WGU D560: Internal Auditing I

Internal Auditing I: Your On-Ramp to the Audit Profession

D560: Internal Auditing I is a three-competency-unit graduate course in WGU's School of Business. It sits in the Master of Science in Accounting, Auditing Specialization, where it opens a two-course sequence that continues with Internal Auditing II. WGU describes the course as giving you the basic knowledge and skills needed to succeed as an entry-level internal audit professional, and states that it aligns with Certified Internal Auditor (CIA) standards — which means the vocabulary you learn here is the vocabulary the profession actually speaks.

Direct answer: Treat the Institute of Internal Auditors' professional guidance as the spine of the course and everything else as commentary on it. Read the course material once for coverage, then drill the vocabulary — assurance versus consulting, independence versus objectivity, inherent versus residual risk — until each definition comes out cleanly and you can say who owns what. A definition-heavy assessment rewards precise wording and correct role boundaries far more than it rewards memorized lists.

If you have worked in accounting or external audit, some of this will feel familiar and some of it will quietly contradict your instincts. Internal audit is not external audit with a different employer. It answers functionally to the board or audit committee rather than to the finance organization, and its stated purpose is to add value and improve the organization's operations, not to render an opinion on financial statements. Students who carry over external-audit assumptions tend to lose points on exactly the questions that test that distinction.

WGU lists no prerequisites for D560, but comfort with financial statements and basic control language makes the reading go faster. If your accounting foundation feels shaky, a quick refresher on managerial concepts — the kind covered in C213 Accounting for Decision Makers — pays off when the course starts talking about business objectives and process risk.

What the D560 Objective Assessment Actually Covers

WGU's own course description frames D560 around four topic areas: the foundations of internal auditing, risk management, governance and controls, and fraud. It also names the IIA's International Professional Practices Framework (IPPF), including the code of ethics and standards, as the authoritative guidance the course is built on. In practice, that breaks down into:

• Foundations and professional guidance. What internal auditing is, the value proposition of the audit function, how the IIA's framework is structured, and the Code of Ethics.
• Independence and objectivity. Why organizational independence and individual objectivity are different things, what impairs each, and why the chief audit executive's reporting line to the board matters.
• Governance. Who does what — the board and audit committee's oversight role, management's ownership of controls, and the layered "lines" way of describing responsibility across an organization.
• Risk management. Risk identification and assessment, risk appetite and tolerance, the standard responses (accept, avoid, reduce, share), and the difference between inherent and residual risk.
• Internal controls. Preventive, detective, and corrective controls; control design versus operating effectiveness; entity-level versus process-level controls; and how controls trace back to business objectives.
• Fraud and technology risk. Fraud risk management as a governance activity, common red flags, the conditions that make fraud likely, the auditor's realistic responsibility for deterrence versus detection, and how general and application controls fit into the risk picture.

One wrinkle worth knowing before you start reading: the IIA reorganized its guidance in 2024, and the Global Internal Audit Standards took effect in January 2025, consolidating material the older 2017 IPPF spread across separate mandatory elements. Check which edition your course material and any outside resources use before you memorize a structure — borrowed flashcard decks are the likeliest place to pick up a stale one.

Assessment format: D560 is assessed by an objective assessment rather than a written performance task. Expect a proctored, multiple-choice-style exam, and confirm the current format and length on your own course page before you schedule, since WGU updates assessment structures periodically.

How Hard Is D560, and How Long Should You Plan For?

D560 is a fundamentals course, and its difficulty is a difficulty of precision, not complexity. Nothing in it requires heavy computation. What it requires is that you keep a dozen closely related terms straight under time pressure, because definition-heavy assessments tend to offer two nearly correct answers and let you pick the one that respects the role boundary.

Public discussion of this course is thin, since the auditing specialization enrolls a smaller cohort — so treat any timeline you read, including this one, as a rough starting point. The common note from students who do write about it is that the material reads easily but the assessment punishes skimming. A reasonable plan for someone new to internal audit is two to three focused weeks at roughly eight to ten hours a week; students already working in audit, compliance, or risk often move faster. Your term, your workload, and your prior exposure decide the pace.

The strongest early signal is the pre-assessment. Take it before you feel ready. A near-passing score on a cold attempt means you mostly need vocabulary polish; a score well below it means you need to read for structure, not just for content.

A Study Plan Built Around the Framework

The mistake is reading D560 linearly and hoping it sticks. Build the skeleton first, then hang detail on it.

Days 1–3: build the map. Before deep reading, write a one-page outline of the professional framework and the four topic areas on a single sheet. You want to be able to say, out loud, what internal auditing is, who it serves, and what guidance governs it. Everything you read afterward gets filed under one of those headings.

Days 4–10: read with retrieval, not highlighting. After each chapter or module, close it and write from memory: three key terms, one distinction the section was making, and one scenario where the concept would matter. This is active recall, and for a definition-heavy course it is worth more than a second read-through. Build a flashcard deck as you go — front side the term, back side both the definition and a one-line contrast with the term it is most often confused with (objectivity versus independence, assurance versus consulting, risk appetite versus risk tolerance).

Days 11–16: space the review and practice under conditions. Cycle your deck every other day rather than cramming it, and take the pre-assessment a second time under exam conditions — timed, no notes, no pausing. Then work the misses backward: for every wrong answer, write why the correct answer is correct and why your choice was tempting. That second half is where the learning happens.

Days 17–20: scenario reasoning. Pick a familiar business process — purchasing, payroll, revenue — and walk it end to end. What are the objectives? What can go wrong? Which controls address each risk, and are they preventive or detective? Who owns them, and what would internal audit's role be? That rehearsal is close to the reasoning scenario-style items ask for. If you have taken D102 Financial Accounting, reuse a cycle you already understand rather than learning a new one.

Mistakes That Sink Otherwise-Prepared Students

Three errors account for most avoidable trouble here. First, collapsing internal audit into external audit — answering as though the goal is a financial statement opinion, or as though internal audit reports to the CFO. Second, treating controls as a list to memorize instead of as a response to a specific risk tied to a specific objective; questions typically present a control in context and ask whether it fits. Third, overstating the auditor's fraud responsibility, which produces confident wrong answers about what internal audit must detect versus what it evaluates and reports.

A quieter fourth mistake: relying on unofficial "answer sets" sold on study-selling sites. They are frequently outdated, frequently wrong, and using them puts your academic standing at risk. Build your own deck from the actual course material — it is faster than you think, and it survives a course refresh.

D560 Readiness Checklist

• Can you say what internal auditing is, in the IIA's own terms, and explain what "adds value" means in practice?
• Can you describe how the IIA's professional guidance is structured and say which parts are mandatory?
• Can you distinguish independence from objectivity, and name what impairs each?
• Can you explain why the chief audit executive's reporting relationship to the board matters?
• Can you separate the board's, management's, and internal audit's responsibilities in a governance scenario?
• Can you explain how residual risk relates to inherent risk and control effectiveness, and pick an appropriate risk response?
• Can you classify a described control as preventive, detective, or corrective, and judge whether it addresses the stated risk?
• Can you name the difference between IT general controls and application controls, with an example of each?
• Can you state what internal audit is responsible for regarding fraud — and what it is not?

D560 FAQ

Is WGU D560 an OA or a PA?

D560 is assessed by an objective assessment. No written performance task is associated with it, but always confirm in your own course page before scheduling, since WGU revises assessment formats from time to time.

How many competency units is D560 worth?

Three competency units. WGU's program guidebook for the Master of Science in Accounting, Auditing Specialization places Internal Auditing I in the third term of the standard path, though the competency-based model means you can start it as soon as your term plan allows.

Is D560 hard?

It is a fundamentals course, so the concepts are approachable, but the assessment tests fine distinctions between similar terms. Students commonly report that the reading is manageable and the exam is unforgiving of skimming — which is a good argument for flashcards over rereading.

Do I need audit experience before taking it?

No. WGU lists no prerequisites, and the course is designed to bring someone new to internal audit up to entry-level competence. Prior accounting coursework mostly helps with speed, not with whether you can pass.

Does D560 help with the CIA exam?

WGU states that the course aligns with Certified Internal Auditor standards, so the frameworks and vocabulary overlap substantially with foundational CIA material. That is a genuine head start, though it is not a substitute for dedicated CIA exam preparation.

What comes after D560?

Internal Auditing II continues the sequence and works through the engagement process — planning, performing, communicating, and monitoring — in more depth. Students in the accounting master's often pair the auditing courses with reporting-heavy coursework such as D554 Advanced Financial Accounting I. You can browse the rest of our School of Business guides or the full WGU course guide index to plan the term ahead.

Official course details live on WGU's auditing specialization page. This site is an independent study resource and is not affiliated with or endorsed by Western Governors University.