The IIA offers a comprehensive certification portfolio for internal auditors that can serve as the key to unlocking your next opportunity within the profession; enhancing your credibility and adding clout to your resume.
By earning your Certified Internal Auditor® (CIA®), and Certification in Risk Management Assurance™ (CRMA®) certification, your clients and employer know that you are a valuable team asset who is highly motivated, knowledgeable, and committed to ensuring quality is part of everything you do.
IIA certifications set you apart from other professionals, unlocking your full potential and opening up countless doors of opportunity for career growth and success. See what awaits you on the other side of the door.
Earning a professional credential from The IIA is the best way to demonstrate your commitment to advancing in this competitive niche and communicating your breadth of knowledge.
If your goal is to become a trusted advisor to the audit committee and executive management in the critical areas of risk assurance, governance processes, quality assurance, or control self-assessment, the CRMA designation is for you.
Job analysis and stakeholder surveys have indicated a key element to unlocking internal audit’s full potential can be found in a professional’s ability to provide advice and assurance on risk management to audit committees and executive management. In response, The IIA developed the CRMA designation.
The standard CRMA Core Exam will be a 100-question, multiple-choice exam, with a seat time of two hours. These exams will be instantly scored like all of the other IIA exams, and will be administered at Pearson VUE testing centers around the world. All Certification in Risk Management Assurance (CRMA®) eligibility requirements will apply.
The CRMA is designed for internal auditors and risk management professionals with responsibility for and experience in providing risk assurance, governance processes, quality assurance, or control self-assessment (CSA). It demonstrates an individual’s ability to evaluate the dynamic components that comprise an organization’s governance and enterprise risk management program and provide advice and assurance around these issues.
The CRMA is one more mark of professional distinction for internal audit practitioners. Earning the CRMA will assist you in demonstrating your ability to:
The CRMA exam is available through computer-based testing, allowing you to test year-round at more than 500 locations worldwide. Candidates are able to sit for exams at any IIA-authorized Pearson VUE testing center worldwide, regardless of whether the testing center is located in your hometown or country. To locate the testing centers nearest you, visit thePearson VUE website. You must apply and register in The IIA’s Certification Candidate Management System (CCMS) prior to scheduling an exam.
Revised Exam Syllabus (effective Oct 1, 2021)
The revised syllabus sets out to ensure that all concepts are assessed at a proficient cognitive level. In other words, the exam does not require candidates to simply memorize or demonstrate basic comprehension of concepts. Instead, it is designed to test candidates’ application of concepts and their ability to analyze and evaluate data, make sound judgments, and formulate conclusions and recommendations.
III. Risk management assurance (55%)
For additional details on each domain, click here
CRMA candidates must maintain and active Certified Internal Auditor (CIA) designation to participate in the CRMA program. If you have any questions, submit a case via your profile in the Certification Candidate Management System (CCMS).
| Entry | Exit |
| Active CIA Designation | CRMA Examination |
| Government Issued ID | 5 year of Internal Audit and/or risk management experience |
*Work experience is an “exit” requirement for the CRMA program. Candidates with less experience may apply for the CRMA program and sit for the exam. However, to obtain the designation, the experience requirement must be met before two-year program window expires.
The CRMA program window is two years, meaning that candidates have two years from the date they are accepted into the program to complete the program requirements (i.e., pass the exam and provide evidence that they have obtained five years of internal audit and/or risk management experience).
If you applied to the original CRMA program (before March 31, 2021), your program window expires on the expiration date you were originally given or December 22, 2022, whichever occurs first. Please refer to the “CRMA Program: Why and How It’s Changing” handbook for more information about how the recent CRMA program update may affect you.
The CRMA exam is a nondisclosed examination. Candidates in the program agree to keep the contents of the CRMA exam confidential and therefore may not discuss the specific exam content with anyone except The IIA’s Global Certifications Department. Unauthorized disclosure of exam material will be considered a breach of the Code of Ethics and could result in disqualification of the candidate or other appropriate censure. For more information regarding exam security and confidentiality, please visit The IIA’s Exam Security Webpage. If you have questions, comments or concern regarding exam security, misconduct, or the testing center, contact The IIA at [email protected].
The CRMA exam is a non-disclosed examination, which means that current exam questions and answers will not be published or divulged.
NOTE: Exam topics and/or format are subject to change as approved by The IIA’s Professional Certification Board (PCB).
For more information or assistance, visit https://www.theiia.org/en/certifications/crma/ or email [email protected].
