Skip to main content
CIA · Study plan

How to pass CIA Part 2: study priorities and a six-week plan

Prepare for Part 2 by practising risk to objective, criteria and scope, evidence, findings. The six-week sequence below is an adjustable example: cover the domains, mix unfamiliar cases, then rehearse the 120-minute sitting. It is not a pass guarantee or an official study-hour recommendation.

By MiloPrep editorial team

Your Part 2 preparation sequence*

  • 1

    Focus
    Business risk, objectives and criteria
    Finish with
    Turn three business risks into audit objectives

  • 2

    Focus
    Scope, resources and work programs
    Finish with
    Build a defensible procurement test plan

  • 3

    Focus
    Evidence, sampling and analytics
    Finish with
    Explain population, selection and evidence limits

  • 4

    Focus
    Analysis, findings and supervision
    Finish with
    Write a supported exception and reviewer trail

  • 5

    Focus
    Mixed planning and fieldwork cases
    Finish with
    Maintain planning coverage while repairing evidence errors

  • 6

    Focus
    Full sitting and targeted repair
    Finish with
    Rehearse 100 questions over 120 minutes

Choose drills that match this part

When two answers appear plausible, identify the fact that makes one better in this scenario. Explain the incorrect options as well as the key. Keep short mixed checks so early topics remain active.

Drill and checkpoint

  • Risk to objective

    Work to do
    Convert a business risk into an assurance objective before choosing procedures.
    Checkpoint
    Each procedure answers an objective.

  • Criteria and scope

    Work to do
    Identify the population, period, locations and benchmark.
    Checkpoint
    Avoid a conclusion about untested areas.

  • Evidence

    Work to do
    Contrast direct confirmation, source records and unsupported explanations.
    Checkpoint
    Explain reliability and limitations.

  • Findings

    Work to do
    Separate condition, criteria, cause and effect.
    Checkpoint
    Support the consequence rather than inventing it.

Use an engagement chain as the baseline task

Choose a process you can understand, such as supplier setup. State the business risk, audit objective, scope, criterion and evidence you would need. Then critique the chain: could the proposed test answer the objective, and would the conclusion extend beyond the selected population?

Use the weak links to allocate study. If the objective is vague, repair planning. If the objective is sound but the evidence is irrelevant, repair procedure selection. If evidence is appropriate but the conclusion overstates it, repair evaluation. A total practice score cannot make these distinctions for you.

Practise evidence direction and limitations explicitly

For completeness, begin with a population that can reveal what is missing from the target record. For a case about the validity of recorded items, the reasoning changes. Draw the populations and explain the direction before choosing from the options.

Next, change one feature: the extract is incomplete, the record is copied without provenance, or the sample contains no exceptions. State what the new fact limits. This prevents a mechanical answer such as “external is always reliable” or “no exceptions means no risk.”

A readiness review without a fabricated pass cutoff

Review coverage, reasoning and pace separately. A familiar mock score can conceal missing domains. Decide whether you can handle fresh questions and explain uncertain answers, then compare the remaining gaps with the time left before your appointment.

Review three dimensions

  • Coverage

    Evidence to collect
    Every domain has been studied and applied
    If it is weak
    Add the omitted outcomes

  • Reasoning

    Evidence to collect
    You can explain choices in new cases
    If it is weak
    Return to contrasting cases

  • Pace

    Evidence to collect
    You complete a 100-question sitting within 120 minutes
    If it is weak
    Measure and repair long stalls

Mix planning and fieldwork without losing the objective

Planning is a large part of the outline, but do not treat every weak result as a need for more planning questions. Include analysis, documentation, supervision and communication. Ask which stage the case concerns and whether the proposed action is timely and proportionate.

A refusal of records during fieldwork needs a documented response to the limitation. It is not repaired by writing a more ambitious original objective. Similarly, a weak workpaper needs clearer support for its conclusion, not merely an attractive report template.

Use the mock to make a specific next-week decision

Imagine a learner completes 100 questions within 120 minutes but misses unfamiliar evidence cases. The timing result is useful; the remaining gap is reasoning. Keep one measured mixed block while allocating the main repair time to evidence relevance and conclusion limits.

If the learner instead explains the cases well untimed but leaves many unanswered, inspect the stalls and practise shorter timed blocks before another full sitting. Use both observations. A faster result that depends on ignoring scenario conditions is not improved readiness.

Replace the drill when it is not fixing the error

Treat a recurring miss as a signal to change the task, not simply increase the question count.

Problem-specific repairs

  • Select procedures before defining the objective

    Repair
    Write risk, objective and criterion first
    Fresh check
    A new business process with a different risk

  • Confuse completeness and occurrence

    Repair
    Draw the source-to-record testing direction
    Fresh check
    Goods-received versus recorded-payables case

  • Treat inquiry as conclusive

    Repair
    Rank evidence for this exact objective
    Fresh check
    A conflicting-records scenario

  • Overstate sample results

    Repair
    State what the population and design permit
    Fresh check
    A zero-exception sample with sampling risk

Worked repair: a duplicate record is not yet a duplicate payment

A data match identifies the same supplier, invoice number and amount twice. The learner concludes fraud. Replace that jump with an investigation path: check whether one record is a reversal, whether both were paid, whether the population contains duplicates from extraction, and what underlying documents show.

Retest with a different anomaly such as two employees sharing a bank account. The same discipline applies: an exception directs inquiry but does not establish its cause. Require a statement of what evidence would support the conclusion before selecting an action.

Use the exit check to choose the next activity

Continue when the learner can connect objective, evidence and conclusion in a fresh case. Return to instruction when the process itself is unclear. Change the drill when the learner knows the concept but applies it to the wrong stage. Extend the plan if major outcomes remain uncovered.

Keep the repair record linked to an actual syllabus outcome. This avoids spending the entire final week on whichever topic produced the most emotionally memorable error while leaving less conspicuous gaps unaddressed.

Original worked case

Repair planning before adding more sampling drills

You correctly calculate sample sizes but keep selecting tests before identifying the engagement objective. Your next study block is two hours.

Reveal the decision and reasoning

Use the first hour to turn three risks into objectives, criteria and procedures. In the second hour, mix those cases with evidence questions and justify why each procedure answers its objective.

A technically sound sampling method cannot rescue a test aimed at the wrong question. The next study block should address the earlier decision.

An editorial teaching example, not an official IIA question or a prediction of exam content.

Common questions

Can everyone pass CIA Part 2 in six weeks?
No. The sequence shows study order, not a guaranteed duration. Your experience, available hours and initial gaps determine whether it is realistic.
What practice percentage means I am ready?
This guide does not set a pass-predictive percentage. Use fresh-question reasoning, complete coverage and realistic timing as separate checks.

Sources and editorial notes

Official exam facts and provider package descriptions are supported by the references below. Study schedules, scenarios and fit judgments are our editorial work. They do not establish a required study duration, a pass probability or comparative learning outcomes.

MiloPrep is independent and is not affiliated with or endorsed by The IIA or the providers discussed. Product comparisons describe our own offering alongside provider information. Names and marks belong to their owners.

Notes

  • * Your Part 2 preparation sequence: An editorial sequence. Extend a week when the checkpoint exposes a gap; no fixed daily workload is implied. ↩ Return to content