CRMA Exam: Why and How It's Changing

Risk management assurance is an essential internal audit responsibility. As the risk landscape has continued to expand and change, The IIA recognized the need for the Certification in Risk Management Assurance® (CRMA®) program to keep pace. This required a thorough evaluation of the exam requirements and content to ensure they reflect the skills needed to audit today’s emerging risks, as well as consider the organizational view required to effectively execute risk management assurance. The IIA conducted two studies — a market study and a job analysis study. The market study revealed perceived ambiguity between the CRMA and the Certified Internal Auditor® (CIA®). Additionally, it confirmed that more business experience and a deeper level of risk management knowledge are required in order to provide holistic and effective risk management assurance. As such, the new CRMA is positioned as a career pathway for internal auditors after achieving the CIA designation. It is the only risk management assurance certification for internal auditors.

The amount of risk management and internal audit-specific experience required to sit for the exam has increased, and candidates must hold an active Certified Internal Auditor (CIA) designation to apply for the enhanced program. Additionally, the CRMA exam itself has been revised, with updates that include changes to the exam syllabus, length, and types of questions asked.

*Work experience is an “exit” requirement for the CRMA program. Candidates with less experience may apply for the CRMA program and sit for the exam. However, to obtain the designation, the experience requirement must be met before the two-year program window expires.

Select and View Exam Syllabus: 2011 CRMA Exam Syllabus | 2021 CRMA Exam Syllabus

Question Types: View an interactive demonstration of potential question types included in the new CRMA exam.