CGAP-Key-Graphic[1] Certified Government Auditing Professional (CGAP)

The IIA recognizes the important contributions of government auditors and has developed a certification program that distinguishes leaders in public sector auditing – the Certified Government Auditing Professional (CGAP). Auditors from various levels of government who recognize that auditing in the public sector has unique challanges developed the program.

CGAP candidates must meet the following eligibility requirements for education, character and work experience.

Education: CGAP candidates must hold a 3- or 4-year post-secondary degree (or higher).

The Global Board of Directors has approved an alternate path to eligibility for the CGAP for those candidates who do not possess a Bachelor’s degree from an accredited university. Candidates may now become eligible for the CGAP, subject to approval, who possess:

Two years post-secondary education and five years verified experience in internal audit or its equivalent, OR
Seven years verified experience in internal audit or its equivalent. For further details, please see Certification Candidate Handbook.

Character Reference: The candidate must exhibit high moral and professional character and submit a completed Character_Reference_Form signed by a CIA, CGAP, CCSA, CFSA or the candidate’s supervisor.

Work Experience: The candidate must acquire two years of auditing experience in a government environment (federal, state/provincial, local, quasi-governmental areas, authority/crown corporation). A completed Experience_Verification_Form is required. Candidates may apply to the program and sit for the exam prior to satisfying the professional experience requirement, but will not be certified until all program requirements have been met.

Proof of Identification: Candidates must provide proof of identification in the form of a copy of the candidate’s official passport or national identity card. These must indicate current status; expired documents will not be accepted.

Eligibility Period
The certification program’s eligibility requires candidates to complete the program certification process within four years of application approval. If a candidate has not completed the certification process within four years, all fees and exam parts will be forfeited.

You need to apply for admission by loggin in to the CCMS-system here:


Read the CCMS User Guide here.

Exam Format
The CGAP exam includes 115 multiple-choice questions, covers four domains, and requires a completion time of two hours and fifty-five minutes. The exam includes questions on International Organization of Supreme Audit Institutions (INTOSAI) Government Auditing Standards.

Standards tested on the CGAP exam:
1. The Institute of Internal Auditors (IIA) International Professional Practices Framework (IPPF) (P) (Includes the Code of Ethics, International Standards for the Professional Practice of Internal Auditing, Implementation Guidance, and Supplemental Guidance)
2. International Organization of Supreme Audit Institutions (INTOSAI) Standards and Code of Ethics (A)

Press the link to get more detailed information about the content of each domain:

Domain I: Standards, Governance, and Risk/Control Frameworks (10-20 percent)
Domain II: Government Auditing Practice (35-45 percent)
Domain III: Government Auditing Skills and Techniques (20-25 percent)
Domain IV: Government Auditing Environment (20-25 percent)

Sample CGAP Exam Questions
The IIA provides a limited number of sample CGAP exam questions (with answers) to give candidates an understanding of the types of questions that typically appear on the CGAP exam.

Apply for admission to the CGAP program

The IIA’s Certification Candidate Management System (CCMS) is a powerful, user-friendly application to help you apply for, complete, and maintain your certifications and related information, while keeping you connected to and informed about The IIA’s certification programs.

After you log in, you’ll be able to:

  • Apply for IIA certification programs.
  • Register for IIA certification examinations.
  • Review your certification status.
  • View your exam score report.
  • Review your next steps in the certification process.
  • Update your personal information.
  • Review your credential and exam history.


Link to:
Job and Industry Codes


If you have any difficulty using the Certification Candidate Management System (CCMS), please reference the CCMS User Guide.

Computer-based Testing
The CGAP exam is available through computer-based testing, allowing you to test year-round at more than 500 locations worldwide. Candidates are able to sit for exams at any IIA-authorized Pearson VUE testing center worldwide, regardless of whether the testing center is located in your hometown or country. To locate the testing centers nearest you, visit the Pearson VUE website. You must apply and register in The IIA’s Certification Candidate Management System (CCMS) prior to scheduling an exam.

You pay by credit card when applying for the program or register for an exam. The pricing structure is as follows:

………………………….. Members      Non-members

Application Fee           USD 200      USD 300
Exam Fee                      USD 350      USD 450

2017 Certification Candidate Handbook

Exam Preparation Resources
The Certified Government Auditing Professional® (CGAP®) exam is a self-study exam and does not require a prescribed curriculum. Candidates may choose their own method of preparing for the exam.

CGAP Study Guide
The IIA publishes a CGAP study guide to assist candidates in preparing for the exam. It is available for order through the IIA’s Bookstore. The guide provides a general overview of the topics that will be covered in the exam. However, it is critical that candidates perform additional study in areas where their experience or background dictates the need for additional review.

We also recommend that candidates supplement their studying by reviewing the IFAC’s International Standards on Auditing and INTOSAI’s Code of Ethics and Auditing Standards.

Continuing Professional Education Requirements (CPE)

Government auditors are responsible for maintaining and updating their knowledge and skills related to improvements and current developments in auditing standards, procedures, and techniques. This document contains the mandatory Continuing Professional Education (CPE) requirements for the Certified Governmet Auditing Professional (CGAP) and specifies the method of reporting by CGAP who wish to keep their designation in good standing.

CPE Requirements for CGAPs
This document contains the mandatory Continuing Professional Education (CPE) requirements for Certified Government Auditing Professionals (CGAPs). It also specifies the method of reporting by CGAPs who wish to keep their designation in good standing.

NOTE: If you are a Certified Internal Auditor® (CIA)®, the CPE reporting that you complete for the CIA program satisfies the CPE reporting requirements for the CGAP and all other IIA specialty certifications. CPE reporting for specialty certifications requires that 25% of the hours earned must be in the specialty area of expertise.

CGAP professionals are responsible for:

  • Maintaining their knowledge and skills.
  • Updating their knowledge and skills related to improvements and current developments in internal auditing standards, procedures, and techniques.

CPE Requirement Regarding IIA International Standards
1. In order to encourage understanding of and compliance with The IIA’s International Standards for the Professional Practice of Internal Auditing (Standards), The IIA’s Professional Certification Board (PCB) has instated a requirement that CGAPs stay abreast of the Standards as part of their CPE.
2. CGAPs must review or receive training on the Standards at some point during their CPE reporting period.
3. If you are completing your CPE reporting form and have not already met this requirement, please take a moment to review the standards before submitting your form.
4. While there, we also encourage you to review the Implementation Guidance (accessible with an IIA member password) and other sections of The IIA’s Professional Practices Framework.

Certificate holders are required to self-certify as to the completion of the required continuing education hours. It is the CGAP’s responsibility to assure that the CPE hours claimed conform to the guidelines established by the PCB. Forms are submitted by CGAPs on an annual basis and serve as signed statements that all applicable continuing professional development requirements have been met.

CGAPs must submit CPE reporting forms in The IIA’s Certification Candidate Management System (CCMS). The reporting deadline is December 31 each year.

In order to facilitate reporting, CGAPs who also hold the CIA designation can satisfy the requirements of both programs by reporting appropriate CPE for the CIA designation only. The Institute will issue an acknowledgment of compliance to each CGAP meeting the requirements of this guidance. The Institute will keep information on the active/inactive status of CGAPs. The PCB, upon request, may grant partial or complete exemption from CPE requirements for individuals when good cause exists, such as military service or individual hardship.

Each CGAP should submit an appropriate CPE reporting form to The Institute, without supporting documentation, in compliance with CPE requirements. Each CGAP should maintain a copy of the CPE reporting form, along with all supporting documentation, for at least three years after the records no longer apply to filed CPE reports. Records must be made available to The Institute or its designee at The Institute’s request. The records maintained by the CGAP in support of the reporting form filed with The Institute should include, as appropriate, the following information:

  • Title of program and/or description of content
  • Dates attended
  • Location of course or program
  • Sponsoring organization
  • Contact hours of credit as recommended by the course sponsor
  • A letter, certificate, or other written independent attestation of course completion
  • Documentation supporting publications, oral presentations, and committee or other participation  CGAP Reporting Categories

Practicing CGAPs
A CGAP who is practicing government auditing must complete a total of 20 hours of acceptable CPE every year.

Non-practicing CGAPs
A CGAP who is not practicing government auditing may request non-practicing status by notifying the Institute in writing. Non-practicing CGAPs must complete a total of 10 hours of acceptable CPE every year. As long as their CPE requirements are met, non-practicing CGAPs may use the CGAP designation; however, if they resume practicing government auditing, they must report as a practicing CGAP.

Retired CGAPs
A CGAP who is not practicing government auditing because of retirement may request retired status by notifying the Institute in writing. Retired CGAPs are not responsible for completing CPE requirements. Retired CGAPs may use the CGAP designation; however, if they resume employment, they must report as a practicing or non-practicing CGAP, as appropriate.

Inactive Status
The Institute automatically places a CGAP in inactive status when the CGAP fails to meet established CPE requirements. CGAPs in the inactive status may not use the CGAP designation. Any wrongful use of the CGAP designation will be reported to the IIA’s Ethics Committee for disciplinary action.

Restoration to Active CGAP Status
Candidates that are inactive for less than 12 months need to report CPE for the prior year. The number of hours required is equivalent to the reporting status (practicing or non-practicing). Candidates that are inactive for greater than 12 months fall under the reinstatement policy and are required to submit 40 hours of CPE. In addition, inactive CGAPs will be required to pay the applicable reinstatement fee at the time of reporting.

Qualifying CPE Activities
It is anticipated that CGAPs will maintain the high standards of the profession in selecting quality educational programs to fulfill the CPE requirements. The following general criteria are to be satisfied in order for a continuing education program to be accepted:

The overriding consideration in determining whether a specific program is acceptable is that it shall be a formal program of learning that contributes directly to the professional competence of a CGAP. Acceptable formal programs should:

  1. Contribute to the professional competence of participants.
  2. State program objectives which specify the level of knowledge the participants should have attained, or the level of competence to be demonstrated upon completing the program.
  • State education or experience prerequisites, if appropriate for the program.
  • Be developed by individuals qualified in the subject matter and instructional design.
  • Provide program content which is current.
  • Be on a professional level and related to the CGAP Topic Outline.

The CGAP Examination Topic Outline includes:

  • Standards and control/risk models
  • Government auditing practice
  • Government auditing methodologies & skills
  • Government auditing environment

Activities other than those listed in this guidance may be deemed acceptable if the CGAP can demonstrate that they contribute to professional competence. Substantiating that a particular activity qualifies as acceptable and meets the requirements is the responsibility of the CGAP.

CPE credit will be awarded for whole hours only with a minimum of 50 minutes constituting one hour. As an example, 100 minutes of continuous instruction would count for two hours; however, more than 50 minutes but less than 100 minutes of continuous instruction would count for only one hour. Only class contact or acceptable self-study hours are allowable. For chapter meetings throughout the reporting period or continuous conferences/conventions when individual segments are less than 50 minutes, the sum of the segments should be considered one total program. For example, five 30-minute presentations would equal 150 minutes and should be counted as three contact hours.

CGAP Examination
Hours are awarded for the year in which the CGAP certification is earned. (Candidates receive 20 hours in the year the certification is awarded and 20 hours the subsequent year).

A maximum of 20 CPE hours may be awarded in the education category each year reported. At least 5 of the 20 CPE hours required must be in this category. Educational activities include:

  1. Professional education and development programs, such as seminars and conferences, provided by national/federal, state, and local auditing and accounting organizations.
  2. Technical sessions at meetings of national/federal, state, and local auditing and accounting organizations and chapters.
  3. Formal in-house training programs.
  4. Programs of other sponsors (industrial, professional societies, etc.).
  5. College or university courses passed (credit and non-credit courses).
  • Fifteen hours of CPE credit are awarded for each semester hour of college/university credit earned;
  • Ten hours of CPE credit are awarded for each quarter hour of college/university credit earned.

6. Other certification examinations passed.

  • A maximum of 20 hours may be awarded in the year passed.
  • 10 CPE hours are awarded for passing each part of another appropriate professional certification examination.

7. Formal correspondence and self-study programs relevant to government audit that include evidence of completion.

A maximum of 10 hours may be awarded in the publications category each year for books, articles, research papers, and training materials. Generally, one full journal page of single-spaced print is equal to two hours of CPE credit. Contributions to publications should pertain to government audit disciplines related to CGAP Examination Topic Outline. Published articles or books not related directly to government audit are acceptable if CGAPs are able to demonstrate that these activities contribute to their professional proficiency.

A maximum of 10 hours may be awarded in the publications category each year. Generally one full journal page of single-spaced print is equal to two hours of CPE credit, with the following limits on one translation:

Books: 12 hours
Articles: 6 hours
Research papers: 6 hours

Translations of publications should pertain to certification domains or disciplines related to the Common Body of Knowledge, and/or the specialty examination topic outlines. Translations of published articles or books not related directly to internal auditing are acceptable if the certified individual is able to demonstrate that these activities contribute to their professional audit proficiency.

Oral Presentations
A maximum of 10 CPE hours may be awarded in the oral presentation category each year. The hours reported for the first presentation will be based on the presentation time, plus credit for preparation time equivalent to three times the presentation time.  Subsequent presentations of the same material may be reported as presentation time only, up to a maximum of 5 CPE hours each year.

A maximum of 10 CPE hours may be awarded in the participation category each year for participation as an officer or committee member in a professional industry organization related to government auditing. One CPE hour for each hour of qualifying participation will be awarded.

External Quality Assessments
A maximum of 10 CPE hours may be awarded each year in the category of external quality assurance review activities. One CPE hour will be awarded for each hour spent on site, with the following limits on any one quality assurance review activity:

  1. Independent (external) validation of an internal audit activity’s self-assessment (as defined in the Professional Practices Framework): maximum of 5 CPE hours per review.
  2. One-week external quality assurance review: maximum of 5 hours per review.
  3. Two-week external quality assurance review: maximum of 10 hours.

No CPE hours will be awarded for activities such as preparation time and writing the report.

CPE Audit Process

On a test basis, The Institute will verify the records of CGAPs and/or course sponsors in a manner deemed appropriate to determine compliance with the requirements set forth in this guidance. The potential penalty for submitting false information will be determined in accordance with the administrative directive, Disciplinary Policies and Procedures.​