The CIA Certification, officially known as the Certified Internal Auditor (CIA) credential, is the globally recognized internal audit certification awarded by The Institute of Internal Auditors (The IIA). Candidates generally earn the certification by meeting education and experience requirements and passing three CIA exam parts covering internal audit fundamentals, audit engagements, and management of the internal audit function. The current exam follows the updated syllabus aligned with the Global Internal Audit Standards and requires a scaled passing score of 600.
The CIA certification is a professional credential designed specifically for people working in internal auditing, risk management, compliance, controls, governance, assurance, and related areas.
The credential is administered by The Institute of Internal Auditors, commonly called The IIA. The IIA describes the CIA as the only globally recognized internal audit certification.
A CIA Certified Internal Auditor demonstrates knowledge across the complete internal audit lifecycle rather than focusing on only financial accounting.
The certification evaluates areas such as:
Internal audit principles
Ethics and professionalism
Governance and risk management
Internal controls
Fraud risks
Audit engagement planning
Evidence gathering and analysis
Audit communication
Internal audit operations
Quality management
Audit planning and monitoring
This makes the IIA CIA certification relevant not only to internal auditors but also to professionals in compliance, enterprise risk, assurance, external audit, and internal control functions.
The CIA certification requirements depend primarily on your education level.
Candidates can take the examinations before completing the required professional experience, but all program requirements must be completed within three years after acceptance into the CIA program.
Education / Pathway
Experience Requirement
Exam Requirement
Master's degree or equivalent/higher
1 year
Pass Parts 1, 2 and 3
Bachelor's degree or equivalent
2 years
Pass Parts 1, 2 and 3
Active IAP without qualifying degree
5 years
Part 1 waiver; pass Parts 2 and 3
Active IAP + master's degree
1 year
Part 1 waiver
Active IAP + bachelor's degree
2 years
Part 1 waiver
For the master's and bachelor's pathways, qualifying experience may include internal audit, quality assurance, risk management, audit or assessment disciplines, compliance, external audit, and internal control.
Typical certified internal auditor eligibility documentation includes:
Proof of education
Valid government-issued photo identification
Required professional experience verification
Proof of education may include a degree, official transcript, university confirmation letter, or an approved credential evaluation document.
Candidates without a degree can begin through the Internal Audit Practitioner (IAP) pathway. An active IAP can later provide a waiver for CIA Part 1.
The traditional CIA certification exam consists of three computer-based multiple-choice examinations.
CIA Exam
Questions
Time
Part 1 – Internal Audit Fundamentals
125
150 minutes
Part 2 – Internal Audit Engagement
100
120 minutes
Part 3 – Internal Audit Function
100
120 minutes
Candidates are not required to complete the three parts in numerical order.
Part 1 establishes the foundation of CIA internal audit knowledge.
The current syllabus covers:
Foundations of Internal Auditing – 35%
Ethics and Professionalism – 20%
Governance, Risk Management, and Control – 30%
Fraud Risks – 15%
This part tests whether candidates understand why internal auditing exists, how independence and professional conduct should be maintained, and how audit work fits into organizational governance and risk management.
Part 2 moves from principles into the execution of an audit engagement.
Its main areas are:
Engagement Planning – 50%
Information Gathering, Analysis, and Evaluation – 40%
Engagement Supervision and Communication – 10%
Candidates should understand how to identify engagement risks, establish objectives and scope, gather sufficient evidence, analyze information, develop observations, and communicate throughout an audit engagement.
Part 3 focuses more heavily on managing and operating the internal audit function.
The syllabus includes:
Internal Audit Operations – 25%
Internal Audit Plan – 15%
Quality of Internal Audit Function – 15%
Engagement Results and Monitoring – 45%
The revised syllabus places these concepts directly within the context of professional internal auditing instead of treating areas such as technology and business knowledge as isolated subjects.
The CIA exam uses scaled scoring.
A candidate needs a scaled score of 600 to pass.
A common mistake is interpreting 600 as a simple percentage. The exam uses a scaled scoring methodology, so candidates should not treat it as equivalent to answering exactly 80% of questions correctly.
A better preparation target is consistent performance across the complete syllabus rather than trying to calculate the minimum number of questions required.
For candidates purchasing directly through The IIA under its published U.S./Canada/select-country pricing, current fees are:
Fee
IIA Member
Non-Member
CIA Application
$120
$240
CIA Part 1
$310
$445
CIA Part 2
$280
$415
CIA Part 3
$280
$415
Core CIA certification cost
$990
$1,515
This means the basic cost of CIA certification is approximately $990 for an IIA member or $1,515 for a non-member, before study materials, taxes, membership fees, rescheduling charges, or other optional expenses.
The published certified internal auditor exam cost can vary by country because National Institutes may use different pricing arrangements.
Therefore, candidates researching CIA exam cost, CIA certification cost, certified internal auditor certification cost, or certified internal auditor cost should verify their actual checkout amount in CCMS before purchasing.
The CIA certification registration process is managed through The IIA's Certification Candidate Management System, or CCMS.
The standard process is:
Create or access your CCMS account.
Prepare your education and identification documents.
Select the CIA certification program.
Submit the CIA application and application fee.
Wait for application approval.
Purchase the required CIA exam part.
Schedule the examination.
Pass all required exam parts.
Complete your professional experience requirement.
Receive your Certified Internal Auditor designation.
Once an exam registration is purchased, it is generally valid for 180 days or until the certification program expiration date, whichever occurs first.
Effective CIA exam preparation requires more than memorizing definitions.
The revised CIA syllabus is aligned with modern internal audit practice and The IIA's Global Internal Audit Standards, so candidates should be able to apply concepts to realistic audit situations.
A strong CIA certification training plan should combine:
The current CIA exam syllabus
Global Internal Audit Standards
Structured study material
Topic-based revision
Scenario-based questions
Timed mock examinations
Review of incorrect answers
Repeated practice in weak domains
A CIA certification course or certified internal auditor course becomes most valuable when it explains why an answer is correct rather than simply giving an answer key.
For candidates choosing a certified internal auditor online course or CIA certification online program, verify that the material follows the current syllabus, particularly if older 2019-syllabus material is still circulating online.
The IIA also provides official practice-question resources based on retired exam questions, with rationales explaining correct and incorrect responses.
Use this preparation sequence rather than studying all topics equally from day one.
Map every topic from the syllabus before opening a large review book.
This prevents spending excessive study time on low-value material.
A domain representing 40–50% of an exam deserves substantially more preparation than one representing 10–15%.
For example, Engagement Planning accounts for 50% of Part 2, making it a critical area.
Many certified internal auditor exam preparation questions require selecting the best response rather than recognizing a memorized statement.
Ask:
What should the internal auditor do first?
Who is responsible for this activity?
Does this affect independence?
What evidence is sufficient?
What response best aligns with professional standards?
Do not judge readiness simply by the number of questions completed.
Track mistakes by domain.
If 60% of your errors come from engagement planning, your next study session should focus there instead of completing another random question bank.
The real certified internal auditor exam is time-limited. Practice under similar conditions so question pacing becomes automatic.
For professionals planning a long-term career in internal audit, governance, assurance, controls, compliance, or risk management, the Certified Internal Auditor certification is one of the most directly relevant professional credentials available.
Unlike broader accounting qualifications, the certification concentrates specifically on professional internal auditing.
It can support roles such as:
Internal Auditor
Senior Internal Auditor
Internal Audit Manager
Audit Supervisor
Risk and Controls Specialist
Compliance Manager
Internal Controls Manager
Audit Director
Chief Audit Executive
The value comes from combining an internationally recognized credential with demonstrated audit experience—not simply adding another certificate to a résumé.
Before paying for a CIA certification course, confirm your eligibility, review the current syllabus, calculate your actual examination costs, and build a study plan around the weighted domains.
The strongest approach is simple: learn the standards, understand how internal auditors apply them, practice scenario-based questions, analyze every mistake, and complete timed mock exams before scheduling each CIA exam part.
That preparation strategy builds both exam readiness and the judgment expected from an IIA Certified Internal Auditor.