Cleared the CFA exam last month after 8 weeks of dedicated prep. I'm an internal auditor with 6 years of experience, about half of which has involved fraud-related investigations in one form or another. Total study time was around 160 hours, roughly 20 hours per week. Sharing the breakdown because I had a hard time finding detailed prep timelines when I was starting out.
The content spans financial transactions and fraud schemes, legal frameworks, investigation techniques, and fraud prevention. I split time proportionally: about 35% on financial transactions (heaviest by volume), 25% on legal content (most unfamiliar to me personally), 20% on investigation, and 20% on prevention. The legal section was my weakest going in and I think I was right to front-load it — rules of evidence, interviewing constraints, and the legal elements of fraud don't translate from everyday audit work the way the financial schemes content does.
I spent the first 3 weeks almost exclusively on legal and financial transactions before rotating through the others. Biggest surprise: the actual exam felt more straightforward than the harder practice questions I'd been drilling. My practice scores were hovering around 71–74% and I was nervous, but the real exam felt more balanced than those sessions suggested.
If you're in audit and wondering whether your experience helps — it does, mostly for calibrating answer choices rather than knowing the content cold. The fraud prevention section in particular has questions that reward real-world judgment more than memorization.
The legal section is genuinely the hardest part for people without a legal background. In my experience the practice exams run harder than the real exam, which is actually useful — if you're passing practice tests consistently you're probably ready to sit.
Passed first attempt after 9 weeks and about 130 hours of prep.
Front-loading unfamiliar content is the right call and I wish I'd done the same. I started with investigation since it felt comfortable and spent the last two weeks cramming legal. Passed but it was closer than it should have been given how much total time I put in.
Congrats. 160 hours is more than I put in — I did about 120 — but I had a more forensic accounting background so the financial transactions section came easier. The legal content is where most audit-track candidates lose time and it sounds like you handled it right by front-loading it.
Did you find the video lectures worth watching or did you end up skimming them? I've been using a prep course for 2 weeks and the videos feel long. Wondering if the written study guide alone is sufficient or if the videos add something the text doesn't cover.
Congrats on the CFA pass! I just cleared CRISC last month and honestly the thing that moved the needle for me was drilling MCQs until I stopped second-guessing myself. I'd read the material, feel like I got it, then bomb the practice questions because the wording tripped me up. Once I found a solid set of free crisc certification mcq resources and just hammered them daily, my confidence on the actual exam was completely different.
It's not glamorous advice but that's really it. The concepts weren't that hard once I accepted that the exam tests how you apply them, not just whether you recognize them. Give yourself at least two weeks of pure question practice before your date. You'll know when you're ready because the wrong answers start feeling obviously wrong, not just less right.
Congrats on passing! I cleared my CRISC a few months back and the one thing that actually moved the needle for me was stopping the passive reading and forcing myself to do scenario-based questions from day one. It felt uncomfortable early on because I kept getting stuff wrong, but that's kind of the point. You can't just memorize the framework definitions and expect the exam to reward you for it.
The risk response domain tripped me up the most. I kept second-guessing myself between "mitigate" and "transfer" on questions where both seemed reasonable, and what helped was anchoring every answer back to the business context in the scenario rather than going with my gut. Once I started doing that consistently, my practice scores jumped pretty fast. If you're already doing fraud work in audit, you've got better instincts than you probably think -- just trust the process and don't rush the last two domains.
I failed my first attempt at CRISC and honestly it stung more than I expected. I'd gone in thinking my IT background would carry me, but the way the exam tests risk management concepts isn't really about technical knowledge -- it's about how you think through governance and response frameworks. Completely different muscle.
Second time I stopped trying to memorize and started working through practice scenarios instead, which changed everything. If you're prepping for it, don't sleep on the ISACA QAE database. It's not cheap but the questions are closer to the real thing than anything else I found. Passed with a comfortable margin the second go-round and I genuinely think the first failure was the best thing that happened to my prep.