CITP Certified Information Technology Professional (AICPA) Practice Test

59 questions available

Build your confidence for CITP Certified Information Technology Professional (AICPA). Practice the concepts, understand the answers, and strengthen your knowledge one question at a time.

Try a sample question
Try 5 free questions
No account needed. A free account includes 20 questions for this exam.
Certification exam
Professional Level
Your practice
59 Practice questions
59 minutes Practice Time
Try 5 free questions
No account needed. A free account includes 20 questions for this exam.
The bank 59 Practice questions checked against the official objectives.
59 practice questions

Exam overview and details

AICPA specialty designation for CPAs covering information security, IT governance, business intelligence, and technology risk management for accounting professionals.

Sample Questions

Choose an answer and explore the explanation to see how practice works.

System and Organization Controls Reporting

An external audit team is evaluating controls at a regional bank that uses a SOX-scoped loan-origination platform. The controller provides screenshots, user lists, and vendor reports, but the evidence is incomplete for Type 1 vs Type 2. Which procedure or conclusion is most appropriate?

Data Management

A finance transformation team at a online retailer is releasing a dashboard from the PCI payment environment. The revenue manager says the numbers look plausible, but internal audit asks how retention will be governed before reliance. Which action is most appropriate?

Information Security Governance

A CITP advising a university foundation is preparing for a September finance committee meeting about the donor-management SaaS. The treasurer wants a defensible recommendation on authentication, but operations is pushing a faster tool-led answer. Which response best fits the CITP body of knowledge?

System and Organization Controls Reporting

An external audit team is evaluating controls at a university foundation that uses a donor-management SaaS. The treasurer provides screenshots, user lists, and vendor reports, but the evidence is incomplete for SOC 3. Which procedure or conclusion is most appropriate?

Information Security Governance

A CITP advising a insurance broker is preparing for a July external auditor meeting about the claims analytics warehouse. The internal audit director wants a defensible recommendation on policy hierarchy, but operations is pushing a faster tool-led answer. Which response best fits the CITP body of knowledge?

Exam insights and study advice

In today's digital economy, the intersection of finance and technology is where critical business risks and opportunities emerge. The CITP credential matters because it equips professionals to assess system controls, extract strategic insights from data, advise on technology implementations, and ensure regulatory compliance in complex IT environments. This practical expertise is essential for protecting assets, enabling data-driven decision-making, and implementing technologies like blockchain, AI, and cloud computing securely and effectively within financial frameworks.

Frequently Asked Questions

I am a CPA but not a technical programmer. Is this credential for me?

How much hands-on IT experience is required before attempting the exam?

How does CITP differ from other IT certifications like CISA or CISSP?

What is the primary study resource for the exam?

What are the maintenance requirements for the credential?