IIA IIA-CRMA 考試大綱：

主題	簡介
主題 1	Internal Audit Roles and Responsibilities: This section of the exam measures the skills of a Risk and Compliance Officer and covers the internal audit activity’s responsibilities in delivering assurance and consulting services related to risk management. Candidates must understand how to assess the independence and competency of the audit function, coordinate with internal and external assurance providers, and contribute to the development of a risk assurance map that avoids duplication and ensures comprehensive coverage.
主題 2	Risk Management Assurance: This section of the exam measures the skills of an Internal Auditor and addresses evaluating risk assessment approaches and assurance processes. It includes using data analytics to support risk identification, designing and managing audit engagements based on risk prioritization, and assessing the organization’s risk management practices across various levels. Candidates must also evaluate risk controls within the systems development lifecycle, cybersecurity, and privacy concerns. Communication of findings, including how risks are managed and reported to senior leadership and the board, is also covered in depth.
主題 3	Risk Management Governance: This section of the exam measures the skills of a Governance Analyst and focuses on evaluating an organization’s governance structure and its use of risk and control frameworks. It covers assessing risk culture, risk oversight, and how governance influences the organization’s control environment. The section also looks at how risk management is embedded into corporate strategy, operations, and reporting systems, and how effectively the organization can adapt to emerging risks and communicate with stakeholders.

參考：https://www.theiia.org/en/certifications/crma/exam-preparation-resources/exam-syllabus/