CIC Exam Prep

How to Use This Guide

This guide covers every domain on the CIC exam in plain English. Each chapter ends with an interactive 10-question quiz with immediate feedback and rationales. The full-length 150-question practice exam is linked at the bottom — sit it the way you will sit the real one.

Work through the material in order the first time. Then use the domain quizzes to identify your weak spots, and re-read those chapters before the exam. A score below 70% on a domain quiz tells you exactly where to focus your remaining study time.

If you are short on time, start with Domains 2 and 3 — together they represent nearly half the exam.

Chapter 1: Introduction to the CIC Exam

What Is the CIC?

The CIC — Certification in Infection Control and Epidemiology — is the professional credential for infection preventionists. It is issued by the Certification Board of Infection Control and Epidemiology (CBIC). Holding the CIC signals that you have met a validated standard of knowledge and practice in infection prevention.

Eligibility

You must have a current license, registration, or certification in a healthcare field AND at least two years of experience in infection prevention and control within the five years prior to your application. Verify current requirements at cbic.org before applying.

Exam Format

The Six Domains and Their Weights

Domain	Topic	Approx. % of Exam
1	Identification of Infectious Disease Processes	~13%
2	Surveillance and Epidemiologic Investigation	~23%
3	Preventing and Controlling Transmission	~26%
4	Employee/Occupational Health	~8%
5	Management and Communication: Leadership	~16%
6	Education and Research	~14%

Domains 2 and 3 together represent nearly half the exam. Do not neglect Domain 5 — Leadership — which catches many test-takers off guard.

Chapter 2: Building Your Study Plan

Study Techniques That Work

Active recall. After each section, close the guide and write down what you remember. Retrieval practice beats passive re-reading every time.

Spaced repetition. Review material at increasing intervals: 2 days later, then 5 days, then 10 days.

Practice questions first. Try each quiz before re-reading the chapter. Incorrect answers tell you exactly what to study.

Read every rationale. Understanding why a wrong answer is wrong is as important as knowing the right answer.

Chapter 3: How to Take the Exam

Question Anatomy

Every CIC question has a stem (scenario), a lead-in (the specific ask), and four answer choices. Read the lead-in carefully — it tells you exactly what you are being asked. The answers typically include two clearly wrong options, one plausible distractor, and one correct answer.

Common Question Types

• Knowledge recall: "Which organism causes X?" Answer from memory.
• Application: "A patient has Y. What precautions do you implement?" Apply knowledge to a scenario.
• Analysis/judgment: "The data shows Z. What is the most appropriate next action?" These are the hardest.
• Calculation: Rate calculations, SIRs, attack rates. Gift questions if you memorize the formulas.

Pacing

150 questions in 180 minutes = 1.2 minutes per question. Checkpoint: at 45 minutes you should have answered approximately 55–60 questions. Flag difficult questions and move on. There is no penalty for guessing — never leave a question blank.

Elimination Strategy

Remove any option with absolute language ("always," "never," "only") unless the content is genuinely absolute. Remove options that directly contradict guidelines you know. Choose the best remaining option.

Chapter 4: Microbiology Refresher

Gram Stain Classification

Gram-positive = purple. Gram-negative = pink/red. Gram-positive cocci in clusters = Staphylococcus. Gram-positive cocci in chains = Streptococcus or Enterococcus. Gram-negative rods = Enterobacterales, Pseudomonas, Acinetobacter.

Key Virus Transmission Routes

Viruses are not susceptible to antibiotics. Influenza: droplet/contact. Norovirus: contact/fecal-oral — alcohol-resistant, soap and water required. RSV: droplet + contact. COVID-19: primarily airborne + droplet. Measles: airborne — one of the most contagious pathogens known. Varicella: airborne + contact.

Fungi

Aspergillus — environmental mold; causes invasive infection in immunocompromised patients; aerosolized during construction and renovation — the primary reason ICRA exists. Candida auris — emerging multidrug-resistant yeast; misidentified by older biochemical systems as C. famata or Rhodotorula; requires MALDI-TOF or molecular methods for accurate ID; contact precautions + enhanced environmental cleaning; report to CDC and state health department immediately.

Resistance Mechanisms

Mechanism	Example	Significance
Beta-lactamases (ESBL)	ESBL-producing E. coli	Hydrolyze most penicillins and cephalosporins
Carbapenemases (KPC, NDM)	CRE	Destroy carbapenems — last-resort agents
Altered PBP (PBP2a)	MRSA	Beta-lactams cannot bind; entire class ineffective
Altered ligase	VRE	Vancomycin cannot bind D-Ala-D-Ala target
Efflux pumps	Pseudomonas	Antibiotics pumped out of the cell

Chain of Infection

Infectious agent → Reservoir → Portal of exit → Mode of transmission → Portal of entry → Susceptible host. Break any link and you stop transmission. Most IP interventions target mode of transmission (hand hygiene, precautions, disinfection) and the susceptible host (vaccination, isolation).

Spaulding Classification

Category	Contact	Required Reprocessing	Example
Critical	Sterile tissue or vascular system	Sterilization	Surgical instruments, cardiac catheters
Semi-critical	Mucous membranes or non-intact skin	High-level disinfection minimum	Endoscopes, laryngoscope blades
Non-critical	Intact skin only	Low- or intermediate-level disinfection	Blood pressure cuffs, stethoscopes

Domain 1 · ~13% of the Exam

Identification of Infectious Disease Processes

Colonization vs. Infection vs. Contamination

Colonization: Organism present WITHOUT clinical signs or symptoms. Patient can transmit to others. Infection: Organism present WITH clinical signs/symptoms (fever, inflammation, purulent drainage, leukocytosis). Contamination: Organism on a specimen not reflecting true patient infection (e.g., a single CoNS blood culture in an afebrile stable patient = almost always contamination).

Laboratory Interpretation

Gram stain: rapid organism type identification. Culture and sensitivity: identifies organism and antibiotic susceptibilities. MIC (minimum inhibitory concentration): lowest antibiotic concentration that inhibits visible growth — lower MIC = more susceptible. PCR/NAAT: highly sensitive and specific — used for C. difficile, MRSA nares screening, influenza, COVID-19.

Priority MDROs

MRSA: Resistance via PBP2a. Contact precautions. Treatment: vancomycin or daptomycin. Colonizes nares — active surveillance swabs used in some high-risk settings.

VRE: Colonizes GI tract. Contact precautions. Shed in feces — environmental contamination is the key transmission route. Treatment: linezolid, daptomycin.

C. difficile (CDI): Spore-forming anaerobe. Spores resist ABHR — soap and water required. Contact precautions. Sporicidal disinfectants (bleach-based) required for environmental cleaning. Risk factors: recent antibiotics, age, immunosuppression, PPI use.

CRE: Produces carbapenemases (KPC, NDM, OXA-48). Contact precautions. Very limited treatment options. Report to state health department required in most states.

Candida auris: Misidentified by older biochemical methods — MALDI-TOF or molecular methods required. Contact precautions. Enhanced environmental cleaning. Persist on surfaces for weeks. Report to CDC and state health department immediately.

Emerging Infections

For novel pathogens with unknown transmission route, default to airborne + contact precautions until transmission is determined. Stay current via CDC, APIC, and SHEA guidance.

Domain 2 · ~23% of the Exam

Surveillance and Epidemiologic Investigation

NHSN HAI Definitions

CLABSI: Lab-confirmed BSI in a patient with a central line in place for more than 2 consecutive calendar days on the date of the positive culture (or the day before), not related to another infection site. Rate = CLABSIs / central line days × 1,000.

CAUTI: UTI in a patient with an indwelling urinary catheter in place for >2 consecutive calendar days. Requires ≥1 clinical sign plus ≥10⁵ CFU/mL of ≤2 organisms on urine culture.

SSI: Infection within 30 days of operative procedure (90 days if implant). Three levels: superficial incisional, deep incisional, organ/space.

VAE: Replaced VAP. Three tiers: VAC (sustained increase in FiO₂ or PEEP), IVAC (fever/leukocytosis + antibiotic change), PVAP (possible VAP with culture criteria).

Rate Calculations — Know These Cold

Rate	Formula
CLABSI rate	(CLABSIs / Central line days) × 1,000
Attack rate	(Cases / Exposed persons) × 100
Device utilization ratio (DUR)	Device days / Patient days
Standardized infection ratio (SIR)	Observed / Predicted infections

Outbreak Investigation — 10 Steps

1. Prepare for fieldwork
2. Establish existence of the outbreak (above baseline?)
3. Verify the diagnosis (confirm clinical and lab criteria)
4. Define and identify cases (develop a case definition)
5. Describe data by time (epi curve), place (spot map), person (line list)
6. Develop hypotheses
7. Evaluate hypotheses (analytic study — cohort or case-control)
8. Refine hypotheses and conduct additional studies
9. Implement control and prevention measures
10. Communicate findings

Epi Curve Types

Point source: Single sharp peak, rapid decline. All cases exposed at one time and place. Common source, intermittent: Multiple peaks from repeated exposures to the same source. Propagated: Multiple peaks each separated by approximately one incubation period — classic for person-to-person transmission.

Statistical Concepts

Sensitivity: True positive rate (among those WITH disease, proportion who test positive). Specificity: True negative rate. RR: From cohort studies. RR > 1 = increased risk. OR: From case-control studies. 95% CI crossing 1.0 = NOT statistically significant. SIR > 1 = worse than predicted; CI not including 1 = statistically significant.

Domain 3 · ~26% of the Exam

Preventing and Controlling Transmission

Hierarchy of Controls (Most to Least Effective)

Elimination → Substitution → Engineering controls (AIIRs, safety needles, BSCs) → Administrative controls (policies, training) → PPE (last resort, least effective).

Transmission-Based Precautions

Type	Route	PPE	Room	Key Organisms
Contact	Direct/indirect contact	Gloves, gown	Private preferred	MRSA, VRE, C. diff, norovirus, C. auris
Droplet	Large droplets (>5µm)	Surgical mask, eye protection	Private; door may stay open	Influenza, pertussis, meningococcal, mumps, rubella
Airborne	Droplet nuclei (≤5µm)	N95 or higher respirator	AIIR — negative pressure, ≥12 ACH	TB, measles, varicella, disseminated zoster

WHO 5 Moments of Hand Hygiene

1. Before patient contact
2. Before an aseptic task
3. After body fluid exposure risk
4. After patient contact
5. After contact with patient surroundings

ABHR preferred for most indications. Soap and water REQUIRED: visible soiling, after bathroom use, after C. difficile patient care (alcohol does NOT kill C. diff spores).

Environmental Cleaning

Cleaning must precede disinfection — organic matter inactivates disinfectants. Wet contact time = duration surface must remain visibly wet to achieve labeled kill. Sporicidal disinfectants (bleach-based, HPV) required for C. difficile and norovirus. Quaternary ammonium compounds do NOT kill C. difficile spores.

HAI Prevention Bundles

CLABSI Bundle: Hand hygiene; maximal sterile barrier precautions; chlorhexidine-alcohol skin antisepsis; subclavian site preferred in adults; daily necessity review; remove when no longer needed.

CAUTI Bundle: Insert only when indicated; aseptic technique; closed drainage system; daily necessity review; prompt removal. Routine bladder irrigation NOT recommended.

SSI Bundle: Antimicrobial prophylaxis within 60 min of incision; clippers (not razors); normothermia; perioperative glycemic control (<180 mg/dL); chlorhexidine-alcohol skin antisepsis.

VAE Bundle: HOB elevation 30–45°; daily sedation interruption; daily extubation readiness assessment; oral care with chlorhexidine; subglottic secretion drainage.

ICRA

Required for all construction/renovation near patient care. Primary concern: Aspergillus aerosolized from construction dust. Controls: barriers, negative pressure, HEPA filtration, traffic control.

Water Management

ASHRAE Standard 188 and CMS require written water management plans. Primary target: Legionella pneumophila — thrives in warm water (77–113°F) in cooling towers, hot water tanks, and showerheads.

Sterile Processing Flow

Decontamination → Inspection → Packaging → Sterilization → Storage. Sterilization verification: Mechanical (autoclave readout), Chemical (color-change strip — verifies parameters only), Biological (spore test — gold standard; the only method that verifies actual killing). IUSS reserved for urgent situations; must be documented every time.

Domain 4 · ~8% of the Exam

Employee/Occupational Health

OSHA Bloodborne Pathogens Standard (29 CFR 1910.1030)

• Written exposure control plan — reviewed and updated annually
• PPE provided at no cost to the employee
• HBV vaccination offered free within 10 working days of initial assignment
• Post-exposure: confidential medical evaluation, source patient testing, PEP determination
• Training: at hire, annually, and when procedures change
• Medical records retained for duration of employment plus 30 years
• Sharps injury log: employee identity protected — name NOT included

Healthcare Worker Vaccinations

Vaccine	Recommendation
Hepatitis B	Three-dose series; anti-HBs titer 1–2 months after final dose
Influenza	Annually every season
MMR	Two doses or documented immunity (titer or birth before 1957)
Varicella	Two doses or documented immunity
Tdap	Once in adulthood, then Td/Tdap every 10 years

TB Screening (CDC 2019)

Routine annual TB screening of all HCP is no longer recommended unless there is ongoing TB transmission. Baseline screening at hire still required. Preferred test for BCG-vaccinated HCP: IGRA (Quantiferon, T-Spot) — unaffected by BCG vaccination.

Exposure Incident Management

1. First: Wash wound with soap and water (mucous membranes: flush with copious water/saline)
2. Report immediately to employee health
3. Source patient tested for HIV, HBV, HCV
4. HIV PEP initiated within 1–2 hours if indicated; 28-day, 3-drug regimen; PEP after 72 hours not recommended
5. Document in sharps injury log per OSHA

HCV: No HCV PEP exists. Baseline HCV Ab test, then HCV RNA at 3–6 weeks; treat if infection develops.

Work Restrictions

Condition	Restriction
Acute influenza	7 days from symptom onset or until afebrile and improved (whichever longer)
Acute gastroenteritis	48 hours after complete symptom resolution
Pertussis	5 days from start of effective antibiotic therapy
Active TB (smear positive)	Until non-infectious (3 negative AFB smears)
Localized shingles	Cover lesions; restrict from high-risk patients until lesions crust

Domain 5 · ~16% of the Exam

Management and Communication: Leadership

Building an IP Program

Annual IP Risk Assessment — required by TJC, CMS, and most state regulators. Foundation of everything. Drives the annual IP plan.

Annual IP Plan — SMART priorities with evidence-based interventions, metrics, baseline and target data, owners, timelines, and reporting to the IPCC and medical executive committee.

Regulatory Landscape

Body	Role
The Joint Commission (TJC)	Voluntary accreditor; CMS deemed status; unannounced surveys; tracer methodology
CMS § 482.42	Federal requirement for hospital IP conditions of participation
CDC (HICPAC)	Evidence-based guidelines (widely adopted, non-regulatory)
OSHA	Bloodborne Pathogens Standard, Respiratory Protection Standard
State health departments	Reportable disease lists, mandatory HAI reporting, licensing

Quality Improvement Frameworks

PDSA: Plan-Do-Study-Act — iterative rapid-cycle QI model. DMAIC: Six Sigma — Define, Measure, Analyze, Improve, Control. SPC Charts: U-charts for rates; p-charts for proportions. Eight or more consecutive points on one side of the centerline = special-cause variation warranting investigation.

Emergency Preparedness

CDC Category A bioterrorism agents: anthrax, botulism, plague, smallpox, tularemia, viral hemorrhagic fevers. Key exam point: Cutaneous anthrax is NOT transmitted person-to-person — standard precautions only. Smallpox IS transmitted person-to-person via airborne route.

Antimicrobial Stewardship

CDC Core Elements: leadership commitment, accountability, drug expertise, action, tracking, reporting, education. Required by TJC and CMS.

Domain 6 · ~14% of the Exam

Education and Research

Adult Learning — Knowles' Andragogy

• Adults are self-directed and need autonomy
• Adults bring experience that can be drawn on
• Adults learn best when content is immediately relevant to their role
• Adults are problem-centered, not subject-centered
• Adults need to understand the rationale — the "why" behind what they're asked to do

ADDIE Model

Analyze: Identify the root cause — knowledge gap (don't know), skill gap (don't know how), or performance gap (know but don't do). Education only fixes knowledge and skill gaps. Performance gaps require systems and culture changes. Design/Develop: Write learning objectives with action verbs; match method to objective. Implement: Online for knowledge; simulation for skill; microlearning for reinforcement. Evaluate: Kirkpatrick's model.

Kirkpatrick's Four Levels

Level	What Is Measured	How
1 — Reaction	Did they like it?	Post-training satisfaction survey
2 — Learning	Did they learn it?	Pre/post test scores
3 — Behavior	Did they use it on the job?	Direct observation, compliance audits
4 — Results	Did it change outcomes?	HAI rates, infection incidence

Hierarchy of Evidence (Highest to Lowest)

1. Systematic review and meta-analysis of RCTs
2. Randomized controlled trial (RCT)
3. Prospective cohort study
4. Case-control study
5. Cross-sectional study
6. Case series and case reports
7. Expert opinion

Research Biases

Bias	Description
Selection bias	Systematic differences in how groups were selected
Recall bias	Cases recall past exposures more completely than controls (case-control studies)
Confounding	A third variable distorts the apparent relationship between exposure and outcome
Publication bias	Positive studies more likely to be published than null findings
Hawthorne effect	Subjects change behavior when they know they are being observed

QI vs. Research

Quality improvement uses local data to improve local practice — not intended to be generalizable. Research aims at generalizable knowledge and typically requires IRB review and informed consent. Submit to your IRB for a QI vs. research determination before publishing any QI project.

Glossary of Terms

ABHR — Alcohol-based hand rub. Preferred for most HH indications; does NOT kill C. diff spores or norovirus.

AIIR — Airborne infection isolation room. Negative-pressure, ≥12 ACH (new construction), ≥6 ACH (existing).

APIC — Association for Professionals in Infection Control and Epidemiology. Publishes AJIC.

ASP — Antimicrobial Stewardship Program.

BBP — Bloodborne Pathogens. OSHA standard 29 CFR 1910.1030.

Bundle — Group of evidence-based interventions implemented together every time, all-or-nothing.

CAUTI — Catheter-associated urinary tract infection.

CBIC — Certification Board of Infection Control and Epidemiology. Issues the CIC credential.

CDI — Clostridioides difficile infection.

CIC — Certification in Infection Control and Epidemiology.

CLABSI — Central line-associated bloodstream infection.

CMS — Centers for Medicare and Medicaid Services. § 482.42 governs hospital IP.

CRE — Carbapenem-resistant Enterobacterales.

DUR — Device utilization ratio. Device days / patient days.

ESBL — Extended-spectrum beta-lactamase. Hydrolyze most cephalosporins.

HAI — Healthcare-associated infection.

HICPAC — Healthcare Infection Control Practices Advisory Committee (CDC advisory body).

HLD — High-level disinfection. Required for semi-critical items.

ICRA — Infection control risk assessment. Required before construction/renovation near patient care.

IGRA — Interferon-gamma release assay (Quantiferon, T-Spot). Preferred TB test for BCG-vaccinated HCP.

IP — Infection preventionist.

IUSS — Immediate-use steam sterilization. Reserved for urgent situations; must be documented every time.

KPC — Klebsiella pneumoniae carbapenemase. Destroys carbapenems — last-resort agents.

MDRO — Multidrug-resistant organism.

MIC — Minimum inhibitory concentration. Lower MIC = more susceptible.

MRSA — Methicillin-resistant Staphylococcus aureus. Resistance via PBP2a.

NHSN — National Healthcare Safety Network. CDC's HAI surveillance system.

OSHA — Occupational Safety and Health Administration.

PDSA — Plan-Do-Study-Act. Iterative QI cycle.

PEP — Post-exposure prophylaxis. HIV PEP exists (28-day, 3-drug); HCV PEP does NOT exist.

PPE — Personal protective equipment. Lowest level in hierarchy of controls.

RR — Relative risk. Risk in exposed / risk in unexposed. From cohort studies.

SHEA — Society for Healthcare Epidemiology of America. Publishes ICHE.

SIR — Standardized infection ratio. Observed / predicted. SIR > 1 = worse than predicted.

Spaulding — Critical (sterilization), semi-critical (HLD), non-critical (low/intermediate disinfection).

SSI — Surgical site infection.

TB — Tuberculosis. Airborne transmission. AIIR + N95 required.

TJC — The Joint Commission. Unannounced surveys; tracer methodology.

TST — Tuberculin skin test. Two-step at hire; not preferred if BCG vaccinated.

VAE — Ventilator-associated event. Three NHSN tiers: VAC, IVAC, PVAP.

VRE — Vancomycin-resistant Enterococcus. Colonizes GI tract. Contact precautions.

WHO — World Health Organization. Source of the 5 Moments of Hand Hygiene.