Certified IRB Professional (CIP) – Comprehensive Original Study Guide & Exam Preparation Workbook ( Edition)

Certified IRB Professional (CIP) – Comprehensive Original Study Guide & Exam Preparation Workbook ( Edition) CERTIFIED IRB PROFESSIONAL (CIP®) COMPREHENSIVE ORIGINAL STUDY GUIDE & EXAM PREPARATION WORKBOOK 2026 EXPANDED EDITION Built as an original learning resource—not a reproduction of a commercial question bank. This workbook is designed around the current public PRIM&R exam structure and reference list. PRIM&R states that the CIP exam has 130 multiple-choice questions, 115 scored and 15 unscored pre-test items, with three hours allowed. The exam covers Human Subjects Protection, IRB Responsibilities, and Institutional Responsibilities. (PRIM&R; CIP Exam Resources, accessed 2026) The May 2025 CIP Body of Knowledge weights the three domains at 29%, 54%, and 17%, respectively. This workbook therefore deliberately gives the greatest space to IRB Responsibilities while still covering the other domains comprehensively. (PRIM&R; CIP Exam Body of Knowledge/Content Outline, May 2025) Important: This is not an official PRIM&R publication, does not reproduce PRIM&R exam questions, and cannot guarantee a passing score. Use current primary-source regulations and PRIM&R materials for final verification. CIP® Comprehensive Original Study Guide • 2026 Expanded Edition Page 2 TABLE OF CONTENTS 1. Part I — Exam Strategy and Regulatory Map 2. Part II — Human Subjects Protection 3. Part III — IRB Responsibilities 4. Part IV — Institutional Responsibilities 5. Part V — Scenario-Based Learning 6. Part VI — 200 Original Practice Questions 7. Part VII — Two Full Mock Examinations 8. Part VIII — Rapid Revision and Final-Week Plan 9. Appendix A — Regulation Crosswalk 10. Appendix B — Answer Key and Rationales 11. Appendix C — High-Yield Definitions CIP® Comprehensive Original Study Guide • 2026 Expanded Edition Page 3 PART I — EXAM STRATEGY AND REGULATORY MAP 1. Understanding the Current CIP Exam PRIM&R describes the CIP exam as a computer-based examination offered on a continuous basis, with in-person and live remote-proctored options. The exam is three hours and contains 130 objective multiple-choice questions. Fifteen are unscored pre-test items distributed throughout the exam, so candidates cannot identify them. ■cite■turn0search0■turn0search21■ A practical consequence is that every item should be treated as potentially scored. Do not spend excessive time trying to infer which questions are experimental. 2. Weighting Should Drive Your Study Time The current public content outline gives 29% to Human Subjects Protection, 54% to IRB Responsibilities, and 17% to Institutional Responsibilities. (PRIM&R; CIP Exam Body of Knowledge/Content Outline, May 2025) • Domain 1: build conceptual and regulatory foundations. • Domain 2: master review pathways, consent, risk, populations, reporting, meetings, and IRB operations. • Domain 3: master institutional systems, reliance, conflicts, records, reporting, and education. • Practice scenario reasoning instead of memorizing isolated regulatory sentences. 3. The Five-Question Decision Method 1. What activity is this? 2. What regulatory framework applies? 3. Who are the participants and what makes them vulnerable, if anything? 4. What are the risks, consent/privacy issues, and required safeguards? 5. What action is the question actually asking for? 4. Exam Trap Vocabulary • "Always" and "never" are warning words unless the rule truly is categorical. • "Exempt" does not mean "unregulated." • "Minimal risk" does not mean "no risk." • "Adverse event" does not automatically equal "unanticipated problem." • "IRB approval" does not mean scientific, financial, or institutional approval of every aspect of a project. • A signed consent form is not the same thing as meaningful informed consent. CIP® Comprehensive Original Study Guide • 2026 Expanded Edition Page 4 PART II — HUMAN SUBJECTS PROTECTION Historical Background and Research Ethics Why history matters Ethical rules did not arise in a vacuum. Historical abuses demonstrated the dangers of coercion, deception, lack of consent, exploitation, and weak independent oversight. CIP questions may present a modern scenario and ask you to recognize the historical ethical principle underneath it. Nuremberg Code The Nuremberg Code is strongly associated with voluntary consent, scientifically justified research, avoidance of unnecessary suffering, qualified investigators, and the participant’s ability to end participation. Learn the principles rather than relying on date memorization. Declaration of Helsinki The Declaration of Helsinki is a World Medical Association ethical framework for medical research involving human participants. It emphasizes scientific validity, risk/benefit considerations, independent ethical review, protection of vulnerable participants, and responsible dissemination. Belmont Report Belmont identifies Respect for Persons, Beneficence, and Justice. Its applications include informed consent, risk/benefit assessment, and equitable selection. Historical cases Tuskegee, Willowbrook, Jewish Chronic Disease Hospital, and other cases are useful because they illustrate recurring failures: withholding appropriate information, exploiting dependent populations, inadequate consent, and unequal distribution of burdens. Exam application When asked to identify an ethical principle, translate the scenario into the underlying moral problem. Autonomy and voluntariness point to respect; harm/benefit tradeoffs point to beneficence; unfair recruitment or exploitation points to justice. Exam Drill: What to Ask Yourself • What definition is being tested? • Which regulator or ethical framework governs the issue? • Is the question about the IRB, investigator, institution, sponsor, or another authority? • What fact in the scenario changes the answer? • Which tempting distractor would be attractive to someone who memorized a rule without understanding its scope? CIP® Comprehensive Original Study Guide • 2026 Expanded Edition Page 5 PART II — HUMAN SUBJECTS PROTECTION Regulatory Applicability and Federal Frameworks Common Rule The current Common Rule framework is centered in 45 CFR 46 Subpart A, with additional protections in Subparts B, C, and D. The CIP reference list explicitly includes 45 CFR 46 Subparts A–D. (PRIM&R; CIP Exam References and Resources, updated Sept. 23, 2025) FDA framework FDA regulations relevant to the CIP reference list include 21 CFR 50/56 for informed consent and IRBs, 21 CFR 312 for investigational drugs, 21 CFR 600 for biologics, and 21 CFR 812 for investigational devices. (PRIM&R; CIP Exam References and Resources, updated Sept. 23, 2025) Other frameworks The current reference list also includes HIPAA at 45 CFR 160/164, FERPA at 34 CFR 99, PPRA at 34 CFR 98, and special FDA provisions for humanitarian use devices. (PRIM&R; CIP Exam References and Resources, updated Sept. 23, 2025) Agency differences Federal departments can impose additional requirements. Do not assume that satisfying one framework automatically satisfies all applicable requirements. Regulatory hierarchy Distinguish statutes, regulations, agency guidance, ethical codes, sponsor requirements, and local institutional policy. A strong CIP professional identifies the issuing authority and scope before applying a rule. Exam Drill: What to Ask Yourself • What definition is being tested? • Which regulator or ethical framework governs the issue? • Is the question about the IRB, investigator, institution, sponsor, or another authority? • What fact in the scenario changes the answer? • Which tempting distractor would be attractive to someone who memorized a rule without understanding its scope? CIP® Comprehensive Original Study Guide • 2026 Expanded Edition Page 6 PART III — IRB RESPONSIBILITIES IRB Membership, Conflicts, Quorum, and Authority Membership The board needs enough scientific and nonscientific expertise to review the research presented. The unaffiliated perspective supports independence from the institution. Conflict of interest An IRB member with a conflicting interest should not participate in the IRB’s initial or continuing review of the activity, except to provide information at the board’s request. Quorum Official convened-board actions depend on the applicable quorum. If quorum is lost, the board should not continue business requiring quorum until it is restored. Consultants Subject-matter consultants can provide expertise where the board lacks specialized knowledge. Consultants do not simply become voting members because they attended a meeting. Authority IRBs can approve, require modifications, or disapprove research within their jurisdiction and can take appropriate action on approved research when circumstances warrant. Exam Drill: What to Ask Yourself • What definition is being tested? • Which regulator or ethical framework governs the issue? • Is the question about the IRB, investigator, institution, sponsor, or another authority? • What fact in the scenario changes the answer? • Which tempting distractor would be attractive to someone who memorized a rule without understanding its scope? CIP® Comprehensive Original Study Guide • 2026 Expanded Edition Page 7 PART III — IRB RESPONSIBILITIES Levels of Review Exempt Exempt categories are defined by regulation. Institutions generally use a documented determination process. Exempt does not mean the researcher is free to ignore other applicable requirements. Expedited Expedited review applies to specified categories and circumstances. It is not merely a shortcut available whenever a project appears easy. Convened review Research outside exempt and expedited pathways generally goes to the convened IRB with the required quorum and voting procedures. Modifications A modification must be assessed based on what changed, whether the change alters risk or eligibility, and whether the applicable review pathway permits expedited handling. Continuing review Whether continuing review is required depends on the regulatory pathway and status of the research. Avoid treating continuing review as an automatic annual event for every study. Exam Drill: What to Ask Yourself • What definition is being tested? • Which regulator or ethical framework governs the issue? • Is the question about the IRB, investigator, institution, sponsor, or another authority? • What fact in the scenario changes the answer? • Which tempting distractor would be attractive to someone who memorized a rule without understanding its scope? CIP® Comprehensive Original Study Guide • 2026 Expanded Edition Page 8 PART III — IRB RESPONSIBILITIES Criteria for Approval and Risk-Benefit Analysis Risk minimization Risks should be minimized through appropriate design, procedures, qualifications, monitoring, privacy protections, and other safeguards. Reasonable relationship The risks must be reasonable in relation to anticipated benefits, if any, and the importance of the knowledge expected. Equitable selection Selection should be fair and scientifically justified, avoiding convenience-based exploitation of vulnerable groups. Consent When required, informed consent must be sought under appropriate conditions and documented according to applicable requirements. Data monitoring The IRB should determine whether a data safety monitoring plan or other monitoring arrangement is adequate for the study’s risks and complexity. Privacy/confidentiality The board should assess how participants are approached and how information is collected, stored, accessed, transmitted, and disclosed. Vulnerable groups Additional safeguards should be considered where vulnerability creates additional risks of coercion, undue influence, or inability to protect one’s own interests. Exam Drill: What to Ask Yourself • What definition is being tested? • Which regulator or ethical framework governs the issue? • Is the question about the IRB, investigator, institution, sponsor, or another authority? • What fact in the scenario changes the answer? • Which tempting distractor would be attractive to someone who memorized a rule without understanding its scope? CIP® Comprehensive Original Study Guide • 2026 Expanded Edition Page 9 PART III — IRB RESPONSIBILITIES Informed Consent in Depth Consent as a process Meaningful consent involves communication, opportunity for questions, adequate comprehension, and voluntariness—not merely a signature. Required information Core information commonly includes purpose, procedures, risks, potential benefits, alternatives when appropriate, confidentiality, contacts, and voluntary participation. Additional elements Depending on the study, additional information may include unforeseeable risks, circumstances for termination, additional costs, consequences of withdrawal, new findings, and approximate enrollment. Comprehension Use language and presentation appropriate to the prospective participant population. A technically accurate form can still fail if participants cannot understand it. Waiver or alteration A waiver or alteration must satisfy the specific applicable regulatory criteria. Minimal risk alone is not a universal permission to waive consent. Documentation The documentation requirement and the substantive consent requirement are distinct questions. A waiver of documentation does not necessarily mean a waiver of consent. Exam Drill: What to Ask Yourself • What definition is being tested? • Which regulator or ethical framework governs the issue? • Is the question about the IRB, investigator, institution, sponsor, or another authority? • What fact in the scenario changes the answer? • Which tempting distractor would be attractive to someone who memorized a rule without understanding its scope? CIP® Comprehensive Original Study Guide • 2026 Expanded Edition Page 10 PART III — IRB RESPONSIBILITIES Privacy, Confidentiality, HIPAA, and Sensitive Data Privacy Privacy addresses access to the person, their space, or their personal information during recruitment and data collection. Confidentiality Confidentiality addresses the promises and controls surrounding information once researchers possess it. HIPAA HIPAA may apply to protected health information handled by covered entities and business associates. The CIP reference list includes 45 CFR 160/164. (PRIM&R; CIP Exam References and Resources, updated Sept. 23, 2025) FERPA and PPRA Education research may trigger additional federal privacy protections. The current CIP reference list includes FERPA and PPRA. (PRIM&R; CIP Exam References and Resources, updated Sept. 23, 2025) Certificates of Confidentiality Certificates can provide protections against compelled disclosure of identifiable, sensitive research information in covered circumstances. Treat the certificate as a legal protection with defined scope—not an absolute promise that information can never be disclosed. Exam application If a question describes an investigator entering a private space without permission, think privacy. If it describes improper disclosure of entrusted data, think confidentiality. Exam Drill: What to Ask Yourself • What definition is being tested? • Which regulator or ethical framework governs the issue? • Is the question about the IRB, investigator, institution, sponsor, or another authority? • What fact in the scenario changes the answer? • Which tempting distractor would be attractive to someone who memorized a rule without understanding its scope? CIP® Comprehensive Original Study Guide • 2026 Expanded Edition Page 11 PART III — IRB RESPONSIBILITIES Vulnerable Populations Children Know the difference between parental permission and child assent, and know that pediatric research categories depend on risk and prospect of benefit. Prisoners Subpart C provides special protections and specific requirements for research involving prisoners. Pregnant women, fetuses, and neonates Subpart B provides additional protections where applicable. Determine which population and procedures are involved rather than assuming every pregnancy-related study follows the same pathway. Cognitive vulnerability A person may be vulnerable because of impaired decision-making capacity. Safeguards can include assessment of capacity, surrogate/legally authorized representative mechanisms where permitted, simplified information, and assent or dissent considerations. Economic/educational vulnerability Financial hardship or limited education can increase susceptibility to undue influence or misunderstanding. Compensation and recruitment should be designed carefully. Institutional vulnerability Employees, students, patients, prisoners, military personnel, and other dependent groups may perceive pressure even when the investigator does not intend coercion. Exam Drill: What to Ask Yourself • What definition is being tested? • Which regulator or ethical framework governs the issue? • Is the question about the IRB, investigator, institution, sponsor, or another authority? • What fact in the scenario changes the answer? • Which tempting distractor would be attractive to someone who memorized a rule without understanding its scope? CIP® Comprehensive Original Study Guide • 2026 Expanded Edition Page 12 PART III — IRB RESPONSIBILITIES Adverse Events, Unanticipated Problems, and Noncompliance Adverse events An adverse event is an unfavorable occurrence in a participant. Causality and expectedness must be assessed before deciding what regulatory action follows. Unanticipated problems An event can raise concern as an unanticipated problem when it is unexpected, related or possibly related to the research, and indicates greater risk than previously recognized. Protocol deviations Not every deviation is serious noncompliance. Consider significance, participant impact, frequency, and whether the event reflects a systemic failure. Serious/continuing noncompliance The appropriate classification depends on facts and applicable institutional/regulatory definitions. Do not label every mistake as serious noncompliance. Corrective action Possible responses include clarification, retraining, protocol amendment, consent changes, increased monitoring, reporting, suspension, or termination depending on circumstances. Safety-first reasoning When new information suggests greater risk, the IRB should focus on protecting current and future participants—not merely closing the administrative file. Exam Drill: What to Ask Yourself • What definition is being tested? • Which regulator or ethical framework governs the issue? • Is the question about the IRB, investigator, institution, sponsor, or another authority? • What fact in the scenario changes the answer? • Which tempting distractor would be attractive to someone who memoriz