The Certified AI Financial Professional (CAFP™) credential from the Vora Institute by VoraPrep is a hands-on technical governance certification built for CPAs, internal/IT auditors (CISA/CIA), controllers, Enrolled Agents, and compliance officers. Candidates complete interactive audit workpapers and a proctored-style exam covering ASC 606, SR 11-7, IRC §7216, and AI agent internal controls.
Why Regulated Finance Rejects Generic "Prompt Engineering" Certificates
Controllers, audit committees, and managing partners face three immediate operational risks when staff adopt generative AI tools:
- Unspotted Numerical & Statutory Hallucinations: Probabilistic models routinely miss contract side-letter refund clauses (
ASC 606-10-25-7) or fabricate non-existent FASB ASC and Tax Court citations. - Confidentiality & Data-Retention Breaches: Uploading unmasked trial balances or Form 1065 K-1s into consumer chat endpoints with 30-day prompt logging violates
AICPA ET §1.700.001,GLBA Safeguards, andIRC §7216. - Model Risk & Regulatory Enforcement: Regulators enforce technology-neutral accountability under Federal Reserve SR 11-7, PCAOB AS 1105, Circular 230 §10.22, and SEC Rule 206(4)-1 ('AI washing').
The 4-Domain CAFP™ Interactive Workpaper Blueprint
| Domain | Core Competency | Interactive Studio Lab | Governing Authorities |
|---|---|---|---|
| Domain 1 (Free Preview) | Enterprise AI Mechanics, Hybrid RAG & Zero-Data-Retention | Audit & Telemetry Triage Console | NIST AI RMF 1.0, AICPA §1.700, IRC §7216, GLBA |
| Domain 2 | Financial Workpaper Verification & Hallucination Trapping | Multi-Cell ASC 606 Tie-Out Schedule | FASB ASC 606, PCAOB AS 1105 |
| Domain 3 | Model Risk Governance, Effective Challenge & Prompt Injection | Governance & CI/CD Control Matrix | Fed SR 11-7, NIST AI 600-1, AICPA TSC CC8.1 |
| Domain 4 | Statutory Ethics, Written Tax Advice & AI Marketing Rules | Compliance Pre-Clearance Form | Circular 230 §10.22/§10.37, SEC 206(4)-1, FINRA RN 24-09 |
How Assessment & Cryptographic Badge Verification Work
- Hands-On Workpaper Mastery First: Complete all 4
I Do → We Do → You Dolabs using deterministic numeric and telemetry checks. - Locked Qualified Assessment (
>= 75%): During the official exam, Coach Vory automatically locks and missed-item keys remain masked on failed attempts. - Verifiable Open Badge & Paired CPE: Passing issues a serial-tracked credential at
voraprep.com/verify-badge/{badgeId}with 1-click LinkedIn profile integration, and pairs directly with VoraCE's AI Governance Casebooks to log qualifying self-reported CPE hours in your Career Passport.
Calculate Your CISA Study Hours by Domain
See the exact domain-by-domain study breakdown reflecting the 2024 ISACA Job Practice weighting shifts.
Why Finance, Tax & Audit Employers Demand Verifiable AI Governance Skills
Generic "AI prompt engineering" courses teach workers how to paste spreadsheets into public chatbots—a practice that directly violates AICPA Confidential Client Information Rule (ET §1.700.001), IRC §7216 criminal tax-preparer disclosure statutes, GLBA Safeguards Rule, and PCAOB AS 1105 audit evidence reliability standards. Accounting firms, Fortune 500 internal audit teams, and regulated financial institutions need practitioners who can govern, tie out, red-line, and sign off on AI-assisted financial outputs without hallucination or data-leakage risk.
Breakdown of the 5 Applied CAFP™ Modules & Workpaper Labs
| CAFP™ Module | Primary Regulatory & Technical Frameworks | Hands-On Interactive Workpaper Deliverable |
|---|---|---|
| Module 1 (Free Open Lab) | Zero-Data-Retention APIs, AICPA ET §1.700, IRC §7216, GLBA | Enterprise AI Vendor Privacy & BAA/DPA Red-Line Checklist |
| Module 2: Revenue & Lease Extraction | ASC 606 Five-Step Model, ASC 842 Modifications | Tie-Out Workpaper Catching Hallucinated SaaS Variable Consideration |
| Module 3: Model Risk & Audit Controls | Federal Reserve SR 11-7, NIST AI RMF 1.0, ISO/IEC 42001 | SOC 2 Trust Services Criteria & AI Drift Control Matrix |
| Module 4: Agentic ERP & Payment Controls | COSO ICIF, SOX §404 ITGCs, Segregation of Duties | ERP Tool-Use Permission Boundary & Duplicate-Wire Exception Audit |
| Module 5: Sign-Off Liability & Capstone | Treasury Circular 230 §10.22, PCAOB AS 1215, EU AI Act | Executive Audit Committee Memo + Closed-Book Qualified Assessment |
How CAFP™ Stacks With CPA, EA, CISA, CIA, CMA & CFP Credentials
Unlike standalone bootcamps costing $1,500+, CAFP™ is integrated directly into the VoraPrep Universe:
- Try Module 1 Free With Zero Login: Test-drive the interactive Data-Privacy & Zero-Retention Audit Lab at voraprep.com/academy/cafp-ai-financial-professional before paying a dollar.
- Closed-Book Integrity: During the official
>= 75%Capstone Assessment, Coach Vory locks automatically and missed-question keys stay masked to preserve employer credential trust. - Public Verification & Paired CPE: Graduates receive a cryptographically verifiable credential at
voraprep.com/verify-badge/{badgeId}for LinkedIn and resumes, plus seamless progression into VoraCE's AI Audit & Model Risk Casebooks.