The CIA certification is a globally recognized credential for professionals working in internal audit, risk, compliance and internal controls. It is awarded by The Institute of Internal Auditors. The standard pathway requires candidates to pass three multiple-choice exams and meet applicable education and experience requirements. Current fees total $990 for IIA members and $1,515 for non-members. Training, membership, taxes, study material and rescheduling charges are not included in these totals.
CIA stands for Certified Internal Auditor. The certification proves that a professional understands internal audit standards, ethics, governance, risk management, internal controls, fraud risks and audit engagement procedures.
More than 220,000 professionals across 170 countries have earned the credential. The IIA describes it as the only globally recognized internal audit certification.
The qualification is relevant to:
Internal auditors
External auditors
Risk professionals
Compliance officers
Accountants
Finance professionals
Internal control specialists
IT auditors
Audit managers
Governance professionals
Experience does not always need to come from an internal audit department. Work in external audit, compliance, quality assurance, risk management and internal control may also qualify.
CIA certification is worth considering if you want to build a career in internal audit, governance, assurance, risk or compliance.
It can strengthen your professional profile by showing employers that you understand how to evaluate risks, review controls, conduct audit engagements and report findings.
A CIA Certified Internal Auditor may pursue roles such as:
Internal Auditor
Senior Internal Auditor
Internal Audit Manager
Risk Consultant
Compliance Specialist
Governance Analyst
Internal Control Manager
Chief Audit Executive
The certification does not guarantee employment or a salary increase. Its value depends on your experience, industry, location and ability to apply audit principles at work.
Education determines how much professional experience a candidate needs.
Candidate background
Exams required
Experience required
Master’s degree or equivalent
Parts 1, 2 and 3
1 year
Bachelor’s degree or equivalent
Parts 1, 2 and 3
2 years
Active IAP with a master’s degree
Parts 2 and 3
1 year
Active IAP with a bachelor’s degree
Parts 2 and 3
2 years
Active IAP without a qualifying degree
Parts 2 and 3
5 years
Active Internal Audit Practitioner holders receive a waiver for CIA Part 1. Candidates without a qualifying degree can first earn the IAP designation and then continue toward CIA certification.
For an IAP holder using the five-year experience route, two years of the required experience must have been completed within the previous three years.
Candidates with a bachelor’s or master’s degree can take the CIA exams before completing their experience. However, they will not receive the certification until their experience has been verified.
Candidates normally have three years after acceptance into the CIA program to complete all requirements.
Relevant professional experience may include:
Internal audit
External audit
Compliance
Risk management
Quality assurance
Internal control
Audit and assessment work
Applicants may need:
Proof of education
Official transcripts or an education confirmation letter
Valid government-issued photo identification
Professional experience verification
Documents required for exemptions or special pathways
Candidates should review the official CIA certification requirements before applying.
Certain experienced professionals may qualify for a one-part CIA Challenge Exam.
Possible candidates include:
Approved CPA or CA holders
Active CISA holders
Professionals with at least ten years of internal audit or related experience
Eligibility, application periods and testing windows may change. Candidates should confirm the current pathway before registering.
The standard CIA certification exam includes three separate computer-based examinations.
Exam part
Official title
Questions
Duration
Part 1
Internal Audit Fundamentals
125
150 minutes
Part 2
Internal Audit Engagement
100
120 minutes
Part 3
Internal Audit Function
100
120 minutes
All three parts use multiple-choice questions. Candidates may take the parts in any order.
Part 1 covers the principles and responsibilities that guide internal audit work.
Domain
Weight
Foundations of Internal Auditing
35%
Ethics and Professionalism
20%
Governance, Risk Management and Control
30%
Fraud Risks
15%
Candidates should understand:
The purpose of internal auditing
Assurance and advisory services
Independence and objectivity
Internal audit authority
Ethical behaviour
Governance responsibilities
Risk-management processes
Internal controls
Fraud risks and warning signs
Questions may require candidates to identify an independence problem, evaluate a control weakness or select the most suitable action under professional standards.
Part 2 covers the planning and performance of an individual audit engagement.
Domain
Weight
Engagement Planning
50%
Information Gathering, Analysis and Evaluation
40%
Engagement Supervision and Communication
10%
Candidates should know how to:
Define engagement objectives
Establish the audit scope
Select evaluation criteria
Conduct a risk assessment
Identify key controls
Develop an engagement work program
Gather reliable evidence
Apply analytical procedures
Use data-analysis methods
Prepare audit workpapers
Develop conclusions
Communicate with stakeholders
Business processes, financial concepts, information technology, cybersecurity and data analysis remain part of the revised syllabus. They are now tested within engagement planning, risk assessment and audit procedures rather than as separate Part 3 domains.
Part 3 focuses on the operation and management of the internal audit function.
Domain
Weight
Internal Audit Operations
25%
Internal Audit Plan
15%
Quality of the Internal Audit Function
15%
Engagement Results and Monitoring
45%
Candidates should understand:
Internal audit operations
Financial, human and technology resources
Internal audit strategy
Risk-based audit planning
Coordination with assurance providers
Quality assurance and improvement
Internal and external quality assessments
Audit reports
Recommendations and action plans
Residual-risk assessment
Follow-up and escalation
Engagement Results and Monitoring is the largest Part 3 domain. Candidates should spend enough study time on reporting, action plans, residual risk and follow-up responsibilities.
English examinations follow the 2025 CIA syllabus, which aligns with the Global Internal Audit Standards.
Most supported languages have also moved to the revised syllabus. However:
Arabic uses the 2019 syllabus through December 27, 2026
Arabic moves to the 2025 syllabus on December 28, 2026
Simplified Chinese in mainland China changes during the December 2026 testing window
Candidates should confirm the syllabus shown in CCMS before purchasing study material.
Candidates must earn a scaled score of 600 out of 750 to pass each exam part.
This is not a direct percentage. The scaled scoring system accounts for differences in question difficulty across exam forms.
Candidates who fail receive information about their performance in each domain. This can help them decide what to review before another attempt.
The Certified Internal Auditor exam cost includes an application fee and separate registration fees for Parts 1, 2 and 3.
Fee
IIA member
Non-member
CIA application
$120
$240
Part 1 examination
$310
$445
Part 2 examination
$280
$415
Part 3 examination
$280
$415
Total
$990
$1,515
These prices apply in the United States, Canada and selected other markets. Fees may differ where local IIA institutes administer the certification.
Taxes, exchange rates and local membership requirements may affect the final amount. Application and examination fees are generally non-refundable and non-transferable.
Candidates may also need to pay for:
IIA membership
CIA certification course
Study guides
Practice questions
Mock examinations
Rescheduling
Registration extensions
Local taxes
Annual renewal
Continuing Professional Education
Additional service
Published fee
Exam rescheduling or cancellation
$75
75-day exam registration extension
$100
One-time 12-month program extension
$275
Confirm all fees in CCMS before paying.
Yes. Members receive discounts on the application and all three examinations.
The total published saving is $525:
$120 application saving
$135 Part 1 saving
$135 Part 2 saving
$135 Part 3 saving
Compare the membership fee in your country with the available discount. Membership must be active and verified before payment to receive member pricing.
Check your education, professional experience and existing certifications.
The Certification Candidate Management System is used for applications, document submission, exam registration and certification records.
Upload the required documents and pay the application fee.
The IIA must approve your documents and application before you can register for an exam.
Choose an exam part, pay the fee and schedule your appointment.
An exam registration is generally valid for 180 days or until the certification program expires, whichever comes first.
Pass all examinations required for your pathway within the three-year program period.
Submit proof of your relevant work experience. The designation is awarded after all requirements are complete.
A useful CIA certification course should follow the current syllabus and explain how concepts are tested in real exam scenarios.
Look for training that includes:
Updated syllabus coverage
Instructor-led lessons
Part-wise preparation
Scenario-based questions
Detailed answer explanations
Timed mock exams
Progress monitoring
Flexible classes
Revision support
Exam strategy
Do not choose a course only because it advertises thousands of questions. Updated material and clear explanations are more useful than a large collection of repeated or outdated questions.
Candidates who want guided preparation can explore CIA certification training with online classes, mentor support, practice questions and mock exams.
Review the domains and their weights before beginning your study. Give more time to heavily weighted areas without ignoring smaller sections.
Focus on independence, ethics, objectivity, risk ownership, board responsibilities, audit reporting and follow-up.
For every question, identify:
Who is responsible?
What risk is involved?
Which control is being evaluated?
What should the auditor do next?
Which answer best follows the standards?
Keep a record of incorrect answers. Note the topic, why your answer was wrong and why the correct option was stronger.
Each CIA exam provides an average of approximately 72 seconds per question. Timed practice helps improve concentration and decision-making.
Older material may show Business Acumen, Information Security, Information Technology and Financial Management as separate Part 3 domains. These are not the current English Part 3 domains.
The exam tests judgement. Candidates need to understand the reasoning behind each answer.
Study time should reflect the percentage assigned to each domain.
Work experience is helpful, but exam answers must align with The IIA’s standards.
Check your experience requirement early and identify someone who can verify your work.
Qualification
Main focus
Best suited for
CIA
Internal audit, governance, risk and controls
Internal audit professionals
CISA
Information systems and technology audit
IT auditors
CPA or CA
Accounting and financial reporting
Accountants and financial auditors
CRMA
Risk management assurance
Risk professionals
IAP
Internal audit fundamentals
Students and beginners
CIA is generally the most relevant credential for professionals who want internal auditing to remain their main career area.
CIA holders must renew their certification annually.
Practising CIA holders generally need 40 CPE hours each year. Non-practising holders need 20 CPE hours. At least two hours of ethics training must be included.
Renewal normally opens on October 1 and must be completed by December 31.
Failure to renew can move the certification into grace status. Continued failure to meet renewal requirements may lead to revocation.
CIA stands for Certified Internal Auditor.
The Institute of Internal Auditors awards the certification.
The standard pathway requires three separate examinations.
Yes. The IIA does not require candidates to take the parts in numerical order.
Candidates need a scaled score of 600 out of 750 for each part.
The standard total is $990 for IIA members and $1,515 for non-members. Training, membership and taxes are separate.
Candidates with an eligible degree can take the exams before completing their required experience.
Candidates generally have three years after acceptance.
No. Candidates can use self-study, but structured training may help them follow the syllabus and prepare more efficiently.
No. Study material and training must be purchased separately.
Yes. IT, cybersecurity, finance and business topics remain within the revised syllabus, mainly through Part 2 engagement planning and risk assessment.
The credential must be renewed annually by meeting The IIA’s CPE, ethics and reporting requirements.
Confirm your eligibility, syllabus version, examination language and local fees before applying.
Follow the current domain weights, practise scenario-based questions and take timed mock exams before your test. A clear study plan will help you understand internal audit decisions instead of relying on memorised answers.