CIA certification is the global professional credential for internal auditors, awarded by The Institute of Internal Auditors. Candidates must meet an approved education or experience pathway, pass three computer-based exam parts, verify relevant professional experience, and complete all requirements within the program eligibility period. The exams assess internal audit fundamentals, engagement planning and performance, and management of the internal audit function. Costs vary by membership status and location, while preparation usually combines syllabus study, practice questions, mock exams, and structured training.
The Certified Internal Auditor, or CIA, designation is designed for professionals who evaluate governance, risk management, internal controls, compliance, fraud exposure, and organizational performance. It is not limited to accounting professionals. Internal auditors, external auditors, risk specialists, compliance professionals, finance professionals, and control analysts may all benefit from earning it.
The credential is administered by The IIA, the international professional association responsible for global internal audit standards, education, guidance, and professional certification. The IIA describes the CIA as the only globally recognized internal audit certification.
The certified internal auditor certification validates a professional’s ability to apply recognized internal audit principles in real organizational situations.
The program covers more than audit terminology. Candidates must understand how to:
Protect internal audit independence and objectivity.
Evaluate governance and risk management processes.
assess the design and operation of internal controls.
Plan assurance and advisory engagements.
Gather and evaluate reliable audit evidence.
Develop findings, conclusions, and recommendations.
Communicate results to management and the board.
Monitor whether agreed corrective actions are completed.
The current examination structure is aligned with The IIA’s Global Internal Audit Standards, which became effective in January 2025.
Terms such as IIA Certified Internal Auditor, IIA CIA certification, and Institute of Internal Auditors certification generally refer to the same CIA credential. The phrase “CIA certified internal auditor” is also commonly used, although the formal designation is Certified Internal Auditor®.
The CIA is valuable because it focuses specifically on internal auditing. Broader accounting or risk credentials may cover some audit concepts, but the CIA examines how internal audit functions operate from engagement planning through board-level reporting.
Earning the credential can help professionals demonstrate knowledge of:
Internal audit standards and ethics.
Governance, risk, and control frameworks.
Assurance and advisory engagements.
Fraud risk and control weaknesses.
Audit evidence, documentation, and sampling.
Risk-based internal audit planning.
Quality assurance and improvement.
Communication with senior management and boards.
The credential may be relevant for positions such as internal auditor, senior internal auditor, audit manager, risk analyst, compliance auditor, internal controls specialist, and internal audit director. However, earning the designation does not automatically guarantee a particular job, salary, or promotion.
The official CIA certification requirements include an approved entry pathway, successful completion of the examinations, and verified professional experience.
Candidates may qualify through one of four main pathways:
Entry pathway
Experience required to earn the designation
Master’s degree or equivalent
1 year
Bachelor’s degree or equivalent
2 years
Active Internal Audit Practitioner designation
5 years
Five years of relevant experience
No additional experience
Candidates with a university degree may take the examinations before completing the required experience. However, the designation is not awarded until the experience has been verified.
Experience in the following areas may be considered equivalent to internal audit experience:
Quality assurance
Risk management
Compliance
External audit
Internal control
Audit or assessment disciplines
Candidates approved into the CIA program generally have three years from their approval date to complete the examinations and experience requirements.
These conditions are also commonly searched as certified internal auditor requirements, certified internal auditor certification requirements, and requirements for CIA certification.
Your CIA certification eligibility depends on your education, professional experience, or active Internal Audit Practitioner status.
A candidate with a master’s degree or equivalent may apply and take the examinations before completing the required experience. At least one year of internal audit or equivalent experience must be verified before certification.
A bachelor’s degree holder may enter the program and take all three exam parts. The candidate must document two years of relevant experience before receiving the credential.
Professionals without a degree may qualify through relevant experience. A candidate with five years of internal audit or equivalent experience may apply without needing additional experience after passing the examinations.
An active Internal Audit Practitioner holder may enter the CIA program without the usual degree requirement. Because the IAP examination is based on CIA Part 1, an active IAP holder may receive credit for Part 1 and complete Parts 2 and 3, subject to the applicable program requirements.
These pathways explain both certified internal auditor eligibility and the education and experience conditions candidates must satisfy.
The standard CIA exam consists of three computer-based multiple-choice examinations. Candidates may complete the parts separately and do not have to take all three on the same day.
Exam part
Questions
Exam time
Primary focus
Part 1: Internal Audit Fundamentals
125
150 minutes
Foundations, ethics, governance, risk, controls, and fraud
Part 2: Internal Audit Engagement
100
120 minutes
Planning, evidence, analysis, documentation, and engagement communication
Part 3: Internal Audit Function
100
120 minutes
Managing the internal audit function, audit planning, quality, reporting, and monitoring
The CIA certification exam is delivered through secure Pearson VUE computer-based testing locations. The IIA currently offers the examination in several languages, although syllabus transition dates may differ for certain translated versions.
A score of 600 or higher on The IIA’s reporting scale is required to pass an exam. Candidates who fail may schedule another attempt after at least 30 days, must register and pay again, and may take an exam no more than eight times during the applicable program window.
Part 1 introduces the principles that guide professional internal auditing. Major areas include:
The purpose and authority of internal audit.
Assurance and advisory services.
Ethics and professional behavior.
Independence and objectivity.
Governance, risk management, and control.
Fraud risks and the auditor’s responsibilities.
Candidates must understand why internal audit reports functionally to the board, how objectivity may be impaired, and how controls respond to organizational risks.
Part 2 focuses on completing an individual audit or advisory engagement. It examines:
Establishing engagement objectives and scope.
Conducting an engagement-level risk assessment.
Developing an audit work program.
Collecting sufficient and reliable evidence.
Using sampling and analytical procedures.
Documenting work and supporting conclusions.
Communicating findings and recommendations.
Under the current syllabus, engagement planning represents a major part of Part 2. Candidates should therefore understand how risks, controls, evaluation criteria, stakeholder expectations, and scope limitations affect the engagement plan.
Part 3 assesses the broader responsibilities involved in managing internal audit. It includes:
Internal audit strategy and operations.
Development of the risk-based audit plan.
Resource and performance management.
Quality assurance and improvement.
Communication of audit results.
Monitoring management action plans.
Escalation of risk acceptance concerns.
The three-part structure ensures that candidates understand both individual audit engagements and the management of the overall internal audit function.
The published CIA exam cost differs for IIA members and non-members.
Fee
IIA member
Non-member
CIA application
$120
$240
Part 1 examination
$310
$445
Part 2 examination
$280
$415
Part 3 examination
$280
$415
Total standard fees
$990
$1,515
Based on the listed fees, the standard CIA certification cost is $990 for members and $1,515 for non-members. This total does not include membership dues, taxes, study materials, training, rescheduling, extensions, or retake fees.
Pricing may differ outside North America or in countries where examinations are administered through a National Institute. The IIA also states that certification fees are non-refundable and non-transferable.
When estimating the cost of CIA certification, candidates should budget for:
Application and examination registration.
IIA membership, where appropriate.
A study guide or question bank.
A certified internal auditor course.
Possible exam rescheduling.
Additional attempts if an exam is not passed.
Annual certification renewal.
The terms certified internal auditor certification cost, certified internal auditor cost, and certified internal auditor exam cost refer to the same core expenses, but the actual total depends on the candidate’s location and preparation method.
Applications are managed through The IIA’s Certification Candidate Management System, commonly called CCMS.
The standard process is:
Create or access your CCMS account.
Select the Certified Internal Auditor program.
Submit the application and pay the application fee.
Upload proof of education and valid identification.
Wait for application and document approval.
Register and pay for an exam part.
Schedule the examination through Pearson VUE.
Pass all required examination parts.
Submit and verify your professional experience.
Receive the designation after the final certification review.
Candidates cannot register for an exam until their application and required documents have been approved. Exam authorization is generally valid for 180 days or until the program expires, whichever occurs first.
Good CIA certification training should be structured around the current official syllabus rather than outdated notes or collections of memorized answers.
A reliable CIA certification course should provide:
Syllabus-mapped lessons for all three parts.
Explanations of the Global Internal Audit Standards.
Scenario-based practice questions.
Detailed explanations for correct and incorrect options.
Timed quizzes and full mock examinations.
Performance reports by domain.
Instructor support for difficult topics.
A realistic study schedule.
A certified internal auditor online course can be useful for working professionals who need flexible study hours. However, “CIA certification online” should not be interpreted as meaning that the standard examination is an informal, unsupervised test. The examinations are delivered under secure testing conditions.
Effective CIA exam preparation requires more than reading a textbook once. The questions often test whether the candidate can identify the best professional response when several options appear reasonable.
Use this preparation process:
List every domain and learning objective. This prevents you from spending too much time on familiar topics while ignoring lower-confidence areas.
Complete a short test before beginning detailed study. Record whether each mistake resulted from missing knowledge, misreading the question, poor judgment, or time pressure.
Understand why an auditor should remain objective, gather sufficient evidence, escalate unacceptable risk, or communicate through the correct reporting channel.
After studying a topic, answer questions only from that domain. Review every explanation, including questions answered correctly by guessing.
Mixed quizzes help candidates switch between ethics, risk, controls, evidence, planning, and communication—the same mental adjustment required during the examination.
Full practice exams develop pacing and concentration. They also reveal whether you can apply knowledge under time pressure.
For strong certified internal auditor exam preparation, maintain an error log. Record the tested principle, why your selected option was weak, and what clue should have led you to the better answer.
Candidates often struggle because they:
Study from an outdated syllabus.
Memorize questions without learning the principle.
Select what management would prefer instead of what professional standards require.
Confuse internal audit responsibilities with management responsibilities.
Ignore independence or objectivity concerns.
Recommend action before obtaining sufficient evidence.
Spend too long on one difficult question.
Skip practice under timed conditions.
The best answer usually follows the Standards, respects organizational roles, uses reliable evidence, addresses significant risk, and communicates to the appropriate authority.
Passing the examinations is not the final professional obligation. Certified individuals must complete annual renewal requirements and attest that they have completed the required continuing professional education, including ethics education, by December 31.
A holder who does not complete the renewal requirements may move to an inactive status and may lose the right to use the designation until the requirements are satisfied.
Confirm your eligibility pathway before paying any fees. Then compare member and non-member pricing, review the current syllabus, create a realistic study schedule, and choose preparation resources that teach professional judgment instead of memorized answers.
Build the knowledge to evaluate risks, strengthen controls, communicate meaningful audit findings, and advance your internal audit career with CIA certification.