CFF logo
Focused certification exam prep
Start practice

CFF Exam Domains 2026: Complete Guide to All 8 Content Areas

TL;DR
  • The CFF exam covers eight weighted content areas grouped into two modules: 55% Core Knowledge, Information, and Skills and 45% Core Practice Areas.
  • Information Gathering, Preservation of Evidence, and Analysis and Investigative and Fraud Risk Management each carry 25% of the exam.
  • Litigation Services Concepts, Methodologies, and Procedures adds 20%, so three areas account for 70% of content.
  • The Global Standard exam has 175 multiple-choice questions in four hours; the Experienced Pathway exam has 60 questions in two hours.

How the CFF Blueprint Is Built

The Certified in Financial Forensics credential is administered by the AICPA, and its examination is organized around a content specification that divides the tested material into eight weighted areas. A common misunderstanding is that "eight domains" means eight modules. It does not. The eight areas sit inside two official modules: Core Knowledge, Information, and Skills (55% of the exam) and Core Practice Areas (45%). The public registration page uses a slightly different label for the first group, Core Information, Knowledge, and Skills, but the eight headings and their weights are consistent.

It is also worth being precise about what the headings represent. They are exam objectives, meaning statements of what the exam may test, not a preparation curriculum. The weights tell you how much of the exam draws on each area; they do not tell you how many hours to study each one. A domain that is only 5% of the exam can still be the foundation for a dozen scenario questions that appear to be about something else. If you are still deciding whether the credential fits your career, start with what CFF certification is and then return here for the detailed blueprint.

Read the weights as exam coverage, not study hours: The percentages describe how the exam draws on each area. They are a starting point for prioritization, not a formula. Your own background (audit, valuation, fraud investigation, or litigation support) should shift the time you give each area.

The Eight Weights at a Glance

DomainNameWeightModule
1Professional Standards and Roles5%Core Knowledge, Information, and Skills
2Legal Systems, Courts, and Dispute Resolution5%Core Knowledge, Information, and Skills
3Laws, Regulations, and Guidance5%Core Knowledge, Information, and Skills
4Engagement Initiation and Planning5%Core Knowledge, Information, and Skills
5Information Gathering, Preservation of Evidence, and Analysis25%Core Knowledge, Information, and Skills
6Reporting and Communication of Findings10%Core Knowledge, Information, and Skills
7Investigative and Fraud Risk Management25%Core Practice Areas
8Litigation Services Concepts, Methodologies, and Procedures20%Core Practice Areas

Two things stand out. First, the distribution is lopsided: the two 25% areas are the largest, and together with the 20% litigation area they make up 70% of the exam. Second, the four 5% domains at the top of the list are individually small but collectively worth 20%, which is as much as the entire litigation domain. Candidates who skip them to concentrate on the big three are giving up a fifth of the exam.

Module One: Core Knowledge, Information, and Skills (55%)

The first module holds six of the eight areas and 55% of the exam. It covers the professional, legal, and procedural foundation that every forensic engagement rests on, plus the evidence and reporting skills that turn raw data into findings.

Domain 1: Professional Standards and Roles (5%)

Professional Standards and Roles

This domain tests whether you understand the professional obligations attached to forensic work and the different roles a practitioner can occupy on an engagement.

  • The distinction between acting as a consultant and acting as an expert witness, and how objectivity expectations differ between them
  • Independence, objectivity, and conflict-of-interest considerations when accepting or continuing an engagement
  • Professional competence, confidentiality, and the limits of what a practitioner should opine on

Expect scenario questions in which a role or a conflict is embedded in a fact pattern, and the right answer depends on recognizing which professional obligation applies.

Domain 2: Legal Systems, Courts, and Dispute Resolution (5%)

Legal Systems, Courts, and Dispute Resolution

Forensic accountants work inside legal processes, so the exam expects fluency in how disputes move through them.

  • The structure and function of courts and the difference between civil and criminal proceedings
  • Alternative dispute resolution, including how arbitration and mediation differ from litigation
  • The stages of a dispute and where financial experts are typically engaged

Domain 3: Laws, Regulations, and Guidance (5%)

Laws, Regulations, and Guidance

This area covers the legal and regulatory backdrop that shapes forensic work, including rules that govern evidence and expert testimony and the authorities that govern financial misconduct.

  • How rules of evidence affect what an expert can rely on and present
  • The relationship between statutes, regulations, and professional guidance
  • Regulatory frameworks relevant to fraud, financial reporting, and investigations

Domain 4: Engagement Initiation and Planning (5%)

Engagement Initiation and Planning

Before any analysis begins, a forensic professional has to decide whether to take the work and how to structure it.

  • Defining scope and objectives and documenting them in an engagement letter
  • Evaluating resources, timelines, and potential conflicts before acceptance
  • Developing a work plan that anticipates data needs and likely areas of dispute

Domain 5: Information Gathering, Preservation of Evidence, and Analysis (25%)

This is one of the two heaviest areas on the exam, and it is where the work of a forensic accountant differs most from conventional accounting. Candidates should expect this domain to touch many other questions, because nearly every scenario involves evidence of some kind.

Information Gathering, Preservation of Evidence, and Analysis

You need to know how to collect, protect, and analyze information so that it remains reliable and defensible.

  • Sources of financial and non-financial information, and how to evaluate their reliability
  • Preservation of evidence and maintaining documentation that supports chain of custody
  • Analytical techniques for testing records, identifying anomalies, and reconstructing transactions
  • The handling of electronically stored information and the risks of altering or losing it

The practical test here is judgment: given a set of facts, which information should be gathered first, how should it be preserved, and which analysis answers the question actually being asked? Practice by working through scenarios rather than memorizing lists.

Domain 6: Reporting and Communication of Findings (10%)

Reporting and Communication of Findings

Findings have value only if they can be communicated clearly to the audience that needs them, whether a client, a court, or a regulator.

  • Structuring written reports and deciding what must be included and what should be excluded
  • Tailoring communication to attorneys, triers of fact, and non-technical audiences
  • Supporting opinions with documented bases and acknowledging limitations

Module Two: Core Practice Areas (45%)

The second module has only two areas, but together they account for 45% of the exam. These are where the specialized forensic content lives.

Domain 7: Investigative and Fraud Risk Management (25%)

Investigative and Fraud Risk Management

This is the second 25% area and the core of the investigative side of the credential.

  • How fraud occurs, the schemes commonly encountered, and the conditions that make them possible
  • Fraud risk assessment, prevention, and detection, including the role of internal controls
  • Planning and conducting investigations, including interviews and the sequencing of procedures
  • Responding to allegations and evaluating the adequacy of an organization's fraud risk management

Candidates from an audit background often assume this domain will feel familiar, but investigative questions ask you to think differently: you are looking for how a scheme could be concealed, not testing whether controls operated as designed. For a sense of how this fits into the broader credential, see how hard the CFF exam is.

Domain 8: Litigation Services Concepts, Methodologies, and Procedures (20%)

Litigation Services Concepts, Methodologies, and Procedures

This domain covers the work forensic professionals perform when a dispute is headed for, or already in, a legal forum.

  • Quantifying economic damages and the methodologies used to measure loss
  • The procedural flow of litigation and where financial experts contribute, including discovery and testimony
  • Valuation concepts and other analytical frameworks used in disputes
  • Supporting and defending opinions under scrutiny, including cross-examination considerations
The three-area concentration: Domains 5, 7, and 8 together carry 70% of the exam. A candidate who is strong across all three and merely competent on the foundational four has a defensible position. A candidate who is strong on the foundations but thin on evidence analysis and fraud risk management does not.

How Questions Are Delivered and Scored

The format depends on which pathway you take, and the two should not be confused.

  • Global Standard Pathway: one examination of 175 multiple-choice questions with a four-hour limit. This replaces the older two-part format, so older descriptions of the exam may not match what you will sit.
  • Experienced Pathway: a separate 60-question, two-hour examination for candidates who meet the seven-years and 10,000-hours experience requirement.

The exam is delivered by Kryterion, with year-round testing available at test centers and through remote proctoring. External calculators are prohibited, so be prepared to work through any needed arithmetic by hand or with the tools the testing interface provides. Results are reported as pass or fail against a psychometrically established standard, rather than as a percentage you can aim for in advance. For more on how that standard works, see the CFF passing score explained, and for what the available data shows, see the CFF pass rate analysis.

Because the questions are scenario-based and the weights are uneven, you should rehearse the format directly. Working through realistic items on the main practice test site is the most efficient way to build the habit of reading a fact pattern, identifying which domain it belongs to, and choosing the best answer under time pressure.

Sequencing Study Around the Weights

Generic study advice is plentiful, so the useful question is simply which domains to schedule in which order and why. One sensible approach for the Global Standard exam is to build the vocabulary first, then spend the most time where the weight is greatest, then consolidate.

Weeks 1-2

Foundations: Domains 1-4

  • Cover professional roles, legal systems, regulations, and engagement planning together, since they share vocabulary
  • Take notes on terms you will see again in the evidence and litigation domains
Weeks 3-5

Evidence and Analysis: Domain 5 (25%)

  • Spend the largest block here because it is a heavy area and underlies scenarios elsewhere
  • Work practice questions on preservation and analytical technique, not just definitions
Weeks 6-8

Fraud and Litigation: Domains 7 and 8 (45%)

  • Study fraud schemes, risk management, and investigation procedures, then damages and litigation procedure
  • Connect each topic back to the evidence and reporting skills from earlier weeks
Weeks 9-10

Reporting and Full Review: Domain 6 and Mixed Practice

  • Cover reporting and communication, then take timed mixed sets across all eight areas
  • Revisit the domains where your practice scores are weakest

The exact duration should flex with your experience. A practitioner who already testifies as an expert may compress the litigation weeks; someone from a tax or audit background may need longer on investigative technique. A fuller plan is laid out in the CFF study guide, and a condensed reference is available in the CFF cheat sheet.

Registration, Fees, and Timing

Understanding the domains is only part of planning; the mechanics matter too. Global exam registration is publicly priced between USD $300 and $500, and AICPA membership discounts apply after you log in. The public range does not assign its endpoints to specific member categories, so check the figure shown when you sign in rather than assuming a number. Registration provides one year of availability and includes one retake under the policy effective May 1, 2024.

The exam fee is separate from the credential application. The initial credential application product lists $199 for AICPA members. A full accounting of what you will pay across the process is in the CFF certification cost breakdown.

Candidates may pass an examination before completing the other education and experience requirements, which gives you flexibility in sequencing. The credential itself requires AICPA membership in good standing and an eligible CPA certificate or recognized equivalent. The U.S. credential FAQ distinguishes a valid, unrevoked CPA certificate from an active license to practice, so read the current wording carefully before assuming you qualify. For the Global Standard credential, eligibility includes 1,000 forensic-accounting business hours and 75 relevant CPD hours within the preceding five years, and completing the approved CFF Learning Pathway can satisfy the education requirement. The Experienced Pathway instead requires at least seven years and 10,000 forensic-accounting business hours, plus the same 75 CPD hours. The full eligibility picture is covered in the CFF requirements guide, and scheduling details are in the CFF exam dates guide.

Verify the experience figures: One copy of the credential handbook contains later prose that states a different experience requirement than its own eligibility table. The current issuer pathway page and table specify seven years and 10,000 hours for the Experienced Pathway. Confirm against the AICPA pathway page before you plan around any figure.

Where These Domains Show Up in Practice

The eight areas map directly onto the kinds of work CFF holders do. Evidence preservation and analysis, fraud risk management, and litigation support correspond to forensic accounting practices at accounting and advisory firms, corporate investigation and compliance functions, and roles supporting attorneys in disputes. The foundational domains reflect what these employers expect of anyone who may end up in front of a court or regulator: that you understand your role, the legal setting, and how to plan and report responsibly.

If you are weighing the credential against your career goals, the CFF jobs overview and the CFF salary guide cover the market side, and the ROI analysis helps you decide whether the investment makes sense for your situation. Maintaining the credential also carries ongoing obligations: renewal involves annual membership and credential maintenance, continued qualifying status, an annual attestation, and at least 20 relevant CPD hours each year under the 2026 handbook. Older three-year summaries should not replace that annual figure.

Key Takeaway

Prioritize by weight but do not ignore the small domains. Put your largest block of time into evidence gathering and analysis, fraud risk management, and litigation methodology, then use the four 5% foundation domains to secure points that many candidates leave behind.

Frequently Asked Questions

How many domains does the CFF exam have?

The exam has eight weighted content areas. These sit inside two official modules, Core Knowledge, Information, and Skills (55%) and Core Practice Areas (45%), rather than being eight separate modules.

Which CFF domains carry the most weight?

Information Gathering, Preservation of Evidence, and Analysis and Investigative and Fraud Risk Management are the largest at 25% each. Litigation Services Concepts, Methodologies, and Procedures follows at 20%, and Reporting and Communication of Findings is 10%.

Are the four 5% domains worth studying?

Yes. Professional Standards and Roles, Legal Systems, Laws and Regulations, and Engagement Initiation and Planning total 20% of the exam together, and their concepts appear inside scenario questions from the larger domains.

How many questions are on the CFF exam?

The Global Standard Pathway exam has 175 multiple-choice questions with a four-hour limit. The Experienced Pathway uses a separate 60-question, two-hour exam. External calculators are not allowed on either.

Are the domain names the same as a study curriculum?

No. The eight headings are exam objectives that describe what may be tested. They do not prescribe how to prepare, so build your plan around your own experience and use the weights only as a guide to priority.

Ready to pass your CFF exam?

Put this into practice with free CFF questions across every exam domain.