Certified Inspector General® (CIG) — Questions and Answers

Question 1: In government settings, 'ghost employees' are best detected by which of the following procedures?

Cross-referencing payroll records with HR active employee files (Correct answer)
Reviewing travel expense reports
Auditing vendor payment histories
Conducting random drug testing

Correct answer: Cross-referencing payroll records with HR active employee files

Matching payroll records against HR's list of active employees will reveal fictitious employees whose names appear on the payroll but do not actually work for the agency.

Question 2: Which data analytics technique is commonly used to detect anomalies in large financial datasets by examining the frequency distribution of leading digits?

Regression analysis
Stratification
Gap testing
Benford's Law analysis (Correct answer)

Correct answer: Benford's Law analysis

Benford's Law predicts the expected frequency of leading digits in naturally occurring datasets, and deviations from this pattern can indicate manipulation or fraud.

Question 3: Which of the following is a preventive control?

Error detection
Audit reviews
Reconciliations
Access restrictions (Correct answer)

Correct answer: Access restrictions

Preventive controls are designed to stop errors or unauthorized activities before they occur. Access restrictions, such as passwords, biometric scans, or locked doors, physically or logically limit who can access certain systems, data, or physical assets. This directly prevents unauthorized individuals from causing harm or making mistakes, making it a classic example of a proactive preventive measure.

Question 4: What is a common tool used for documenting investigation findings?

Marketing materials
Investigation reports (Correct answer)
Training manuals
Financial statements

Correct answer: Investigation reports

Investigation reports are formal, structured documents used to systematically present the findings, evidence, analysis, and conclusions of an investigation. They serve as a comprehensive record of the investigative process and its outcomes. These reports are essential for communicating findings to relevant parties, supporting recommendations, and providing a basis for any subsequent actions.

Question 5: When an IG's report is disputed by agency management before issuance, the IG should:

Include management's written response alongside the report (Correct answer)
Remove all disputed findings from the final report
Withdraw the report if management objects
Delay issuance indefinitely pending resolution

Correct answer: Include management's written response alongside the report

Standard IG practice and professional standards require including management responses in final reports, allowing readers to assess both the findings and the agency's position.

Question 6: Which federal statute requires agency heads to report annually on the effectiveness of internal controls and financial systems?

Inspector General Act of 1978
Federal Managers Financial Integrity Act (FMFIA) (Correct answer)
Federal Information Security Modernization Act (FISMA)
Government Performance and Results Act (GPRA)

Correct answer: Federal Managers Financial Integrity Act (FMFIA)

FMFIA requires agency heads to evaluate and report on the adequacy of internal controls and financial management systems each year.

Question 7: An IG is offered a position with a contractor that the IG's office regularly audits. What is the primary ethical concern?

Conflict of interest and revolving door issues (Correct answer)
Loss of technical expertise to the IG office
Breach of confidentiality about salary
Violation of union agreements

Correct answer: Conflict of interest and revolving door issues

Post-employment restrictions exist to prevent conflicts of interest where personal financial interests in a prospective employer could influence ongoing official duties.

Question 8: Which standard requires that IG audit evidence be sufficient, appropriate, and relevant to support audit conclusions?

Office of Management and Budget Circular A-123
Administrative Procedure Act
Generally Accepted Government Auditing Standards (GAGAS) (Correct answer)
Federal Acquisition Regulation

Correct answer: Generally Accepted Government Auditing Standards (GAGAS)

GAGAS (Yellow Book) sets standards for evidence that must be sufficient, appropriate, and relevant to support findings and recommendations.

Question 9: Which red flag is most commonly associated with a billing scheme involving a fictitious vendor?

Vendor provides discounts for early payment
Vendor invoices are submitted quarterly
Vendor address matches an employee's home address (Correct answer)
Vendor has been on the approved list for over five years

Correct answer: Vendor address matches an employee's home address

A vendor address that matches an employee's personal address is a classic red flag indicating the employee may have created a fictitious vendor to route payments to themselves.

Question 10: How many days does a federal employee generally have to file a whistleblower reprisal complaint with the Office of Special Counsel?

3 years
90 days (Correct answer)
60 days
30 days

Correct answer: 90 days

Under the Whistleblower Protection Act, federal employees must file a reprisal complaint with the OSC within 3 years of the date they knew or should have known of the personnel action.

Question 11: Which governance principle requires that no single individual controls all phases of a transaction from initiation to completion?

Separation of duties (Correct answer)
Dual authorization
Independent verification
Management override

Correct answer: Separation of duties

Separation of duties divides key functions so no one person can initiate, approve, execute, and record a transaction, reducing fraud and error risk.

Question 12: The concept of 'tone at the top' in IG organizations means that:

Ethics training should begin with managers before staff
Senior officials are always responsible for employee misconduct
Leadership behavior sets the ethical culture for the entire office (Correct answer)
The IG should focus audits on senior leadership decisions

Correct answer: Leadership behavior sets the ethical culture for the entire office

Tone at the top refers to how leadership's own ethical behavior and stated values shape the overall organizational culture and employee conduct.

Question 13: Under the COSO framework, which component addresses an organization's ethical values and commitment to competence?

Risk Assessment
Monitoring Activities
Information & Communication
Control Environment (Correct answer)

Correct answer: Control Environment

The Control Environment is the foundational COSO component that sets the tone through ethical values, commitment to competence, and board oversight.

Question 14: An agency implements continuous monitoring of its financial transactions using automated data analytics. This BEST represents which type of control activity?

Physical safeguard
Detective control (Correct answer)
Directive control
Preventive control

Correct answer: Detective control

Continuous monitoring detects anomalies and errors after transactions occur, classifying it as a detective control activity.

Question 15: When an IG faces political pressure to drop an investigation from a high-ranking official, the correct response is to:

Pause the investigation pending review
Document the pressure and continue the investigation (Correct answer)
Comply if the official outranks the IG
Refer the matter to the Department of Justice immediately

Correct answer: Document the pressure and continue the investigation

The IG must document any interference attempts and continue lawful investigations; documented interference may itself warrant reporting to Congress.

Question 16: When an OIG issues a management advisory rather than a formal audit report, it typically indicates:

The audit was conducted under different standards than GAGAS
The findings are too serious to be included in a routine report
Management has already agreed to correct all findings
The matter involves less significant issues that do not warrant a full audit report (Correct answer)

Correct answer: The matter involves less significant issues that do not warrant a full audit report

Management advisories are used to communicate less significant observations that do not rise to the level requiring a formal audit report but still warrant management attention.

Question 17: Which scenario BEST illustrates the governance concept of 'tone at the top'?

The agency head publicly acknowledges and corrects an internal control failure identified by the IG (Correct answer)
The CFO mandates monthly reconciliations for all accounts
Human resources updates the ethics training curriculum annually
The IG recommends new software to automate procurement approvals

Correct answer: The agency head publicly acknowledges and corrects an internal control failure identified by the IG

A leader publicly owning and addressing a control failure demonstrates the transparency and accountability that define a strong ethical tone from the top.

Question 18: What is the 'PEACE' model of investigative interviewing, developed in the United Kingdom, designed to emphasize?

Parallel interviewing of multiple witnesses simultaneously
Ethical, non-coercive information gathering focused on truth-seeking rather than confession (Correct answer)
Physical evidence collection protocols
Aggressive interrogation to secure rapid confessions

Correct answer: Ethical, non-coercive information gathering focused on truth-seeking rather than confession

The PEACE model (Preparation, Engage and Explain, Account, Closure, Evaluate) is a structured, ethical interviewing framework focused on obtaining accurate information rather than extracting confessions through pressure.

Question 19: An IG discovers that a program is legal but highly inefficient and wasteful. The IG has professional authority to:

Transfer the funds to a more effective program
Shut down the program immediately
Publicly criticize the program manager
Report the inefficiency and make recommendations for improvement (Correct answer)

Correct answer: Report the inefficiency and make recommendations for improvement

IGs have authority to evaluate economy and efficiency and make recommendations, but they cannot unilaterally shut down programs or redirect funds.

Question 20: What role does respect play in professionalism?

Disrespecting others
Causing conflicts
Fostering positive relationships (Correct answer)
Ignoring colleagues

Correct answer: Fostering positive relationships

Respect is a cornerstone of professionalism, involving treating colleagues, subordinates, superiors, and the public with dignity and consideration. For an Inspector General, demonstrating respect is crucial for fostering cooperative working relationships, even during challenging investigations. It creates a positive work environment, encourages open communication, and enhances the overall effectiveness and credibility of the office.

Question 21: What is a 'tone at the top' indicator that an inspector general might review to assess an organization's compliance culture?

The ratio of auditors to program staff
Annual travel expense totals
Whether senior leaders publicly endorse ethics policies and hold violators accountable (Correct answer)
Number of vendor invoices processed monthly

Correct answer: Whether senior leaders publicly endorse ethics policies and hold violators accountable

Tone at the top is demonstrated by leadership's visible commitment to ethics—including communications, accountability actions, and consistency between stated values and behavior.

Question 22: A compliance program is considered effective when it does which of the following?

Ensures every employee passes an annual ethics test
Eliminates all instances of non-compliance
Detects, prevents, and corrects violations while promoting an ethical culture (Correct answer)
Transfers all compliance risk to external auditors

Correct answer: Detects, prevents, and corrects violations while promoting an ethical culture

An effective compliance program combines preventive, detective, and corrective elements within a culture of integrity—not a guarantee of zero violations.

Question 23: Which of the following represents a legally recognized risk of the Reid Technique that has led many law enforcement agencies to adopt alternative methods?

Federal courts have ruled it unconstitutional
Its confrontational approach can produce false confessions, especially from vulnerable populations (Correct answer)
It is too time-consuming for routine interviews
It requires specialized polygraph equipment

Correct answer: Its confrontational approach can produce false confessions, especially from vulnerable populations

Research has shown that the Reid Technique's high-pressure, accusatory approach can produce false confessions, particularly from juveniles, individuals with intellectual disabilities, or those who are psychologically vulnerable.

Question 24: Which of the following is a key distinction between an IG administrative investigation and an IG criminal investigation?

Administrative investigations use higher evidence standards than criminal ones
Administrative investigations can result in imprisonment
Criminal investigations require referral authority and coordination with prosecutors (Correct answer)
Criminal investigations do not require Miranda warnings

Correct answer: Criminal investigations require referral authority and coordination with prosecutors

Criminal investigations require coordination with prosecutors, proper legal authorities, and specific procedural protections that administrative investigations do not require.

Question 25: An Inspector General discovers that a federal agency's control self-assessment (CSA) process consistently rates all controls as 'effective' without supporting evidence. This situation MOST likely indicates:

Insufficient information technology controls
Inadequate risk assessment procedures
A well-functioning governance structure
Tone-at-the-top deficiency in the control environment (Correct answer)

Correct answer: Tone-at-the-top deficiency in the control environment

Unsupported self-assessments that uniformly show positive results suggest leadership is not genuinely committed to honest control evaluation, reflecting a tone-at-the-top problem.

Question 26: How can risk mitigation be achieved?

Increase vulnerabilities
Delay responses
Ignoring risks
Apply controls to reduce impact (Correct answer)

Correct answer: Apply controls to reduce impact

Risk mitigation is achieved by taking proactive steps to reduce the severity or likelihood of identified risks. This primarily involves applying various controls, such as preventive, detective, or corrective measures, to either lessen the probability of a risk event or minimize its potential negative consequences. The ultimate goal is to bring the organization's risk exposure down to an acceptable level.

Question 27: Which of the following best describes a 'hotline' as a fraud prevention tool in federal OIG offices?

A direct line to law enforcement for emergency arrests
An internal communications system for investigators
A tip line used exclusively for cybersecurity incidents
A confidential reporting mechanism for employees and citizens to report fraud, waste, or abuse (Correct answer)

Correct answer: A confidential reporting mechanism for employees and citizens to report fraud, waste, or abuse

OIG hotlines provide a confidential or anonymous channel for employees, contractors, and the public to report suspected fraud, waste, abuse, or mismanagement without fear of retaliation.

Question 28: During an OIG interview, an employee invokes their Fifth Amendment right against self-incrimination. What is the appropriate investigator response in an administrative proceeding?

Compel the employee to answer by granting use immunity (Correct answer)
Terminate the investigation immediately
Arrest the employee for obstruction
Accept the invocation and close the case

Correct answer: Compel the employee to answer by granting use immunity

In administrative proceedings, an agency may compel an employee to answer questions by granting use immunity, meaning the compelled statements cannot be used against the employee in a criminal prosecution.

Question 29: Which law protects federal contractor employees, subcontractor employees, and grantee employees who report fraud, waste, or abuse on federal contracts?

41 U.S.C. § 4712 (contractor whistleblower protections) (Correct answer)
The Lloyd-LaFollette Act
The National Defense Authorization Act whistleblower provisions
The Whistleblower Protection Act of 1989

Correct answer: 41 U.S.C. § 4712 (contractor whistleblower protections)

41 U.S.C. § 4712, enacted as part of the National Defense Authorization Act for Fiscal Year 2013 and made permanent in 2016, provides whistleblower protections for employees of federal contractors, subcontractors, and grantees.

Question 30: An IG finds that program managers are not documenting decisions because they fear audits. This behavior is an example of what compliance risk?

Segregation of duties failure
Conflict of interest
Regulatory capture
Risk aversion causing operational opacity (Correct answer)

Correct answer: Risk aversion causing operational opacity

When fear of oversight causes employees to avoid documentation, it creates opacity and undermines accountability—a compliance risk tied to culture and control environment.

Certified Inspector General® (CIG)

The CIG is the premier credential for senior inspector general professionals and their staff, assessing mastery across IG authority and independence, strategic oversight, professional ethics, leadership, and interdisciplinary coordination functions.

Questions

35 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds