

Correct answer: Protect the identity to the maximum extent permitted by law

Protecting whistleblower identities is a legal obligation and ethical imperative that encourages reporting and prevents retaliation.

Question 49: What role does continuous feedback play in CIG quality improvement?

It provides ongoing data for identifying trends, successes, and areas for improvement (Correct answer)
It should only be collected from management
It is unnecessary if standards are set
It is primarily for employee evaluations

Correct answer: It provides ongoing data for identifying trends, successes, and areas for improvement

Continuous feedback provides real-time data about performance and improvement areas.

Question 50: Which statement about electronic documentation in Certified Inspector General practice is MOST accurate?

Electronic records don't require backup
Electronic documentation must meet the same standards as paper records (Correct answer)
Electronic records are less valid than paper
Any format of electronic storage is acceptable

Correct answer: Electronic documentation must meet the same standards as paper records

Electronic documentation must meet the same standards for accuracy, completeness, and security.

Question 51: In CIG practice, what happens when regulations are updated?

Existing professionals are grandfathered in
Previous certifications are revoked
Professionals must update knowledge and practices to meet new requirements (Correct answer)
Changes apply only to new professionals

Correct answer: Professionals must update knowledge and practices to meet new requirements

All professionals must update their knowledge and practices when regulations change.

Question 52: Which regulatory requirement is UNIVERSAL across all Certified Inspector General practice settings?

Using specific proprietary software
Working exclusively during business hours
Limiting services to local jurisdictions
Maintaining current certification and continuing education (Correct answer)

Correct answer: Maintaining current certification and continuing education

Maintaining current certification and continuing education is a universal regulatory requirement.

Question 53: Under the Inspector General Act, when must an IG notify the agency head and Congress of a particularly serious problem?

Immediately and in writing under Section 5(d) urgent notification (Correct answer)
Within 7 days of becoming aware of the problem
Only after completing a full audit or investigation
In the next semiannual report only

Correct answer: Immediately and in writing under Section 5(d) urgent notification

Section 5(d) of the IG Act requires immediate written notification to the agency head and Congress of particularly serious or flagrant problems, abuses, or deficiencies.

Question 54: Which red flag is most commonly associated with a billing scheme involving a fictitious vendor?

Vendor provides discounts for early payment
Vendor invoices are submitted quarterly
Vendor has been on the approved list for over five years
Vendor address matches an employee's home address (Correct answer)

Correct answer: Vendor address matches an employee's home address

A vendor address that matches an employee's personal address is a classic red flag indicating the employee may have created a fictitious vendor to route payments to themselves.

Question 55: Which skill is essential for conducting interviews during investigations?

Assuming facts
Active listening (Correct answer)
Interrupting frequently
Ignoring responses

Correct answer: Active listening

Active listening is an essential skill for conducting interviews during investigations. It involves fully concentrating on what the interviewee is saying, understanding their message, and providing appropriate feedback. This skill helps investigators gather accurate and complete information, build rapport, identify inconsistencies, and ensure that all perspectives are heard and understood.

Question 56: An IG recommends that an agency 'implement compensating controls.' What does this mean?

Pay employees overtime to manually review all transactions
Establish alternative controls that reduce risk when the primary control cannot be implemented (Correct answer)
Transfer risk through an insurance policy
Hire additional auditors to expand the monitoring function

Correct answer: Establish alternative controls that reduce risk when the primary control cannot be implemented

Compensating controls are substitute measures deployed when an ideal primary control is not feasible, providing an alternative means to achieve the same control objective.

Question 57: The Association of Inspectors General (AIG) Code of Ethics requires members to avoid actions that create even the appearance of impropriety because:

Agency heads care more about perceptions than actual conduct
Only appearance standards are enforceable in court
Public trust depends on both actual and perceived integrity (Correct answer)
Appearance violations carry heavier penalties than actual violations

Correct answer: Public trust depends on both actual and perceived integrity

The appearance of impropriety can erode public confidence in the IG function just as effectively as actual misconduct, making appearance standards essential to credibility.

Question 58: An OIG auditor identifies a significant deficiency in internal controls. Under GAGAS, this finding must be communicated to:

Management and those charged with governance in the written report (Correct answer)
Only the head of the audited agency
Only the auditee's management
The Department of Justice for immediate action

Correct answer: Management and those charged with governance in the written report

GAGAS requires that significant deficiencies be communicated in writing to management and those charged with governance, such as an agency's audit committee or board.

Question 59: The Presidential Policy Directive 19 (PPD-19) extended whistleblower protections to which group of employees?

Congressional staff
Postal Service employees
Members of the Senior Executive Service
Intelligence Community employees (Correct answer)

Correct answer: Intelligence Community employees

PPD-19, issued in 2012, extended whistleblower protections to employees of the Intelligence Community who are excluded from the standard Whistleblower Protection Act coverage.

Question 60: What is the primary goal of risk management?

Identify and mitigate risks (Correct answer)
Increase risks
Delay decisions
Ignore potential risks

Correct answer: Identify and mitigate risks

The primary goal of risk management is to proactively identify potential threats and vulnerabilities that could impact an organization's objectives. Once identified, the process focuses on developing and implementing strategies to mitigate or reduce the likelihood and impact of these risks. This systematic approach helps protect assets, ensure operational continuity, and achieve strategic goals by minimizing adverse events.

Question 61: Why is confidentiality critical during investigations?

Protect sensitive data and rights (Correct answer)
Delay investigations
To share information freely
Ignore privacy

Correct answer: Protect sensitive data and rights

Confidentiality is paramount during investigations to protect sensitive data, safeguard the privacy rights of individuals involved, and prevent premature disclosure of findings. Maintaining confidentiality helps preserve the integrity of the investigative process, prevents tampering with evidence, and ensures that all parties are treated fairly. It also encourages cooperation from witnesses.

Question 62: An IG is offered a position with a contractor that the IG's office regularly audits. What is the primary ethical concern?

Loss of technical expertise to the IG office
Breach of confidentiality about salary
Conflict of interest and revolving door issues (Correct answer)
Violation of union agreements

Correct answer: Conflict of interest and revolving door issues

Post-employment restrictions exist to prevent conflicts of interest where personal financial interests in a prospective employer could influence ongoing official duties.

Question 63: What is the PRIMARY purpose of maintaining a clear chain of communication in CIG settings?

To limit who can share information
To reduce the volume of communications
To ensure accountability, prevent miscommunication, and facilitate timely information flow (Correct answer)
To create a hierarchy of importance

Correct answer: To ensure accountability, prevent miscommunication, and facilitate timely information flow

A clear chain of communication ensures accountability and facilitates timely information flow.

Question 64: A conflict of interest in contracting most commonly occurs when:

Two contractors submit identical pricing
An agency employee has a financial interest in an awarded vendor (Correct answer)
A vendor requests a contract extension
A contractor submits a late bid

Correct answer: An agency employee has a financial interest in an awarded vendor

A conflict of interest arises when a government employee has a personal financial or personal relationship with a vendor that could impair impartial decision-making in the contracting process.

Question 65: Which element of the COSO framework specifically involves identifying and analyzing risks that may prevent an organization from achieving its objectives?

Control Environment
Risk Assessment (Correct answer)
Monitoring Activities
Control Activities

Correct answer: Risk Assessment

Risk Assessment is the COSO component that requires management to identify and analyze risks that could impede achievement of organizational objectives.

Question 66: Why is independence important in audits and investigations?

To avoid bias and maintain credibility (Correct answer)
To influence results
To speed up work
To limit scope

Correct answer: To avoid bias and maintain credibility

Independence is crucial for auditors and investigators to conduct their work objectively and without undue influence or pressure from management or other parties. This impartiality ensures that findings and recommendations are unbiased and credible, fostering trust among all stakeholders. Without independence, the integrity and reliability of audits and investigations would be compromised.

Question 67: Which behavior best exemplifies the professional standard of due professional care in IG work?

Applying appropriate skepticism and gathering sufficient evidence (Correct answer)
Limiting findings to those that can be fully proven in court
Accepting agency explanations without independent verification
Completing audits as quickly as possible

Correct answer: Applying appropriate skepticism and gathering sufficient evidence

Due professional care requires exercising professional skepticism and gathering sufficient, appropriate evidence rather than accepting representations at face value.

Question 68: A newly appointed IG finds that the agency has no documented risk assessment process. Under the COSO framework, this gap MOST directly undermines which control objective?

Achievement of operational objectives through informed control design (Correct answer)
Safeguarding of assets
Compliance with laws and regulations
Reliability of financial reporting

Correct answer: Achievement of operational objectives through informed control design

Without risk assessment, controls cannot be appropriately designed to address relevant threats, undermining the agency's ability to achieve objectives through effective control design.

Question 69: Which of the following best describes the Inspector General's role in the federal whistleblower protection system?

IGs are prohibited from investigating reprisal since they report to agency heads
IGs investigate reprisal allegations and refer substantiated findings to agency heads and oversight bodies (Correct answer)
IGs have sole authority to award financial remedies to whistleblowers
IGs serve as the primary adjudicators of all federal whistleblower cases

Correct answer: IGs investigate reprisal allegations and refer substantiated findings to agency heads and oversight bodies

Inspectors General investigate allegations of whistleblower reprisal, document findings, and report substantiated cases to agency leadership and relevant oversight bodies such as the OSC or MSPB for corrective action.

Question 70: A heat map used in risk management typically plots risks on axes representing which two dimensions?

Frequency and duration
Likelihood and impact (Correct answer)
Detection difficulty and control strength
Cost and schedule

Correct answer: Likelihood and impact

A risk heat map visualizes risks by plotting the probability (likelihood) of occurrence against the potential consequence (impact), helping prioritize mitigation efforts.

Question 71: Which principle is most directly violated when an IG shares confidential investigative details with agency leadership before a report is finalized?

Economy
Efficiency
Independence (Correct answer)
Accountability

Correct answer: Independence

Premature disclosure to agency leadership can compromise the IG's independence by allowing undue influence over the investigation's outcome.

Question 72: Which documentation practice BEST demonstrates regulatory compliance for CIG certified professionals?

Filing documents only when audited
Maintaining organized, dated, and signed records of all activities (Correct answer)
Keeping informal handwritten notes
Relying on memory for routine procedures

Correct answer: Maintaining organized, dated, and signed records of all activities

Organized, dated, and signed records demonstrate systematic regulatory compliance.

Question 73: How should Certified Inspector General professionals respond to quality audit findings?

Acknowledge but take no action
Develop and implement an action plan with measurable goals and timelines (Correct answer)
Dispute the findings
Wait for the next audit

Correct answer: Develop and implement an action plan with measurable goals and timelines

A structured action plan with measurable goals demonstrates commitment to improvement.

Question 74: Which scenario best illustrates a violation of the IG professional standard of 'completeness'?

Omitting evidence that contradicts the report's main conclusions (Correct answer)
Interviewing multiple witnesses for a single allegation
Including minor findings in a report with major ones
Providing detailed methodology sections in audit reports

Correct answer: Omitting evidence that contradicts the report's main conclusions

Completeness requires that all material evidence be considered and presented, including evidence that may contradict or qualify the main findings.

Question 75: In the context of federal oversight, 'functional independence' for an IG MOST critically means the IG:

Is exempt from civil service employment rules
Reports directly to the President on all matters
Has an unlimited investigative budget
Can conduct audits and investigations without management approval or interference (Correct answer)

Correct answer: Can conduct audits and investigations without management approval or interference

Functional independence means the IG can plan, conduct, and report on audits and investigations without agency management controlling, limiting, or impeding the work.

Question 76: What is the PRIMARY reason for regulatory compliance in the Certified Inspector General profession?

To protect public safety, ensure quality, and maintain professional integrity (Correct answer)
To justify higher service fees
To create additional paperwork
To avoid penalties and fines only

Correct answer: To protect public safety, ensure quality, and maintain professional integrity

Regulatory compliance protects public safety, ensures quality, and maintains professional integrity.

Question 77: Effective communication between Certified Inspector General professionals and stakeholders requires which essential element?

Adapting communication style to the audience while maintaining accuracy (Correct answer)
Avoiding difficult topics
Only written communication
Using technical jargon to establish credibility

Correct answer: Adapting communication style to the audience while maintaining accuracy

Adapting style to the audience while maintaining accuracy ensures understanding across groups.

Question 78: When an IG faces political pressure to drop an investigation from a high-ranking official, the correct response is to:

Comply if the official outranks the IG
Pause the investigation pending review
Document the pressure and continue the investigation (Correct answer)
Refer the matter to the Department of Justice immediately

Correct answer: Document the pressure and continue the investigation

The IG must document any interference attempts and continue lawful investigations; documented interference may itself warrant reporting to Congress.

Question 79: Which approach is MOST important for CIG professionals when applying technical procedures?

Adhering to established protocols while adapting to specific conditions (Correct answer)
Applying the same technique without variation
Following personal shortcuts
Using the fastest method regardless of standards

Correct answer: Adhering to established protocols while adapting to specific conditions

Technical procedures require adherence to protocols with professional judgment for adaptation.

Question 80: In CIG practice, what happens when regulations are updated?

Changes apply only to new professionals
Professionals must update knowledge and practices to meet new requirements (Correct answer)
Existing professionals are grandfathered in
Previous certifications are revoked

Correct answer: Professionals must update knowledge and practices to meet new requirements

All professionals must update their knowledge and practices when regulations change.

Question 81: The 'phantom employee' fraud scheme in payroll audits refers to:

An employee whose salary is inflated without authorization
A former employee whose payroll access was not terminated
An employee who works under multiple false identities
Fictitious employees added to payroll to divert fraudulent salary payments (Correct answer)

Correct answer: Fictitious employees added to payroll to divert fraudulent salary payments

Phantom employee fraud involves adding fictitious individuals to a payroll system so that fraudulent salary payments can be diverted to the perpetrator.

Question 82: A staff member in an IG office discovers that a colleague has fabricated interview notes. The discovering employee is ethically obligated to:

Ignore it to avoid damaging the team's cohesion
Report the misconduct through appropriate channels immediately (Correct answer)
Document it personally in case it becomes relevant later
Confront the colleague privately and give them a chance to correct it

Correct answer: Report the misconduct through appropriate channels immediately

Fabricating evidence is a serious ethical and potentially criminal violation that must be reported immediately through proper channels to protect investigative integrity.

Question 83: What role does respect play in professionalism?

Ignoring colleagues
Fostering positive relationships (Correct answer)
Disrespecting others
Causing conflicts

Correct answer: Fostering positive relationships

Respect is a cornerstone of professionalism, involving treating colleagues, subordinates, superiors, and the public with dignity and consideration. For an Inspector General, demonstrating respect is crucial for fostering cooperative working relationships, even during challenging investigations. It creates a positive work environment, encourages open communication, and enhances the overall effectiveness and credibility of the office.

Question 84: How can technology support governance and controls?

Reduce transparency
Ignore controls
Automate and monitor processes (Correct answer)
Increase manual errors

Correct answer: Automate and monitor processes

Technology significantly supports governance and controls by enabling the automation of routine tasks, which reduces manual errors and increases efficiency. It also provides robust tools for continuous monitoring of activities, transactions, and compliance metrics, allowing for real-time detection of anomalies or deviations. This automation and monitoring capability strengthens control effectiveness and provides better oversight, enhancing overall organizational integrity.

Question 85: The Inspector General Reform Act of 2008 strengthened IG independence primarily by:

Giving IGs arrest authority over agency employees
Prohibiting agency heads from communicating with IGs
Requiring 30-day advance notice to Congress before an IG can be removed (Correct answer)
Allowing IGs to approve their own budgets

Correct answer: Requiring 30-day advance notice to Congress before an IG can be removed

The 2008 Reform Act requires the President to notify Congress 30 days before removing a federal IG, creating a buffer that protects IGs from politically motivated dismissal.

Question 86: During a performance audit, an auditor discovers that management has implemented controls AFTER the audit period. What is the appropriate action?

Document the new controls and note they were implemented after the audit period (Correct answer)
Issue a qualified opinion due to the untimely control implementation
Expand the audit scope to include the post-period controls
Ignore the new controls since they fall outside the audit period

Correct answer: Document the new controls and note they were implemented after the audit period

Auditors should document subsequent events like post-period control implementations as they may affect the audit findings or recommendations.

Question 87: Which federal statute requires agency heads to report annually on the effectiveness of internal controls and financial systems?

Federal Information Security Modernization Act (FISMA)
Government Performance and Results Act (GPRA)
Inspector General Act of 1978
Federal Managers Financial Integrity Act (FMFIA) (Correct answer)

Correct answer: Federal Managers Financial Integrity Act (FMFIA)

FMFIA requires agency heads to evaluate and report on the adequacy of internal controls and financial management systems each year.

Question 88: When interviewing a potential subject of an investigation, why is it important to begin with 'baseline' questions?

To observe the subject's normal verbal and nonverbal behavior before asking accusatory questions (Correct answer)
To test whether the recording equipment is functioning correctly
To establish the subject's professional background for the record
To comply with union notification requirements

Correct answer: To observe the subject's normal verbal and nonverbal behavior before asking accusatory questions

Baseline questions about neutral, non-threatening topics allow the investigator to observe how the subject normally behaves when not under stress, providing a comparison point for detecting deception later.

Question 89: Enterprise Risk Management (ERM) expands upon traditional internal control frameworks by additionally addressing:

Strategic and reputational risks across the entire organization (Correct answer)
Compliance with procurement regulations
Information security vulnerabilities exclusively
Financial statement accuracy only

Correct answer: Strategic and reputational risks across the entire organization

ERM takes a broader, entity-wide view that includes strategic and reputational risks, not just operational and financial controls addressed in traditional frameworks.

Question 90: An agency implements continuous monitoring of its financial transactions using automated data analytics. This BEST represents which type of control activity?

Physical safeguard
Preventive control
Directive control
Detective control (Correct answer)

Correct answer: Detective control

Continuous monitoring detects anomalies and errors after transactions occur, classifying it as a detective control activity.

Question 91: What is the purpose of a 'continuous monitoring' program in fraud prevention?

To conduct unannounced physical inspections of facilities
To monitor employee social media activity
To provide real-time or ongoing automated review of transactions for anomalies (Correct answer)
To replace annual audits entirely

Correct answer: To provide real-time or ongoing automated review of transactions for anomalies

Continuous monitoring uses automated tools to review transactions on an ongoing basis, enabling early detection of fraud, waste, and abuse rather than waiting for periodic audits.

Question 92: A program office implements a new internal control but never tests it after deployment. This is an example of a failure in which COSO component?

Information & Communication
Monitoring Activities (Correct answer)
Control Environment
Risk Assessment

Correct answer: Monitoring Activities

Monitoring Activities require ongoing evaluation of controls to confirm they are operating effectively; failing to test a deployed control is a monitoring deficiency.

Question 93: Which action by an IG would most undermine the office's credibility and independence?

Reporting findings to Congressional committees
Accepting gifts from a contractor under audit (Correct answer)
Publishing reports critical of agency leadership
Hiring a former agency employee as an investigator

Correct answer: Accepting gifts from a contractor under audit

Accepting gifts from parties under review creates a direct conflict of interest and violates federal ethics rules, severely compromising the IG's independence.

Question 94: In federal investigations, a 'proffer agreement' is an arrangement where:

A subject provides information in exchange for partial immunity from prosecution (Correct answer)
The government agrees to drop all charges in exchange for cooperation
A witness agrees to testify in exchange for witness protection
An agency agrees to transfer a subject employee during an investigation

Correct answer: A subject provides information in exchange for partial immunity from prosecution

A proffer agreement allows a subject to provide information to investigators in exchange for limited protection, typically preventing that specific information from being used directly against them.

Question 95: What is the purpose of a 'cognitive interview' technique?

To detect lies using neurological monitoring equipment
To enhance the memory retrieval of cooperative witnesses by using mental reinstatement and open recall (Correct answer)
To document physical evidence at a crime scene
To psychologically pressure a suspect into confessing

Correct answer: To enhance the memory retrieval of cooperative witnesses by using mental reinstatement and open recall

The cognitive interview is a scientifically validated technique designed to help cooperative witnesses retrieve more complete and accurate memories by mentally reinstating the context of the event.

Question 96: What is the 'chilling effect' in the context of whistleblower reprisal?

The process of freezing an investigation pending OSC review
A mandatory mediation period before MSPB adjudication
The deterrent impact on other employees' willingness to report wrongdoing due to observed retaliation (Correct answer)
A cooling-off period required before an employee can refile a complaint

Correct answer: The deterrent impact on other employees' willingness to report wrongdoing due to observed retaliation

The chilling effect refers to the deterrent impact that retaliation against one whistleblower has on other employees, discouraging them from coming forward with disclosures of their own.

Question 97: A Certified Inspector General (CIG) must maintain continuing professional education primarily to:

Compete for promotions within the IG community
Satisfy certification renewal requirements and maintain competency (Correct answer)
Qualify for salary increases
Meet union contractual obligations

Correct answer: Satisfy certification renewal requirements and maintain competency

CPE requirements ensure that CIGs maintain current knowledge and competencies as laws, regulations, and best practices evolve.

Question 98: Why is risk assessment important in governance?

Increase vulnerabilities
Identify and manage risks (Correct answer)
Ignore risks
Delay decisions

Correct answer: Identify and manage risks

Risk assessment is important in governance because it enables the board and senior management to understand the potential threats and opportunities facing the organization. By systematically identifying, analyzing, and evaluating risks, governance bodies can make informed decisions about resource allocation, strategic planning, and the implementation of appropriate controls. This ensures the organization can achieve its objectives while navigating uncertainties effectively.

Question 99: What role does calibration play in maintaining technical accuracy for Certified Inspector General professionals?

It is only necessary for new equipment
It ensures instruments produce accurate, consistent results over time (Correct answer)
It only matters during inspections
It is optional for advanced professionals

Correct answer: It ensures instruments produce accurate, consistent results over time

Regular calibration ensures instruments continue producing accurate results over time.

Question 100: When a CIG professional identifies a potential regulatory violation, the CORRECT first step is to:

Discuss it casually with coworkers
Document the violation and report through proper channels (Correct answer)
Wait to see if it resolves on its own
Address it only if directly affected

Correct answer: Document the violation and report through proper channels

Proper documentation and reporting through established channels ensures accountability.

Certified Inspector General® (CIG)

The CIG is the premier credential for senior inspector general professionals and their staff, assessing mastery across IG authority and independence, strategic oversight, professional ethics, leadership, and interdisciplinary coordination functions.

100

Questions

120 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds