CIA Certification Guide and Exam Preparation

CIA quick facts — information table
Question	Current direct answer
Who awards the CIA?	The Institute of Internal Auditors.
What is the main route?	A three-Part multiple-choice examination programme.
What are the current Parts?	Internal Audit Fundamentals; Internal Audit Engagement; Internal Audit Function.
What language changes are scheduled?	Vietnamese registration begins 28 August 2026. Simplified Chinese Challenge registration begins in October 2026, with examinations offered from December 2026 in mainland China.
Is there a one-exam route?	Yes, but only through a qualifying Challenge pathway.
How long is the traditional programme?	Three years from application approval under the current rule.
What is the passing score?	600 on The IIA’s scaled-score system.
Who delivers the exam?	Pearson VUE under The IIA examination programme.
Can every candidate take it from home?	No. The IIA currently requires certification examinations to be taken at authorised Pearson VUE test centres; online testing ended on 27 May 2025.
Does a CTC course certificate make someone a CIA?	No. It confirms training only if CTC issues one; the CIA is awarded by The IIA.
Are fees universal worldwide?	No. Published central fees can differ through National Institutes, local taxes and currency arrangements.

1. What the CIA Is and Who It Is For

On this page, “CIA” means Certified Internal Auditor, not the Central Intelligence Agency. The certification is owned and awarded by The IIA. Earning it requires more than attending classes: the candidate must enter an approved pathway, satisfy the applicable education and experience conditions, pass the required examination or examinations, complete the process within the programme deadline and maintain the credential after award.

The CIA is most directly relevant to internal auditors and people moving into internal audit leadership. It can also be relevant to risk, compliance, control, , external audit, finance, fraud, information-systems audit and quality professionals whose work overlaps with internal assurance. Its value is strongest when the candidate wants a credential centred on and its relationship with , rather than a general accounting, cybersecurity or fraud-specialist qualification.

Who should seriously consider it

The CIA deserves serious consideration when a person expects internal audit to remain a meaningful part of their career, wants a structured command of the profession’s standards and methods, needs stronger credibility for internal audit roles, or is preparing for responsibility such as supervision, audit management or work. It can also help experienced professionals impose structure on knowledge gained through practice.

Who may not need it immediately

CIA is not automatically the correct first credential. A person whose work is primarily information security or technology assurance may obtain more immediate role alignment from CISA. Someone focused on fraud examination may prefer CFE. A professional seeking a broad accounting qualification may need ACCA, CA, CPA or CMA first. A student or early-career candidate who is not yet ready for the CIA route may consider the designation and a staged plan. These are career-fit judgments, not official eligibility determinations.

The uncomfortable truth is that a certification cannot compensate for weak work experience, poor communication or an unclear career direction. Candidates should pursue CIA because it fits the work they intend to perform, not because the abbreviation looks prestigious.

Certification, examination and training are different

The examination measures the knowledge and application defined by the applicable syllabus.
The certification is awarded only after all official requirements are satisfied.
Exam preparation is education intended to help a candidate understand and practise the syllabus.
A training completion certificate, if offered, records participation or completion of the CTC programme; it is not the CIA credential.

Candidates should treat any CTC training certificate only as evidence of course participation or completion, never as proof that the CIA designation has been awarded.

Sources: [1] [6] Verified 1 August 2026.

2. Choose Your CIA Pathway

Guidance tool

Which route may deserve a closer look?

This tool organises the published pathways. It does not approve eligibility; The IIA makes the official decision after reviewing the application and evidence.

Pathway choice comes before study-material choice. Candidates frequently waste money by buying a course for the wrong syllabus or assuming that seniority alone creates Challenge eligibility. It does not.

Which route may deserve a closer look? — information table
Pathway	Basic position	Examination structure	Critical limitation
Traditional CIA	Broad route using education and experience requirements	Three Parts	Must complete the programme within the official period.
IAP-to-CIA	Route for active Internal Audit Practitioner holders within the traditional programme	Current treatment includes a Part 1 waiver; remaining conditions still apply	IAP does not automatically remove the education-linked experience requirement.
Accounting Challenge	For qualifying active members of listed accounting bodies in good standing	One exam, 150 questions, 180 minutes	The body and membership category must appear in the current approved framework; student status is not enough.
CISA Challenge	For candidates holding an active CISA in good standing	One exam, 150 questions, 180 minutes	A general IT-audit background without active CISA does not establish eligibility.
Professional Challenge	2026 pilot for professionals with at least ten years of accepted experience	One exam, 150 questions, 180 minutes	Pilot applications are published for 1 April–30 September 2026; continuation after 2026 must not be assumed.

A practical pathway decision sequence

Do you hold an active qualification that appears in the current Accounting Challenge list? Check the exact body and status, not merely the title used in conversation. The currently reviewed list includes qualifying bodies such as ICAP and ACCA, subject to the official pathway conditions.
Do you hold an active CISA in good standing? If yes, review the information-systems Challenge documentation.
Do you have at least ten years of accepted experience and fit the current 2026 professional-pilot rules? If yes, review the pilot dates and documents immediately rather than assuming future availability.
Do you hold active IAP status? Review the current IAP-to-CIA treatment and the experience requirement linked to your education.
If none applies, use the traditional route. Confirm education, experience, documents and deadline before registration.

Eligibility warning: CTC Global may explain published criteria and help a candidate prepare questions, but only The IIA can approve an application. No preparation provider can guarantee eligibility before official review.

When the one-exam route is not automatically easier

The Challenge Exam compresses a broad body of CIA knowledge into one sitting. Experienced candidates may recognise more workplace scenarios, but they still need disciplined coverage of topics outside their daily role. A finance professional may be weak in engagement management; an IT auditor may be weak in enterprise governance; a senior audit leader may be rusty on detailed procedures. “One exam” means fewer appointments, not less intellectual coverage.

Pathway mistakes to avoid

A candidate should not choose the Accounting Challenge route merely because they work in finance. The route depends on a current credential or membership recognised by the official list, together with the stated membership category and good-standing evidence. Similarly, past CISA status, an expired credential or experience performing IT-audit tasks is not automatically equivalent to holding an active CISA for the information-systems route.

The professional pilot creates a different trap. Ten years in a senior finance, compliance or operational role may sound relevant, but the official definition of accepted internal audit or related experience still governs. Candidates should map duties to the published categories and prepare verification rather than relying on a senior title.

Decision record before enrolment

Before enrolling in any preparation programme, write a one-page pathway record containing:

intended route;
official page and date checked;
active credential or education basis;
good-standing status, if relevant;
accepted experience claimed;
documents available and missing;
application deadline;
testing window or authorization period;
examination language and syllabus version;
question awaiting The IIA’s response.

This record protects the candidate from verbal assumptions and gives the training provider a clear preparation context without pretending to approve eligibility.

Pathway switching risk

Candidates should not assume that fees, progress or material access transfer neatly if they select the wrong route. A traditional application, a Challenge application and a provider’s course package can have separate commercial and policy consequences. Confirm the route first, then buy the matching preparation. The expensive mistake is not choosing the longer route; it is paying twice because the first route was never defensible.

Sources: [1] [2] [3] [4] [5] [15] Verified 1 August 2026.

3. Eligibility and Experience

Eligibility combines education, experience and pathway-specific evidence. Candidates should read the official table rather than relying on old coaching summaries.

Traditional education and experience logic

Current official guidance links the required experience period to the candidate’s education route. The reviewed framework provides a shorter experience requirement for a master’s degree and a longer requirement for a bachelor’s degree. Alternative and IAP-based routes can require substantially more experience.

Traditional education and experience logic — information table
Entry position	Current planning interpretation	What still requires official confirmation
Master’s degree or equivalent	Generally linked to one year of accepted experience	Degree equivalence, documents and experience acceptance
Bachelor’s degree or equivalent	Generally linked to two years of accepted experience	Degree equivalence, documents and experience acceptance
Active IAP / alternative route	Experience depends on the route and education; a no-degree candidate may need five years, including recent experience under the current wording	Exact applicability to the candidate and verification evidence
Student or incomplete education	Entry may be possible only through specified rules; certification still depends on completing all requirements	Timing, documents and current student provisions

An active IAP can provide a Part 1 waiver, but it does not remove the experience requirement. Under current published rules, candidates without a degree may need five years of accepted experience, including two of those years within the previous three years; degree holders follow the shorter education-linked requirements.

Supporting-requirement exemptions are not Challenge eligibility

The traditional CIA application includes two specific supporting-requirement exemptions:

ACCA qualified members: The IIA may waive both the education and work-experience supporting requirements after verifying that the applicant is a qualified ACCA member with active status. An ACCA student or affiliate is not automatically treated as a qualified member.
Active US CPA licence holders: The IIA may waive the education supporting requirement after verifying the active licence. The ordinary experience requirement still applies unless the candidate qualifies through a separate route.

These exemptions operate inside the traditional CIA application. They are not the same as the Accounting , which is a separate one-exam pathway for active members or licence holders from approved accounting bodies who meet its current good-standing and documentary conditions. A general accounting background, an unlisted qualification or inactive status does not establish Challenge eligibility. The IIA makes the final decision in every case.

Accepted experience

The IIA’s current eligibility guidance recognises internal audit and related experience categories. Depending on the official definition and evidence, related fields may include quality assurance, risk management, compliance, external audit and internal-control work. Job title alone is not decisive; the substance of the work and the verifier’s evidence matter.

A candidate should prepare a defensible experience summary containing:

employer and role;
exact dates;
major responsibilities;
proportion of time spent on relevant work;
examples of audit, risk, control, compliance or assurance responsibilities;
name and authority of the verifier;
consistency with the résumé, application and supporting documents.

Experience timing

A candidate may be able to take examinations before the full experience period is complete, but the CIA is not awarded until all outstanding requirements are approved. This can be a sensible strategy only when the candidate can realistically complete experience before the programme deadline.

Edge cases that require official review

Do not make assumptions where a degree title is unusual, a qualification is from an unlisted professional body, experience is part-time, work combines internal audit and operations, documents use different names, a credential has lapsed, or membership is at student/affiliate level. Those are not problems a training provider can resolve through marketing copy. Submit the correct evidence and obtain the official decision.

How to present mixed experience

Many candidates have hybrid roles. A finance manager may spend part of the year on controls; an external auditor may perform risk and assurance work; a compliance officer may conduct investigations and monitoring. The application should describe the relevant work accurately without relabelling the entire job as internal audit. A useful schedule shows dates, approximate percentage of relevant duties, reporting line, engagement examples and the verifier.

Part-time or overlapping experience needs particular care. Do not simply add calendar years from concurrent roles. The official review may consider duration, relevance and evidence differently. Where the calculation is not obvious, obtain official clarification before building a completion plan.

Education equivalence and documents

Degree terminology differs between countries. Do not assume that a “Master,” “MPhil,” “professional qualification,” “associate degree” or local chartered status has a particular US-equivalent level. Follow the official document, evaluation and translation requirements, and obtain an official decision where equivalence is unclear.

Character and professional standing

Certification applications can include professional-conduct, character or good-standing elements. Candidates should answer truthfully and provide the specified verification. Do not omit an adverse fact or manipulate wording to make an application appear stronger. Where a disciplinary, legal or membership issue exists, the candidate needs authoritative guidance, not sales reassurance.

Eligibility planning scenarios

Scenario 1 — Master’s degree and internal audit role: The candidate may be able to complete the shorter published experience period, but still needs official education evidence and .

Scenario 2 — Bachelor’s degree and external audit experience: The candidate should compare the substance of the work with accepted related experience and prepare a verifier who can confirm it.

Scenario 3 — Active IAP holder without a degree: The Part 1 treatment can be useful, but the current experience requirement remains substantial and includes recency. The candidate should not enrol for only Parts 2 and 3 without checking the complete route.

Scenario 4 — ACCA member: The candidate should verify active membership category and whether the current Accounting Challenge list and good-standing evidence apply. Being an ACCA student is not the same condition.

Scenario 5 — Ten-year audit leader: The professional Challenge pilot may be relevant in 2026, but the candidate must act within the published application period and demonstrate accepted experience.

These examples explain the logic; they are not official decisions.

Sources: [1] [3] [4] [5] [6] Verified 1 August 2026.

4. Documents, Application and Deadlines

The official application is managed through The IIA’s (CCMS). Application, programme, registration and appointment deadlines are different clocks. Record each one separately.

Documents and the 90-day application period

After The IIA processes an application payment, the candidate has 90 days to complete the application, upload the required documents and follow the CCMS instructions. An incomplete application expires after that period and requires a new application.

The exact evidence depends on the pathway, but may include:

valid government-issued identification;
education evidence for the traditional route;
experience verification;
proof of an active credential and good standing for a Challenge route;
a letter or registry record from the relevant professional body;
legal-name-change evidence where records differ;
translations or evaluations requested by The IIA.

The name and country on the examination identification must match the information in CCMS and the appointment record. Resolve differences before scheduling.

Traditional programme period

The current traditional CIA programme period is three years from application approval. All examinations and outstanding experience requirements must be completed within that period. If the programme expires, passed examinations and fees can be forfeited under the applicable rules.

Exam registration and the 180-day authorization

After programme approval, the candidate registers and pays for a specific examination or Part. The resulting authorization is valid for 180 days or until the certification programme expires, whichever occurs first. Registration is not the same as scheduling; the appointment must be booked and completed within the valid authorization.

Challenge application timing and testing windows

Challenge application timing and testing windows — information table
Challenge pathway	Application timing	Examination windows
Accounting Challenge	Applications are currently open year round.	February, June, September and November, subject to an authorization that covers the selected window.
CISA Challenge	Applications are currently open year round.	February, June, September and November, subject to an authorization that covers the selected window.
Professional Challenge	2026 pilot applications run from 1 April through 30 September 2026.	First attempts are offered in June, September and November 2026. Retakes remain available during the candidate’s three-year programme, using an available Challenge window.

For Accounting and CISA Challenge candidates in mainland China, the official 2026 timetable uses fixed registration, scheduling and single-date examination periods:

Challenge application timing and testing windows — information table
Mainland China window	Registration	Schedule appointment	Test or retake
March 2026	1–20 January	1–8 February	8 March at 9:00 a.m. CST
June 2026	1–20 April	1–8 May	7 June at 9:00 a.m. CST
September 2026	1–20 July	1–8 August	6 September at 9:00 a.m. CST
December 2026	1–20 October	1–8 November	6 December at 9:00 a.m. CST

These mainland-China dates differ from the ordinary Challenge-window framework. Candidates must use the timetable attached to their pathway, authorization and appointment confirmation.

Extensions

For the traditional CIA programme, The IIA currently publishes:

a one-time 12-month programme extension, purchased before programme expiry;
a one-time 75-day exam-registration extension for each registration, purchased before the registration expires and never beyond the programme expiry date;
possible hardship consideration for documented circumstances such as illness, parental leave, bereavement, civil unrest, natural disaster or military service, requested through CCMS.

Ordinary programme and exam-registration extensions are not available for the CIA Challenge Exam. Challenge candidates need an authorization and testing window that can realistically be used.

Payment, expiry and record control

Official application and registration payments are generally non-refundable and non-transferable once completed. Save application, approval, registration and appointment confirmations; record the 90-day application deadline, three-year programme expiry, 180-day authorization, appointment-change cutoff and result date in one control sheet. Official account records and written confirmations take priority over messages from a training provider.

Sources: [1] [3] [4] [5] [6] [19] Verified 1 August 2026.

5. CIA Examination Structure

The traditional CIA and the Challenge Exam are different examination structures. Do not combine them in one sentence or price table.

Traditional three-Part route

Traditional three-Part route — information table
Part	Current official name	Questions	Time	Central focus
Part 1	Internal Audit Fundamentals	125	150 minutes	Foundations, ethics, governance, risk, control, fraud and the basis of internal audit work.
Part 2	Internal Audit Engagement	100	120 minutes	Planning, performing, supervising and communicating engagement work.
Part 3	Internal Audit Function	100	120 minutes	Managing the internal audit function, quality, strategy, stakeholder relationships and broader organisational knowledge.

The Parts are multiple-choice examinations. Candidates can generally choose their order, but should consider background, material availability and the programme deadline.

Challenge structure

The current Challenge Exam has 150 multiple-choice questions and a 180-minute appointment. The common structure does not erase the pathway differences: the candidate must qualify under accounting, CISA or the professional pilot and comply with that route’s application evidence and windows.

Choosing a first traditional Part

There is no universal best order. Part 1 is logical for candidates who need a standards and fundamentals base. Part 2 can suit practitioners who regularly plan and perform engagements, but it still demands disciplined method. Part 3 may be familiar to managers yet broad enough to expose weak areas in quality, strategy, technology or business concepts. The correct order is the one that creates a coherent plan and can be completed before expiry.

Exam security

The CIA is a . Current questions and answers are confidential and are not published. Candidates must not seek “real questions,” reconstruct live content, share remembered items or treat examination recollections as study materials. Legitimate preparation uses the syllabus, official sample questions and licensed or original learning resources.

Sources: [1] [2] [3] [4] [5] Verified 1 August 2026.

6. Current CIA Syllabus

Part 1 — Internal Audit Fundamentals

Part 1 establishes the professional base: purpose and authority of internal auditing, ethics, and , governance, risk management, , and the fundamental concepts needed to perform credible work. A candidate who memorises definitions without understanding who owns risk, who approves the charter or how independence is protected will struggle with scenario questions.

Preparation implications: build a concept map linking the , , the chief audit executive and individual auditors. Practise distinguishing management responsibility from internal audit responsibility. Use short scenarios to test whether a threat affects organisational independence, individual objectivity, competence or .

Part 2 — Internal Audit Engagement

Part 2 follows the engagement lifecycle: planning, objectives, scope, risk assessment, work programmes, evidence, analysis, supervision, findings, communication and . The challenge is not learning isolated procedures; it is selecting the right procedure for the objective and interpreting evidence proportionately.

Preparation implications: work through mini-engagements. Start with an objective, identify relevant risks and controls, design procedures, judge evidence, frame a finding and decide what should be communicated. Track common errors such as confusing inquiry with sufficient evidence or recommending action before understanding .

Part 3 — Internal Audit Function

Part 3 addresses how the internal audit activity is positioned and managed. It includes strategy, planning, resources, quality, performance, stakeholder relationships, coordination and broader knowledge needed to lead or evaluate the function. Experienced managers should not treat it as “common sense”; official responsibilities and terminology matter.

Preparation implications: compare the responsibilities of the board, senior management and CAE; understand the risk-based plan and resource constraints; study quality assurance and improvement; and connect business, technology and organisational issues to internal audit decisions.

Challenge Exam domains

The updated Challenge syllabus integrates topics from the three-Part body of knowledge into one examination. Qualifying credentials or experience reduce the number of examination appointments, not the obligation to cover the published domains. Candidates should map every domain, diagnose gaps and allocate study time according to weakness rather than confidence.

Syllabus discipline

Before purchasing or using materials, confirm:

pathway;
examination language;
syllabus version;
effective date;
testing window;
whether materials are licensed and current;
whether old Part names appear because the resource is outdated.

Using a familiar but superseded book is not frugal; it is a false economy.

Sources: [7] [8] [9] [10] [20] [18] Verified 1 August 2026.

7. Language and Syllabus-Transition Notice

The traditional CIA examination is currently offered in:

Arabic, Simplified Chinese, Traditional Chinese, English, French, German, Japanese, Korean, Polish, Portuguese, Russian, Spanish, Thai and Turkish.

Upcoming traditional language: Effective 28 August 2026, candidates may register to take the CIA examination in Vietnamese. Before that effective date, Vietnamese is an upcoming registration option rather than a currently available examination language. Confirm availability in CCMS before registering.

Most currently listed language versions use the 2025 syllabus, but two transition rules remain material in 2026:

7. Language and Syllabus-Transition Notice — information table
Language	Current position verified 1 August 2026	Candidate action
Arabic	The 2019 syllabus remains available through 27 December 2026. Arabic transitions to the 2025 syllabus on 28 December 2026.	Match the appointment date and study materials to the correct syllabus.
Simplified Chinese	Available only in mainland China. The 2019 syllabus remains current until transition during the December 2026 testing window; the reviewed official wording does not state the exact transition date.	Confirm the applicable syllabus in CCMS and the appointment notice before purchasing materials.
Vietnamese	Effective 28 August 2026, candidates may register to take the CIA examination in Vietnamese. This is an upcoming option until the effective date.	Confirm that Vietnamese appears as available in CCMS before registration.
Other currently listed traditional languages	The current 2025 syllabus applies under the reviewed official language guidance.	Confirm the language version when registering and use matching materials.

Challenge Exam languages

The Challenge Exam is currently available in English, French and Spanish. Effective October 2026, candidates may register for a Challenge Exam in Simplified Chinese; effective December 2026, Challenge Exams will be offered in Simplified Chinese. Simplified Chinese is available only in mainland China. Candidates should confirm the language displayed in CCMS before registration and scheduling.

Keep the Chinese rules separate: the traditional CIA Simplified Chinese syllabus transition during the December 2026 testing window is different from the Challenge Exam’s October registration and December examination rollout.

Syllabus check: Before buying materials or scheduling, confirm the pathway, examination language, appointment date and syllabus version together. A correct course for the wrong language transition is still the wrong preparation plan.

Sources: [1] [2] Verified 1 August 2026.

8. CIA Fees, Membership and Total Cost

The figures below are The IIA’s centrally published USD charges verified on 1 August 2026. They apply in the United States, Canada and selected countries; National Institutes, local taxes, currency rules and mandatory regional membership can change the actual amount. Check the amount shown in CCMS or by the relevant National Institute before paying.

Published central traditional CIA fees

Published central traditional CIA fees — information table
Item	IIA member	Non-member
CIA application	USD 120	USD 240
Part 1 examination	USD 310	USD 445
Part 2 examination	USD 280	USD 415
Part 3 examination	USD 280	USD 415

Published central Challenge fees

Published central Challenge fees — information table
Item	IIA member	Non-member
Challenge application	USD 150	USD 380
Challenge examination	USD 845	USD 1,245

Secondary official charges

Secondary official charges — information table
Item	Current central charge	Main condition
Appointment reschedule or cancellation	USD 75 per change, paid to Pearson VUE	Change allowed until 48 hours before the appointment; local tax may apply.
Exam-registration extension	USD 100	One 75-day extension, purchased before expiry; traditional route only.
Programme extension	USD 275	One 12-month extension, purchased before programme expiry; traditional route only.

The Challenge Exam has no ordinary programme or exam-registration extension.

CIA renewal fees

CIA renewal fees — information table
Renewal status	IIA member	Non-member
Active	USD 30	USD 120
Grace	USD 60	USD 240

For IIA members residing in North America with an Active designation, annual certification renewal fees are included with membership under the current central pricing page. Renewal charges can differ by region and by whether renewal is administered through IIA Global or a National Institute.

Build a realistic total-cost budget

Include the application, examinations, possible retakes, membership where useful or required, taxes, foreign-exchange charges, travel to a test centre, preparation materials, training, renewal and contingency. Do not describe one USD total as the universal worldwide cost.

CTC Global fees are separate

CTC Global programme fees and official IIA certification fees are separate unless a written CTC proposal expressly states otherwise. Request the current programme brief for supported Parts or Challenge pathways, dates, delivery format, HOCK material access, instructor details, fees, taxes and commercial terms.

Sources: [1] [2] [11] [13] Verified 1 August 2026.

9. Scheduling, Test Centres and Exam Day

Test-centre delivery

The IIA currently requires its certification examinations to be taken at authorised Pearson VUE test centres. Online testing was discontinued on 27 May 2025. Delivery policies can change, so confirm the current option in CCMS before booking.

Scheduling and appointment confirmation

After approval and , access Pearson VUE through CCMS, select an available date, time and location, and complete the booking. Pearson VUE sends an appointment confirmation. If that email does not arrive, contact Pearson VUE immediately; do not assume the appointment was recorded.

Walk-ins are not accepted. Challenge candidates must select a testing window that falls within the valid authorization period.

Rescheduling and cancellation

A confirmed appointment may currently be changed until 48 hours before the appointment. Pearson VUE charges USD 75 for each reschedule or cancellation, and local tax may apply. Cancelling an appointment does not extend the 180-day authorization. Candidates in mainland China must follow the separate timing instructions that apply to their testing window.

No-show consequences

Failure to attend at the scheduled location and time, late arrival, or failure to present acceptable identification can produce a No-Show status. The registration fee is forfeited, no refund is provided, and a new registration and payment are required before another appointment can be scheduled. Pearson VUE declares the status; appeals are submitted to Pearson VUE.

Arrival, identification and check-in

Plan to arrive at least 30 minutes early. Arriving with fewer than 30 minutes remaining may lead to denied entry, and arrival after the appointment time is treated as a No-Show.

Present a valid, current government-issued photo ID containing the same name and country recorded in the application, CCMS profile and Pearson VUE appointment. A test centre may also collect a fingerprint image. Follow the centre’s instructions for storing personal belongings and do not bring prohibited items into the examination room.

NDA, breaks and security

Before the examination begins, the candidate must accept The IIA’s Nondisclosure Agreement and General Terms of Use. Refusal ends the session and forfeits the fee. Current examination questions and answers are confidential.

There are no scheduled breaks. A candidate may take an unscheduled break, but the examination clock continues. Leaving and re-entering the room can require signing the centre log, showing identification and providing another fingerprint image.

Centre closure and technical incidents

If Pearson VUE closes the selected centre, it will contact the candidate and a replacement appointment can be arranged without the normal change fee. When local conditions create doubt, confirm the centre’s status through the official channel.

Report a computer or delivery problem immediately to the examination administrator and ask the proctor to log the incident. Concerns about the examination experience should also be raised with Pearson VUE customer service.

Testing accommodations

Candidates who need an accommodation should use The IIA’s official accommodation application during the programme application process and provide the required supporting evidence. Approval must be obtained before scheduling an appointment that depends on the accommodation.

Sources: [6] [16] Verified 1 August 2026.

10. Scoring, Results and Retakes

The CIA examination uses a scaled-score system. The reported passing point is 600, but that does not mean a candidate needs exactly 60% correct. Scaled scoring converts performance so different examination forms can be reported on a common scale.

Traditional CIA results

Current official guidance provides a single official result, generally within three weeks of the examination date. Older summaries that refer to an immediate preliminary result are no longer reliable for the current process.

Challenge results in 2026

The updated Challenge Exam has pathway- and window-specific result timing:

Candidates who tested in the June 2026 window are told that results will be available by 27 July 2026, reflecting enhanced scoring and formal passing-score determination for the updated exam.
Beginning with the September 2026 testing window, official results are stated as available within three weeks of the examination date.

Candidates who tested in June 2026 should use the special result date above. The three-week timing applies from the September 2026 testing window onward.

Understanding a failed result

A failed score is diagnostic only to the extent explained by the official score report. It does not reveal live questions or prove that a candidate failed because of one topic. A serious review should combine the report with practice data, timing behaviour and study records.

Retakes

A failed CIA examination may currently be retaken after 30 days. The candidate must complete a new registration and payment, remain within the programme eligibility window and may not exceed eight attempts during that window. Verify the current policy before paying because retake rules can change.

A practical retake plan includes:

do not book the earliest possible date automatically;
identify whether the problem was knowledge, application, pacing or exam anxiety;
rebuild weak domains from the syllabus;
use fresh questions rather than memorising answer patterns;
take timed mixed-domain assessments;
rebook only after performance is stable.

There is no value in repeating the same method more aggressively if the method itself failed.

After a pass

Do not stop at the result notification. Confirm that the result appears correctly in the official system, review any outstanding experience or document requirements, retain correspondence and understand the next administrative step. A passed examination is not permission to announce certification if the credential has not been awarded.

After a fail

Allow the initial reaction to settle before making a new payment. Record the score report, testing conditions, pacing, flagged questions, preparation hours and material used. Compare that evidence with the official syllabus. A retake plan should state what changes, who will review progress and what readiness threshold will be used. Without a changed method, the new registration is merely a repeat expense.

Employers and colleagues do not need confidential score detail. Candidates should protect exam security and avoid trying to reconstruct questions during the review. Discuss domains, reasoning patterns and study process instead.

Sources: [1] [5] [6] [12] Verified 1 August 2026.

11. Certification, Designation and Renewal

Passing the required examination or examinations is not always the final step. Outstanding experience and other programme requirements must be verified before certification is awarded.

Award and designation timing

After all programme requirements are complete, The IIA conducts a final audit that the current handbook describes as taking about 7–10 business days. The CIA webpage states that the designation generally appears in the candidate’s account within 7–14 business days after completion. These statements describe related stages of the same final process; allow the longer period before escalating a delay.

Use CIA after your name only after The IIA confirms certification. Passing an examination, completing CTC training or waiting for experience verification does not authorize premature designation use.

Certificate, registry and digital badge

After certification, an electronic certificate can be accessed through CCMS and a physical certificate may be ordered for a fee. Active holders may opt in to The IIA Certification Registry so employers and other parties can verify the credential. Web-enabled digital badges are also available in supported regions. Availability and access are controlled by The IIA, not CTC Global.

Annual renewal requirements

The annual reporting period runs from 1 January through 31 December, with renewal completed by 31 December. The current requirements are:

Annual renewal requirements — information table
CIA status	Annual CPE	Ethics within total	Use of CIA designation
Practicing	40 hours	At least 2 hours	Permitted while certification remains Active.
Nonpracticing	20 hours	At least 2 hours	Permitted while certification remains Active.
Retired	0 hours after approved move to Retired status	0	Permitted under the retired-status rules.

Newly certified individuals have an initial reporting period beginning on the certification date and ending on 31 December of the following year.

Practicing and nonpracticing holders also attest to ethics and professionalism requirements and report Standards conformance. Supporting CPE records must be retained for at least three years and produced if selected for audit.

Active, Grace, Revoked and Retired status

Active: Renewal is current and the designation may be used.
Grace: Failure to renew by 31 December moves the certification into a two-year inactive Grace period. The designation may not be used until the required renewal is completed.
Revoked: Remaining in Grace for more than 24 months leads to revocation. Current recertification treatment for CIA requires a recertification application, fees and successful completion of CIA Part 1.
Retired: An Active holder who leaves the workforce may request Retired status through CCMS. Retired holders are exempt from annual renewal requirements while the status remains valid, and declarations can be audited.

A holder who lacks enough CPE should not submit an inaccurate renewal. The policy permits defined deficiency treatment, and The IIA conducts CPE audits. Failure to provide evidence can result in ; a shortfall found in an audit can receive a six-month period for correction under the current policy.

Hardship and regional administration

The Professional Certifications Board may grant partial or complete hardship relief for documented good cause. A request must be submitted through CCMS before the annual deadline. Renewal fees and administration can differ by membership, location and National Institute.

Sources: [1] [6] [11] [13] [14] Verified 1 August 2026.

12. How to Prepare for the CIA Exam

The IIA does not prescribe one universal study-hour formula. Any study-time estimate is planning guidance, not an official requirement or guarantee. Preparation time depends on professional experience, reading speed, language, pathway, familiarity with the current syllabus and the quality of practice.

Start with a diagnostic, not a calendar

Before setting an exam date, map the official domains and take a controlled diagnostic. Record confidence and actual performance separately; experienced professionals often overestimate topics they encounter at work but have never studied formally.

Suggested preparation paths

New or early-career candidate: build terminology and professional-role clarity first. Use Part 1 concepts to understand governance, risk and control, then connect them to engagement work. Do not rush into hundreds of questions before understanding why an answer is correct.

Experienced internal auditor: identify where local practice differs from the current syllabus. Experience is useful, but “this is how our organisation does it” is not the same as the professionally expected answer.

Challenge candidate: create one integrated syllabus map. Protect time for domains outside the qualifying credential or current job. The compressed format demands broad recall and sustained pacing.

Retake candidate: stop treating question volume as the only measure. Rebuild the weak concept, explain it without notes, apply it to a new scenario and then test under time pressure.

A disciplined weekly cycle

Learn: read or attend instruction on a defined domain.
Retrieve: close the material and write what you remember.
Apply: solve targeted questions and explain every option.
Correct: maintain an error log by concept, not by question number.
Integrate: mix new and old domains.
Measure: complete a timed checkpoint.
Adjust: move time toward weakness, not favourite topics.

Practice-question method

For each error, classify the cause: knowledge gap, misread wording, failure to identify the governing principle, distraction by a plausible option, calculation/logic mistake or time pressure. Review why the chosen answer was attractive. That is where the repeat error lives.

Mock-exam method

A mock should test more than score. Track pacing, fatigue, changes of answer, flagged questions, domain performance and the number of guesses. Use realistic time and a distraction-free environment. Do not take mock after mock without remediation between them.

Final week

Reduce new content, review condensed notes and error patterns, complete limited mixed practice, confirm documents and logistics, and protect sleep. Last-minute volume can create confidence without retention.

Common mistakes

using a legacy syllabus because the book is familiar;
choosing a pathway based on hearsay;
memorising answer keys;
ignoring terminology;
postponing weak domains;
booking before readiness;
neglecting the programme deadline;
treating work experience as a substitute for exam technique;
seeking confidential “real exam questions.”

Converting the syllabus into a study system

Create a domain register with four ratings: knowledge, application, question performance and confidence. Confidence is deliberately separate because it is often wrong. For each domain, list the source chapter, instructor session, question set, error themes and next review date. This turns “I have studied Part 1” into evidence of what has actually been learned.

Use spaced retrieval. Revisit a concept after one day, one week and several weeks rather than rereading it repeatedly in one sitting. Retrieval can be a blank-page summary, oral explanation, flashcard, mini-case or question set. The method matters less than forcing the mind to produce the answer without seeing it.

Reading scenario questions

First identify what the question asks: best action, first action, most significant risk, primary responsibility, strongest evidence or appropriate conclusion. Then identify the actor and stage of the process. Many wrong answers are technically true but belong to management, the board, the CAE or a later engagement step.

Do not select the longest answer or the most severe response automatically. Look for alignment with the professional principle and the facts given. Avoid adding facts that the question did not provide.

Managing pace

Calculate an average pace, but do not force identical time on every item. Answer clear questions efficiently, flag genuinely uncertain items and protect review time. Excessive changing of answers can damage performance when the first choice was based on a sound principle. Change an answer only when a specific error or better reasoning is identified.

Working with an instructor

Use live instruction to resolve reasoning, not merely to hear a book read aloud. Submit difficult scenarios, explain why you chose an option and ask how the governing principle changes the answer. A competent instructor should expose the reasoning and boundaries, not claim access to secret questions.

Measuring readiness

Readiness is stronger when performance is stable across mixed domains and under time pressure, not when one familiar question bank shows a high percentage. Look for consistency, declining repeated-error categories, adequate pacing and the ability to explain answers. A single impressive mock score can be noise.

Study ethics

Reject files advertised as recent live questions, “recalls” or exam dumps. Apart from examination misconduct, such material teaches unreliable patterns and can contain fabricated or obsolete content. A candidate seeking an ethics-based professional credential should not begin by violating exam security.

Sources: [7] [8] [9] [10] [20] [18] Verified 1 August 2026.

13. Prepare for the CIA Exam with CTC Global

CTC Global provides structured preparation for professionals and students who want to understand the CIA syllabus, apply its concepts and build an examination plan that matches the correct pathway. Preparation is available for the traditional three-Part route and for eligible CIA Challenge Exam candidates. Current cohort details can vary, so candidates receive the applicable programme brief before enrolment.

Independent preparation with issuer clarity

CTC Global prepares candidates for the examination; it does not award or govern the CIA credential. The Institute of Internal Auditors controls eligibility, applications, official fees, examination appointments, results, certification and renewal. This separation matters because a training provider can explain published rules but cannot approve an application or alter an official decision.

Traditional CIA preparation

Traditional preparation can cover:

Part 1 — Internal Audit Fundamentals, including the foundations of internal auditing, ethics, governance, risk, control and fraud-related concepts;
Part 2 — Internal Audit Engagement, including planning, performing, supervising and communicating engagement work; and
Part 3 — Internal Audit Function, including strategy, governance of the function, resources, quality, planning and stakeholder communication.

Available Parts, dates and delivery arrangements are confirmed in the current programme brief. Candidates should not assume that all three Parts begin at the same time or use identical schedules.

CIA Challenge Exam preparation

Challenge preparation must match the candidate’s approved pathway and the current Challenge syllabus. CTC Global can prepare candidates using the shared Challenge examination content, while the candidate remains responsible for confirming eligibility under the Accounting, active-CISA or Professional pathway. The Professional pathway is currently a 2026 pilot; confirm that the application route remains open before enrolling.

IIA Training Provider Licensing

CTC Global is listed in The Institute of Internal Auditors’ Training Provider Licensing Program registry as a licensee since June 2026. The registry records on-demand, live in-person, live virtual and blended formats; English, Urdu and Hindi; and international scope.

The licence permits authorised use of specified IIA content and trademarks in eligible learning programmes. It is not an endorsement of CTC Global’s instructors, fees, results or business practices, and it does not make CTC Global the issuer of the CIA credential.

Sources: [21] [22]

HOCK study materials

Separately, HOCK International has welcomed CTC Global to the HOCK Partner Program. The announcement states that CTC Global offers CIA and CMA exam-preparation courses using HOCK study materials and that students may study in person or online. Material entitlement, activation and access period can differ by cohort, so candidates should confirm those terms in the current programme brief.

The HOCK relationship supports the use of HOCK study materials. It does not make CTC Global an IIA partner, IIA-accredited provider, IIA-endorsed provider or issuer of the CIA credential.

Source: [23]

In-person and online learning

Candidates may choose between in-person and online learning options when available for the selected cohort. The current brief confirms the supported Part or Challenge route, location or online format, schedule, time zone and instructor. This avoids enrolling in a programme that does not match the candidate’s pathway or availability.

Preparation approach

CTC Global’s preparation approach is built around eight practical disciplines:

map every lesson to the applicable official syllabus;
explain concepts before relying on question volume;
connect principles to realistic internal-audit scenarios;
practise questions in controlled sets and mixed-domain sets;
analyse why an answer was wrong, not only which option was correct;
revise weak domains through planned cycles;
build pacing, flagging and examination strategy; and
use realistic milestones rather than guaranteed-result claims.

Instructor-led learning is most useful when it exposes weak reasoning, corrects local-practice assumptions and keeps preparation aligned with the current syllabus. It is not a substitute for the candidate’s own reading, practice and revision.

What to confirm before enrolling

Request the current programme brief and check:

the traditional Part or Challenge pathway being supported;
the applicable syllabus and examination language;
delivery mode, venue or online format;
schedule and time zone;
instructor details;
HOCK material entitlement and access period;
question-practice, revision and assessment approach;
programme fee, currency and applicable taxes;
official-fee exclusions; and
transfer, refund or deferral terms.

Current programme information: Request the current programme brief for available Parts or Challenge pathways, dates, delivery format, HOCK material access, instructor details and fees.

Chat About CIA Preparation on WhatsApp

What is not controlled by CTC Global

CTC Global does not approve eligibility, submit an official decision on behalf of The IIA, set official examination fees, guarantee a test-centre appointment, control result timing, change a score or award the CIA designation. Official application and examination fees are separate from CTC Global training fees unless a written proposal expressly states a specific administrative inclusion.

Completing CTC Global training confirms only the training completed under the applicable programme terms. A candidate becomes a CIA only after The IIA has confirmed all official requirements and awarded the designation.

Sources: [23] Verified 1 August 2026.

14. Preparation Enquiries for Individuals and Organisations

For individual candidates

Primary CTA: Register Interest in CIA Preparation

Use this route when you know the Part or Challenge pathway you intend to prepare for and want the current programme brief.

Secondary CTA: Compare CIA Pathways

Use this route when you are uncertain about the traditional route, IAP progression or a Challenge pathway. CTC Global can explain the published distinctions and help you prepare questions for the official authority, but it cannot issue an eligibility decision.

A useful enquiry includes your country and time zone, current role, education, relevant experience, active professional credentials, intended pathway, target examination period and preferred delivery mode. Do not send passwords or sensitive identity documents through a general enquiry form.

What happens after an enquiry: CTC Global reviews the stated pathway, shares the current programme brief and identifies the next preparation step. Where the route is unclear, the response separates preparation guidance from the official eligibility decision.

For organisations

CTC Global can discuss private or sponsored preparation for internal-audit teams, public-sector organisations, financial institutions, universities, professional bodies and other employers. A corporate discussion can cover participant profile, pathway mix, preferred timing, in-person or online delivery, syllabus alignment and the commercial scope of the cohort.

Corporate CTA: Request a Corporate CIA Preparation Proposal

A proposal is based on the actual cohort rather than a generic package. Official application, examination and renewal fees remain separate from training fees unless the written proposal states otherwise. Individual eligibility remains subject to The IIA’s process.

Enquiry privacy

Information submitted through a preparation enquiry should be limited to what is needed to discuss the programme. CTC Global uses the details to respond about relevant preparation options and does not treat the enquiry as an official CIA application. Sensitive identification and certification-account credentials should remain with the candidate and the official authority.

Sources: [23] [24] Verified 1 August 2026.

15. Career Value and Certification Comparisons

No certification is universally “better.” The correct comparison starts with the work a person wants to perform.

15. Career Value and Certification Comparisons — information table
Comparison	CIA is stronger when…	The other credential may be stronger when…	Sensible combination
CIA vs CISA	The career centres on internal audit across governance, risk, control and engagements	The role centres on information-systems audit, technology controls or cybersecurity assurance	CISA can support the IT-audit route; active CISA may qualify for a Challenge pathway.
CIA vs CFE	The target is internal audit breadth and leadership	The work centres on fraud examination, investigation and anti-fraud practice	CIA plus CFE can combine assurance breadth with fraud specialisation.
CIA vs CRMA	The person needs the core internal-audit credential	The person seeks deeper risk-management assurance after or alongside relevant experience	CIA can provide the broader professional base; check current CRMA rules.
CIA vs ACCA/CA/CPA	The target is internal audit practice and leadership	The target is broad accounting, financial reporting, audit practice or statutory/professional accounting roles	Accounting credentials can complement CIA and may support an Accounting Challenge route where listed.
CIA vs CMA	The target is internal assurance and governance	The target is management accounting, performance and finance decision support	Useful for finance professionals moving into audit leadership.
CIA vs IAP	The candidate is ready for full certification	The candidate needs an entry-level internal-audit milestone or staged route	IAP can be a stepping stone; it is not equivalent to CIA.

Sequence matters

A finance professional moving into internal audit may build accounting depth first and then add CIA. An internal auditor increasingly assigned to technology may add CISA after or before CIA. A fraud-focused auditor may combine CIA and CFE. A student may use IAP and work experience before committing to the full route.

Avoid collecting credentials without a role strategy. Each examination consumes money and attention. Choose the next credential that closes a real capability or credibility gap.

A decision framework for certification sequence

Start with the target role, not the most familiar acronym. Write the three capabilities the next role requires, the evidence an employer expects and the technical gaps that repeatedly limit performance. Then compare each credential against those requirements. A credential should be chosen because its body of knowledge and market signal close a defined gap.

For an internal auditor who already has strong accounting knowledge, CIA may provide the clearest professional framework. For an information-systems auditor, CISA may be the immediate priority, followed by CIA for broader leadership. For an investigator, CFE may produce faster role relevance, while CIA adds assurance and governance breadth. For a finance professional with no internal audit exposure, an accounting credential and practical audit experience may need to precede CIA.

Sequence also affects Challenge eligibility. A qualifying active accounting credential or CISA may create a one-exam route, but pursuing another credential solely to avoid three CIA Parts can be irrational. It adds another examination, cost and maintenance obligation. Compare total effort, career relevance and timing rather than counting only CIA appointments.

Employer and geography considerations

Recognition can vary by role, sector and country. Candidates should review actual job descriptions, speak to credible hiring managers and assess whether employers request CIA specifically, accept it as one of several credentials or value experience more heavily. CTC Global does not promise salary increases, promotions, migration outcomes or universal employer preference.

The strongest career case combines certification with evidence: well-written audit reports, risk-based planning, data analysis, stakeholder communication, sector understanding and ethical judgment. The credential can support credibility, but it does not create those capabilities automatically.

Questions to answer before committing

What role am I pursuing in the next two to three years?
Which tasks in that role does the syllabus actually strengthen?
Do I meet a defensible pathway now?
Can I complete within the deadline?
What is the full cost, including renewal?
Which existing credential overlaps with CIA and which gap remains?
Am I choosing this because of career fit or because I am avoiding a harder practical-development problem?

If those answers are weak, delay the purchase and improve the decision. A later well-chosen certification is better than an immediate poorly chosen one.

Sources: [1] [2] [15] Verified 1 August 2026.

16. Frequently Asked Questions

Use the search field or category filter to find a direct answer. Official rules remain date- and pathway-sensitive.

Showing all 32 questions.

CIA fundamentals

What is the CIA certification?

The Certified Internal Auditor (CIA) is a professional certification awarded by The Institute of Internal Auditors.

It assesses knowledge and application relevant to internal auditing. Passing a preparation course is not the same as earning the credential; candidates must satisfy the official eligibility, examination and certification requirements.

Sources: [1] · Read the detailed section

Who awards the CIA designation?

The Institute of Internal Auditors awards the CIA designation.

CTC Global may provide independent exam preparation, but it does not issue the credential, decide eligibility or control examination policy.

Sources: [1] · Read the detailed section

Pathways

How many CIA pathways are available?

The current official framework includes the traditional three-Part route and separate Challenge pathways for qualifying accounting professionals, active CISA holders and eligible experienced professionals.

The professional Challenge route is a 2026 pilot and must not be assumed to continue after its published period. IAP holders may also use a specified route into the traditional CIA programme.

Sources: [1] [2] [15] · Read the detailed section

What is the traditional CIA route?

The traditional CIA route requires three multiple-choice examination Parts.

It is the broad route for candidates who meet the education and experience framework and are not using a qualifying Challenge pathway. The current Part names are Internal Audit Fundamentals, Internal Audit Engagement and Internal Audit Function.

Sources: [1] · Read the detailed section

What is the CIA Challenge Exam?

The CIA Challenge Exam is a one-exam route available only to candidates who meet a specific published eligibility pathway.

The current pathways are accounting, information systems for active CISA holders, and the 2026 professional pilot. Each has separate documentary requirements; eligibility under one pathway does not prove eligibility under another.

Sources: [2] · Read the detailed section

Is the Professional CIA Challenge Exam permanent?

No. It is currently a 2026 eligibility-pathway pilot.

Applications are open from 1 April through 30 September 2026, with first-attempt windows in June, September and November 2026. Retakes remain available during the candidate’s three-year programme, but continuation of new pilot applications after 2026 is not established.

Sources: [5] · Read the detailed section

Eligibility

Do I need a university degree, and do ACCA or US CPA exemptions apply?

A degree is not the only entry route, and two specific traditional-route exemptions may apply.

Qualified ACCA members may be considered for education and work-experience supporting-requirement exemptions; active US CPA licence holders may be considered for an education exemption. These are traditional-application exemptions, not automatic Accounting Challenge eligibility, and The IIA verifies status.

Sources: [1] · Read the detailed section

How much experience is required for the traditional CIA?

The required experience depends on the candidate’s education route.

Current official guidance links shorter experience periods to higher education and longer periods to alternative routes. Experience must be in internal audit or an accepted related field and must be verified.

Sources: [1] · Read the detailed section

What experience can count toward CIA eligibility?

Internal audit experience and certain related professional experience may qualify under the official rules.

Examples may include quality assurance, risk management, compliance, external audit and internal-control work, subject to The IIA’s definitions and verification. CTC Global cannot approve an individual’s experience.

Sources: [1] · Read the detailed section

Experience

Can I take CIA exams before completing all required experience?

In many cases, candidates may sit examinations before completing the full experience requirement, but certification is not awarded until all requirements are satisfied.

Candidates must still meet application rules and complete the programme within the official deadline. Verify the current sequence in CCMS and the candidate handbook.

Sources: [1] [6] · Read the detailed section

Documents and application

Where do I apply for CIA certification?

Candidates apply and manage the official process through The IIA’s Certification Candidate Management System (CCMS).

The process typically includes creating or using an account, selecting the correct programme, submitting documents, receiving approval, registering for an exam and scheduling with the testing provider.

Sources: [19] [6] · Read the detailed section

What documents may be required?

Required documents depend on the pathway and may include identification, education evidence, experience verification or proof of good standing.

Names must match official records, and non-English documents may require acceptable translation. Challenge candidates should use the document list for their exact pathway.

Sources: [6] [3] [4] [5] · Read the detailed section

How long do I have to complete the application and traditional CIA programme?

You have 90 days after application payment to finish the application, and three years after approval to complete the traditional programme.

The 90-day period covers documentation and final application steps. After approval, the three-year programme period begins. Each exam registration is separately valid for 180 days or until programme expiry, whichever is sooner. Mainland China Accounting and CISA Challenge candidates follow separate fixed 2026 registration, scheduling and single-date examination timetables.

Sources: [1] [3] [4] [6] · Read the detailed section

Exam format

How many questions are in each traditional CIA Part?

Part 1 has 125 questions, while Parts 2 and 3 each have 100 questions under the current structure.

The published durations are 150 minutes for Part 1 and 120 minutes each for Parts 2 and 3. Exam specifications can change, so candidates should confirm the current page before scheduling.

Sources: [1] · Read the detailed section

Can I take the traditional CIA Parts in any order?

The official programme generally allows candidates to register for Parts in the order that suits them.

A sensible first Part depends on background, syllabus familiarity and programme deadline. CTC Global’s recommendation is preparation guidance, not an official rule.

Sources: [1] · Read the detailed section

How many questions are on the CIA Challenge Exam?

The current Challenge Exam contains 150 multiple-choice questions and allows 180 minutes.

The one-exam format applies to eligible Challenge candidates, but eligibility, application periods and testing windows differ by pathway.

Sources: [2] · Read the detailed section

Syllabus

What are the current CIA Part names?

The current names are Part 1 — Internal Audit Fundamentals, Part 2 — Internal Audit Engagement and Part 3 — Internal Audit Function.

Foundations of Internal Auditing, Practice of Internal Auditing and Business Knowledge/Acumen are legacy names and do not describe the current Part structure.

Sources: [7] [8] [9] · Read the detailed section

Languages

Which languages are available for the traditional and Challenge CIA exams in 2026?

The traditional examination is currently offered in 14 listed languages, with Vietnamese registration beginning 28 August 2026. The Challenge Exam is currently available in English, French and Spanish.

Traditional languages are Arabic, Simplified Chinese, Traditional Chinese, English, French, German, Japanese, Korean, Polish, Portuguese, Russian, Spanish, Thai and Turkish. Vietnamese is an upcoming registration option effective 28 August 2026. For the Challenge Exam, Simplified Chinese registration begins in October 2026 and examinations are offered from December 2026 in mainland China. Arabic and traditional Simplified Chinese retain their separate syllabus-transition rules.

Sources: [1] [2] · Read the detailed section

Fees and membership

What official fees and secondary charges can affect CIA cost?

The total can include application, examination, rescheduling, extension and annual renewal charges.

Central prices include separate member and non-member application and exam fees. A change to an appointment costs USD 75 and is permitted until 48 hours before the appointment; a traditional 75-day exam extension costs USD 100; a one-time 12-month programme extension costs USD 275. CIA renewal is USD 30/120 for Active member/non-member status and USD 60/240 in Grace, subject to regional differences and taxes.

Sources: [11] · Read the detailed section

Is IIA membership required to become a CIA?

Membership is not generally presented as a universal certification requirement, but it affects pricing and may have regional implications.

Candidates should compare member and non-member fees and verify any National Institute requirements in their country before paying.

Sources: [1] [11] · Read the detailed section

Are official CIA examination fees included in CTC Global training fees?

Do not assume official CIA fees are included in CTC Global training fees.

The IIA’s application, exam, rescheduling and related charges are separate unless a written CTC proposal expressly identifies a specific administrative inclusion. Request the current programme brief and fee breakdown before enrolment.

Sources: [11] · Read the detailed section

Scheduling and test centres

Where and through whom is the CIA examination delivered?

The IIA certification examinations are delivered at authorised Pearson VUE test centres.

Online testing was discontinued on 27 May 2025. Candidates register through CCMS, schedule through the authorised Pearson VUE link and follow the appointment confirmation.

Sources: [6] · Read the detailed section

Can I take the CIA exam from home?

No under the current IIA delivery rule.

The IIA states that certification examinations must be taken at authorised Pearson VUE test centres and that online testing was discontinued on 27 May 2025. Recheck CCMS before booking because delivery policies can change.

Sources: [6] · Read the detailed section

Scoring and results

What is the passing score for the CIA exam?

The IIA reports CIA results on a scaled-score system with 600 as the passing score.

A scaled score is not a simple percentage. Candidates should use the official score report and avoid converting it into an assumed number of correct answers.

Sources: [6] · Read the detailed section

When will I receive my traditional CIA result?

Current official guidance provides one official result generally within three weeks of the exam date.

Candidates should follow the email and CCMS process; references to immediate preliminary results describe an older process.

Sources: [1] · Read the detailed section

When are 2026 Challenge Exam results released?

June 2026 Challenge results are subject to special delayed scoring, while results from the September 2026 window onward are published as available within three weeks.

The June window result is stated as available by 27 July 2026 because the updated exam required a formal passing-score determination. Candidates in later windows should still verify current notices.

Sources: [5] [12] · Read the detailed section

Retakes

What happens after a failed CIA exam or a No-Show?

A failed examination can be retaken after 30 days, while a No-Show requires a new registration and payment.

A failed Part or Challenge exam requires a new registration and fee, and the earliest new appointment is 30 days after the previous attempt. No-Show status forfeits the registration fee. A maximum of eight attempts applies to a given exam within the programme eligibility window.

Sources: [6] · Read the detailed section

Certification award

When may I use CIA after my name, and when is certification shown?

Use CIA only after The IIA confirms that all programme requirements are complete.

The final audit is described as taking about 7–10 business days, and The IIA states that the designation generally appears in the account within 7–14 business days. A digital certificate is then available, a physical certificate may be ordered, and active holders may opt in to the registry and use a digital badge where available.

Sources: [1] [6] · Read the detailed section

Renewal

What are the CIA CPE and renewal requirements?

Practicing CIAs need 40 CPE hours annually; nonpracticing CIAs need 20, and both include at least two ethics hours.

Renewal is due by 31 December. Newly certified holders first renew by 31 December of the following year. Records must be retained for at least three years. Failure to renew moves the designation to Grace, and prolonged noncompliance can lead to Revoked status and recertification requirements.

Sources: [13] [14] [11] · Read the detailed section

CTC Global preparation

Does completing the CTC programme make me a CIA?

No. Completing CTC Global preparation does not make a candidate a CIA.

The CIA is awarded only after The IIA confirms that all official requirements have been completed. Any CTC completion document relates only to the training undertaken.

Sources: [1] · Read the detailed section

Does CTC Global guarantee that I will pass?

No. CTC Global does not guarantee an examination result.

Preparation can provide structure, explanation, practice and feedback, but performance depends on the candidate and the official examination. The programme is sold on its defined learning process, not a pass promise.

Sources: · Read the detailed section

Corporate training

Can an organisation arrange a private CIA preparation cohort?

Yes. Organisations may request a proposal for a private or sponsored CIA preparation cohort.

The proposal can be based on participant profile, pathway mix, delivery format, timing and commercial scope. Official eligibility decisions and IIA fees remain separate.

Sources: [24] · Read the detailed section

17. Technical Glossary

The glossary contains all 55 approved terms. Technical-term controls in the guide link here for the complete definition.

Showing all 55 terms.

A

Assurance services

Work that provides an independent assessment of evidence. The auditor determines the nature and scope needed to express a conclusion about governance, risk management or control. CIA candidates must distinguish assurance from advisory work.

Example: Reviewing whether access controls are designed and operating effectively.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [20]

Advisory services

Consulting or advice provided without taking management responsibility. The nature and scope are generally agreed with the client, while independence and objectivity safeguards remain necessary. The exam tests when advice is appropriate and where responsibility must remain with management.

Example: Facilitating a risk workshop without owning the risk register.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [20]

Audit evidence

Information used to support findings, conclusions and recommendations. Evidence should be sufficient, reliable, relevant and useful for the engagement purpose. CIA questions test evidence quality and collection methods.

Example: System logs corroborate interviews about access changes.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [20]

B

Board

The highest-level governing body charged with oversight. Depending on the organisation, this may be a board of directors, audit committee or equivalent body with governance authority. The board’s relationship with internal audit is central to independence.

Example: The audit committee approves the charter and internal audit plan.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source [20]

C

Chief audit executive (CAE)

The senior person responsible for effectively managing the internal audit activity. The CAE communicates with senior management and the board, plans resources, maintains quality and protects independence. Many syllabus responsibilities are assigned to the CAE.

Example: The CAE presents the risk-based plan to the audit committee.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source [20]

Continuing Professional Education (CPE)

Learning activity used to maintain professional competence after certification. Certified individuals report qualifying hours under The IIA’s renewal policy, including ethics requirements where applicable. Failure to report can affect certification status.

Example: A CIA completes approved training and retains evidence.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [13]

Credential verification

A method for confirming that a person holds an active certification. Verification may use an official registry, digital badge or other issuer-controlled record. Employers should verify the credential rather than relying only on a course certificate.

Example: A recruiter checks the official credential record.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [6]

CIA Challenge Exam

A one-exam CIA pathway for candidates meeting a specific published eligibility route. Current routes cover qualifying accounting professionals, active CISA holders and a 2026 experienced-professional pilot. It is not open merely because a candidate has general work experience.

Example: An active CISA holder applies under the information-systems route.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source [2]

Certification Candidate Management System (CCMS)

The IIA’s online system for certification applications and records. CCMS is used to apply, upload documents, register, track status and manage certification-related actions. Candidates should rely on their account for current deadlines and status.

Example: A candidate uploads education evidence and registers an exam Part.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source [19]

Control design

Whether a control, if performed as intended, is capable of addressing the relevant risk. Design assessment comes before testing whether the control actually operated. A well-performed control can still be inadequate if its design misses the risk.

Example: A monthly review cannot prevent an unauthorised real-time payment.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [20]

D

Due professional care

The care and skill expected from a reasonably prudent and competent internal auditor. It requires considering complexity, significance, probability of error or fraud, and the cost and benefit of assurance work. It does not mean infallibility or examining every transaction.

Example: The team increases testing where control failure could cause material loss.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source [20]

E

Engagement

A specific internal audit assignment, review or advisory activity. An engagement has objectives, scope, resources, procedures, evidence, conclusions and communication. Part 2 focuses heavily on engagement planning and performance.

Example: A review of payroll controls for one business unit.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source [20]

Engagement objectives

Statements of what an engagement is intended to accomplish. Objectives are based on preliminary assessment, stakeholder expectations and significant risks. They guide scope, procedures and conclusions.

Example: Determine whether procurement approvals prevent unauthorised purchases.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [20]

Engagement scope

The boundaries of the work to be performed. Scope can define processes, locations, systems, periods, risks and exclusions needed to meet objectives. Poor scope creates gaps or unnecessary work.

Example: The review covers purchasing and payment transactions from January to June.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [20]

External quality assessment (EQA)

An independent evaluation of the internal audit activity performed at least periodically under applicable standards. A qualified independent assessor or team evaluates conformance and effectiveness and reports results. Candidates should understand independence, frequency and reporting.

Example: An external team reviews the activity’s methodology and conformance.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [20]

Exam authorization

Exam authorization is the time allowed after a candidate pays for a specific examination. For current IIA certification exams it is 180 days or until programme expiry, whichever comes first; it does not guarantee a particular appointment or testing window.

Example: A registration bought near programme expiry may have less than 180 days available.

Related: Exam registration; programme completion period; exam window · No earlier marked occurrence · Source

Exam window

A published period during which a particular exam or pathway may be taken. Challenge routes can use defined windows, while availability may differ by pathway and year. Application, registration and testing dates must be planned together.

Example: A professional Challenge candidate selects a September testing window.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [2]

Experience verification

Formal confirmation of a candidate’s qualifying work experience. An appropriate verifier attests to role, duration and relevant work under the official process. A résumé alone may not complete the requirement.

Example: A supervisor confirms two years of risk and internal audit work.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source [6]

Ethics CPE

Continuing education focused on professional ethics. Current renewal rules require a specified portion of annual CPE to cover ethics for practicing and nonpracticing CIAs. The hours must be eligible, documented and reported.

Example: A two-hour ethics course is retained in the CPE file.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [13]

Engagement communication

The formal or informal communication of engagement progress, results and conclusions. Final communications should be accurate, objective, clear, concise, constructive, complete and timely. The quality of reporting affects action and credibility.

Example: A report states criteria, condition, cause, effect and agreed action.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [20]

Engagement work program (Work program (synonym))

An engagement work program is the documented set of procedures used to achieve the engagement objectives. It links the risk assessment and scope to the work auditors will perform, the evidence they will obtain and the responsibilities assigned. The program may be revised when new information changes the engagement risk or scope.

Example: For a procurement audit, the work program may require testing a sample of purchase orders, reviewing approval controls, analysing duplicate payments and documenting exceptions.

Related: Engagement objectives; engagement scope; audit procedure; audit evidence; supervision; workpapers; synonym: work program · No earlier marked occurrence · Source [20]

Exam registration

Exam registration is the paid transaction completed after programme approval for a specific CIA examination or Part. It creates an authorization lasting 180 days or until programme expiry, whichever is sooner. The candidate must then schedule and sit within that period.

Example: A candidate approved into CIA registers Part 2, then schedules it at a Pearson VUE centre within the 180-day authorization.

Related: CCMS; exam authorization; appointment; programme period · Return to first occurrence · Source

F

Fraud risk

The possibility that intentional deception could affect objectives. Internal audit evaluates fraud risk and controls but does not guarantee detection of all fraud. The exam covers fraud awareness, red flags and response responsibilities.

Example: Management override creates a risk that approvals can be bypassed.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source [20]

Follow-up

The process of monitoring management action on reported findings. The CAE establishes a process to determine whether actions are implemented or risk has been accepted appropriately. Follow-up is not a new management control owner role.

Example: Internal audit verifies that access rights were removed as agreed.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source [20]

G

Governance

The structures and processes used to direct, oversee and hold an organisation accountable. Governance connects the board, management, stakeholders, objectives, ethics, oversight and accountability. CIA candidates need to evaluate whether governance supports objectives and ethical conduct.

Example: A board committee oversees risk, assurance and executive accountability.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source [20]

Global Internal Audit Standards (GIAS)

The global standards that guide the professional practice of internal auditing. They form part of The IIA’s International Professional Practices Framework and influence CIA syllabus terminology and expectations. Candidates must study the syllabus-aligned concepts rather than assume older standards wording.

Example: The CAE aligns policies and reporting with the current Standards.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [20]

Good standing

Current, valid status with a professional body without disqualifying disciplinary restrictions. Challenge pathways may require a letter or official evidence confirming active credential and good standing. A lapsed or student status may not meet pathway requirements.

Example: An accounting body confirms active membership and good standing.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source

Grace status

Grace status is the two-year inactive period after an Active IIA certification is not renewed by the annual deadline. The holder may not use the designation during Grace and must satisfy the current renewal requirements to restore Active status.

Example: A CIA who does not renew by 31 December moves from Active to Grace.

Related: Active status; Revoked status; annual renewal · No earlier marked occurrence · Source

I

Internal auditing

Independent, objective assurance and advisory work designed to add value and improve operations. It evaluates and helps improve governance, risk management and control processes through a systematic, disciplined approach. It is the professional field tested by the CIA examination.

Example: An internal audit team reviews the design and operation of procurement controls.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source [20]

Internal control

Actions designed to provide reasonable assurance that objectives will be achieved. Controls may be preventive, detective or corrective and can relate to operations, reporting or compliance. Candidates must evaluate both control design and operating effectiveness.

Example: A system prevents the same employee from creating and approving a vendor.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source [20]

Independence

Freedom from conditions that threaten the internal audit activity’s ability to perform objectively. Organisational independence is commonly supported by functional reporting to the board and appropriate administrative access. It affects the credibility and authority of internal audit.

Example: The chief audit executive has direct access to the audit committee.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source [20]

Internal audit charter

The formal document defining internal audit’s purpose, authority and responsibility. It typically addresses position, access, scope, reporting relationships and approval by the board. The charter is a core governance document tested in CIA content.

Example: The board approves unrestricted access to records, people and property.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [20]

Internal Audit Practitioner (IAP)

An IIA designation linked to CIA Part 1 content and an entry route into the CIA programme. Current official treatment includes a Part 1 waiver for active IAP holders, while experience requirements still depend on education and route. It can be useful for students or early-career candidates but does not equal the CIA.

Example: A candidate earns IAP and later continues toward CIA Parts 2 and 3.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source [15]

N

Non-disclosed examination

An exam whose current questions and answers are confidential and not published. Candidates agree not to share, reconstruct or solicit live examination content. Preparation must use legitimate syllabus-based resources and authorised samples.

Example: A study group discusses concepts but not remembered live questions.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source [18]

Nonpracticing status

Certification status for a holder not currently performing internal audit or related work. It currently carries a lower CPE requirement but still includes ethics hours and renewal obligations. It is not the same as allowing certification to lapse.

Example: A holder in an unrelated role reports nonpracticing status.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [13]

O

Objectivity

An unbiased mental attitude that allows auditors to make balanced judgments. Auditors avoid conflicts of interest and do not subordinate professional judgment to others. Objectivity applies to individual assignments and relationships.

Example: An auditor discloses a recent operational role before auditing that area.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source [20]

Operating effectiveness

Whether a control operated as designed, consistently and by appropriate people during the period. Testing may use inspection, observation, reperformance, inquiry and data analysis. CIA candidates must distinguish operation from design.

Example: The auditor samples approvals across six months.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [20]

P

Professional skepticism

A questioning mind and critical assessment of evidence. It involves remaining alert to inconsistent, incomplete or unreliable information without assuming dishonesty. It strengthens evidence evaluation and fraud awareness.

Example: An auditor corroborates management explanations with system records.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [20]

Programme completion period

The time allowed to finish all requirements within a certification programme. The current traditional CIA period is three years from application approval, subject to official rules. A poor sequencing plan can cause completed work or fees to expire.

Example: A candidate schedules Parts to finish before the three-year deadline.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [1]

Practicing status

Certification status for a person actively performing internal audit or related work. It carries the higher annual CPE requirement under current renewal rules. Candidates should choose and report the status that accurately reflects their work.

Example: A CIA working in an internal audit department reports practicing status.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [13]

Passing score

The passing score is the minimum reported scaled score required for a successful examination result. The IIA converts raw performance to a 250–750 reporting scale and currently requires 600 or higher. Because the result is scaled, it must not be treated as a direct percentage of questions answered correctly.

Example: A failed score report of 570 is a scaled result, not proof that the candidate answered exactly 57 per cent correctly.

Related: Scaled score; score report; pass/fail; domain feedback · No earlier marked occurrence · Source [6]

Pearson VUE

Pearson VUE is the examination-delivery company used for The IIA’s certification programme. After programme approval and exam registration, candidates use the authorised scheduling process to select an available test centre and appointment. Pearson VUE administers the examination; it does not determine CIA eligibility or award the credential.

Example: A candidate registers the CIA Part in CCMS, accesses Pearson VUE through the official process and selects an available test centre and appointment.

Related: CCMS; exam registration; test centre; appointment confirmation; examination authorization · Return to first occurrence · Source [16]

Q

Quality Assurance and Improvement Program (QAIP)

An ongoing programme for evaluating and improving internal audit quality. It includes internal assessments, performance monitoring and periodic external assessment against applicable standards. The CIA syllabus tests quality responsibilities and reporting.

Example: The CAE tracks conformance, stakeholder feedback and improvement actions.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [20]

R

Risk management

The coordinated process for identifying, assessing, responding to and monitoring uncertainty. It helps an organisation pursue objectives within its risk appetite and tolerance. Risk concepts run through all CIA Parts.

Example: Management assesses cyber risk and selects mitigation, transfer or acceptance responses.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source [20]

Risk-based internal audit plan

A plan that prioritises audit work according to the organisation’s objectives and risks. The CAE uses a documented assessment and updates the plan as conditions change. This connects internal audit resources to matters of greatest significance.

Example: The plan increases coverage of a rapidly expanding digital channel.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [20]

Root cause

The underlying reason a condition or control failure occurred. Addressing root cause helps management design sustainable corrective action rather than treating only symptoms. Strong findings explain why the issue exists.

Example: Recurring errors result from unclear ownership, not merely employee carelessness.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source [20]

Residual risk

Risk remaining after management’s responses and controls. Residual risk is compared with risk appetite and tolerance to determine whether further action is needed. It helps auditors assess whether accepted exposure is appropriate.

Example: Fraud risk remains moderate after segregation and monitoring controls.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [20]

Risk appetite

The broad amount and type of risk an organisation is willing to accept in pursuit of objectives. It is set or overseen through governance and translated into more specific limits and tolerances. Audit work evaluates alignment between decisions and appetite.

Example: The board accepts moderate innovation risk but very low regulatory risk.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [20]

Retake waiting period

The retake waiting period is the minimum time before a failed examination may be attempted again. Under the current candidate handbook, the earliest new appointment is 30 days after the previous attempt; the candidate must register and pay again and may not exceed eight attempts during the programme eligibility window.

Example: A candidate waits the required period before booking the same Part again.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [6]

Risk tolerance

The acceptable variation around a specific objective or risk limit. It translates broad risk appetite into measurable boundaries used in decisions and monitoring. Auditors compare actual exposure with approved tolerances.

Example: A service may tolerate no more than two hours of downtime.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [20]

Revoked status

Revoked status means the certification is no longer current and the designation may not be used. The current CIA recertification route requires a new recertification application and successful completion of CIA Part 1, together with applicable fees.

Example: Remaining in Grace for more than 24 months results in revocation under the current policy.

Related: Grace status; Active status; recertification · Return to first occurrence · Source

S

Senior management

Executives responsible for directing and managing the organisation. Senior management owns operations, risk responses and controls; internal audit evaluates rather than assumes that ownership. Candidates must distinguish management responsibility from audit responsibility.

Example: Management accepts a risk and documents the rationale.

Related: See cross-references in manuscript glossary · Return to first occurrence · Source [20]

Scaled score

A converted score used to report performance consistently across exam forms. It is not a raw percentage or a direct count of correct answers; the CIA pass point is reported on the official scale. Candidates should interpret the score report using official guidance.

Example: A score of 600 is the reported passing point, not necessarily 60%.

Related: See cross-references in manuscript glossary · No earlier marked occurrence · Source [6]

T

Testing accommodation (Test accommodation (synonym))

A testing accommodation is a formally approved change to examination administration for a candidate with a documented need. It does not change the syllabus or pass standard; the candidate follows The IIA application process and supplies supporting evidence before scheduling.

Example: A candidate with a documented disability requests additional approved conditions before booking.

Related: Identification; Pearson VUE; exam appointment · No earlier marked occurrence · Source [6]

Traditional CIA pathway

The traditional CIA pathway is the standard certification route built around three separate examinations: Internal Audit Fundamentals, Internal Audit Engagement and Internal Audit Function. Candidates follow the education and experience framework applicable to them, may take the Parts in any order and must complete all official requirements before the programme expires.

Example: A bachelor’s-degree holder may apply through the traditional route, sit the three Parts and complete the required experience verification before certification is awarded.

Related: CIA Part 1; CIA Part 2; CIA Part 3; Challenge Exam; programme completion period · No earlier marked occurrence · Source [1]

18. Official References, Editorial Status and Final Action

Official CIA certification sources

1
The Institute of Internal Auditors: Certified Internal Auditor | Global Internal Audit Certification
Credential identity; traditional pathways; education and experience; ACCA and active US CPA supporting-requirement exemptions; Part names; question counts and durations; complete traditional language list, Vietnamese registration from 28 August 2026 and 2026 syllabus transitions; three-year programme; 180-day registration; results; 7–14-business-day designation display; digital and physical certificates
Relevant location: “Do you meet the CIA eligibility requirements?”, pathway cards, “How much does the CIA cost?”, “In what languages is the CIA exam offered?”, “Get certified”, and FAQs on exemptions, programme period, exam authorization, results and certificate timing · Verified 1 August 2026
Open official source (opens in a new tab)
2
The Institute of Internal Auditors: The IIA CIA Challenge Exam | One-Part CIA Certification
One exam and three distinct pathways; Accounting and CISA applications open year round; Professional pilot dates; 150 questions and 180 minutes; common syllabus; current English, French and Spanish availability; Simplified Chinese registration from October 2026 and examination delivery from December 2026 in mainland China
Relevant location: “Which CIA Challenge Exam path is right for you?”, pathway cards, “How has the CIA Challenge Exam and eligibility been updated?”, “Now available in multiple languages!” · Verified 1 August 2026
Open official source (opens in a new tab)
3
The Institute of Internal Auditors: Accounting CIA Challenge Exam for CPAs & CAs
Accounting Challenge eligibility; active approved CPA/CA or qualified-member status; year-round application; 150 questions/180 minutes; February, June, September and November windows; good-standing evidence; no student-member assumption; no ordinary Challenge extension; mainland-China fixed registration, scheduling and single-date March/June/September/December 2026 windows
Relevant location: Accounting Challenge overview; eligibility and approved bodies; application steps; examination windows; good-standing documentation; extension and result FAQs; “I am in Mainland China. When can I schedule and take the exam?” — 2026 programme timeline · Verified 1 August 2026
Open official source (opens in a new tab)
4
The Institute of Internal Auditors: CIA Challenge Exam for CISA Holders
Active CISA eligibility and registry evidence; year-round application; 150 questions/180 minutes; February, June, September and November windows; no ordinary Challenge extension; mainland-China fixed registration, scheduling and single-date March/June/September/December 2026 windows
Relevant location: Information-systems Challenge overview; active-CISA eligibility; application steps; testing windows; extension, retake and result FAQs; “I am in Mainland China. When can I schedule and take the exam?” — 2026 programme timeline · Verified 1 August 2026
Open official source (opens in a new tab)
5
The Institute of Internal Auditors: CIA Challenge Exam for Experienced Auditors
2026 experienced-professional pilot; 10+ years accepted experience; applications 1 April–30 September 2026; June, September and November 2026 first-attempt windows; retakes within the three-year programme; no programme or exam extensions; June and September-onward result timing; certificate access
Relevant location: Pilot notice; “Submit your application”; “Take the certification exam”; “Get your certification”; “CIA Challenge exam updates”; eligibility and FAQ sections · Verified 1 August 2026
Open official source (opens in a new tab)
6
The Institute of Internal Auditors: Certification Candidate Handbook
90-day application completion; acceptable identification and name matching; accommodation process; one-time 12-month programme extension; one-time 75-day exam extension; hardship extension; 180-day authorization; confirmation; no-show consequences; USD 75 change fee and 48-hour deadline; 30-minute arrival; NDA; unscheduled breaks count against time; closure and technical-incident process; score scale; retakes; 7–10-business-day final audit; registry; digital badge availability
Relevant location: PDF pp. 4–14: application/payment, identification, education, accommodations, programme and hardship extensions, registration, authorization, appointment confirmation, no-show, rescheduling, test-centre arrival, NDA, breaks, closures, technical incidents, scoring, retakes, experience verification, award, registry and social badging · Verified 1 August 2026
Open official source (opens in a new tab)
7
The Institute of Internal Auditors: CIA Part 1 Syllabus — Internal Audit Fundamentals
Official Part 1 name, domains, weights, topics and proficiency levels
Relevant location: PDF pp. 1–6, Part 1 — Internal Audit Fundamentals expanded test specifications · Verified 1 August 2026
Open official source (opens in a new tab)
8
The Institute of Internal Auditors: CIA Part 2 Syllabus — Internal Audit Engagement
Official Part 2 name, domains, weights, topics and proficiency levels
Relevant location: PDF pp. 1–5, Part 2 — Internal Audit Engagement expanded test specifications · Verified 1 August 2026
Open official source (opens in a new tab)
9
The Institute of Internal Auditors: CIA Part 3 Syllabus — Internal Audit Function
Official Part 3 name, domains, weights, topics and proficiency levels
Relevant location: PDF pp. 1–5, Part 3 — Internal Audit Function expanded test specifications · Verified 1 August 2026
Open official source (opens in a new tab)
10
The Institute of Internal Auditors: CIA Challenge Exam Syllabus
Five domains, weights, topic statements and GIAS-aligned content
Relevant location: PDF pp. 1–12, CIA Challenge Exam Syllabus, domain headings and weights · Verified 1 August 2026
Open official source (opens in a new tab)
11
The Institute of Internal Auditors: Internal Audit Certification Costs | IAP, CIA, CRMA Pricing
Central member/non-member CIA and Challenge fees; USD 100 75-day exam-registration extension; USD 75 reschedule/cancellation; USD 275 one-time 12-month programme extension; no Challenge extensions; CIA active and grace renewal fees; North American active-member treatment; National Institute and tax limitations
Relevant location: CIA pricing; Challenge Exam pricing; “Extension, cancellation, and rescheduling fees”; “Internal audit certification renewal fees”; regional pricing and tax notes · Verified 1 August 2026
Open official source (opens in a new tab)
12
The Institute of Internal Auditors: Delayed Scoring for The IIA Exams
Single official result; timing changes; delayed-scoring windows
Relevant location: CIA Challenge June 2026 delayed-scoring FAQ · Verified 1 August 2026
Open official source (opens in a new tab)
13
The Institute of Internal Auditors: Annual Certification Renewal Policy
Practicing CIA 40 CPE; nonpracticing CIA 20 CPE; retired 0; two ethics hours; initial renewal through 31 December of the following year; hardship; annual renewal; Active, Grace and Revoked consequences; recertification; CPE audit; three-year record retention
Relevant location: PDF pp. 2–4 and 8–9: annual renewal requirements, CPE table, ethics, hardship, renewal period, fees, deadline, status consequences, CPE audit and record retention · Verified 1 August 2026
Open official source (opens in a new tab)
14
The Institute of Internal Auditors: CPE Requirements | Maintain Your IIA Certification
Renewal availability, annual deadline, practicing CPE, Active/Grace/Revoked status, CIA recertification through Part 1, hardship timing and public registry instructions
Relevant location: “Renewal requirements”, “CPE hours required”, “Certification statuses”, “Recertification update”, candidate scenarios and FAQs · Verified 1 August 2026
Open official source (opens in a new tab)
15
The Institute of Internal Auditors: Internal Audit Practitioner (IAP) Designation
No-degree entry; 125 questions; 150 minutes; two-year IAP completion; CIA Part 1 waiver; intended audience
Relevant location: “What is the difference between the IAP and the CIA?”, IAP process and renewal sections · Verified 1 August 2026
Open official source (opens in a new tab)
16
Pearson VUE: Institute of Internal Auditors Certification Exams
Pearson VUE administration; test-center scheduling; identification and appointment procedures
Relevant location: “Certifications/Qualifications” and “Certification/Qualification Application” · Verified 1 August 2026
Open official source (opens in a new tab)
17
The Institute of Internal Auditors: The IIA Licensing Programs
Commercial use of IIA intellectual property; licensing routes; no implied endorsement
Relevant location: Licensing programmes and intellectual-property use guidance · Verified 1 August 2026
Open official source (opens in a new tab)
18
The Institute of Internal Auditors: Certified Internal Auditor (CIA) Exam Syllabus
Current syllabus files, terminology resources and non-disclosed-exam notice
Relevant location: CIA Part 1/IAP, Part 2 and Part 3 syllabus downloads; Terminology; References; Exam non-disclosure · Verified 1 August 2026
Open official source (opens in a new tab)
19
The Institute of Internal Auditors: Certification Candidate Management System (CCMS) Documentation
Purpose of CCMS; application, completion, maintenance and access to candidate resources
Relevant location: “Certification Candidate Management System (CCMS) documentation” and candidate-resource links · Verified 1 August 2026
Open official source (opens in a new tab)

Professional standards and terminology sources

20
The Institute of Internal Auditors: Global Internal Audit Standards
Internal-audit terminology, engagement concepts, independence, objectivity, governance, risk, control, quality, planning, evidence, work programs and follow-up
Relevant location: Glossary, PDF pp. 10–13; relevant Standards 4.2, 6.2, 8.4, 9.4, 13.3, 13.6, 14.1 and 15.2 · Verified 1 August 2026
Open official source (opens in a new tab)

CTC Global service and relationship evidence

21
The Institute of Internal Auditors: IIA Licensing
Scope of the training-provider licence, authorised content and trademark use, logo treatment and the prohibition on implying endorsement
Relevant location: Training Provider License; licensing FAQ “Custom logo & branding”; licensing restrictions · Verified 1 August 2026
Open official source (opens in a new tab)
22
The Institute of Internal Auditors: Training Provider Licensing Program Members
CTC Global registry status, licence date, formats, languages and international scope
Relevant location: CTC Global entry in the public registry · Verified 1 August 2026
Open official source (opens in a new tab)
23
HOCK International: HOCK International welcomes Certified Trainers and Consultants to the HOCK Partner Program
CTC Global joined the HOCK Partner Program; CIA and CMA preparation uses HOCK study materials; students may study in person or online
Relevant location: HOCK International post, opening announcement paragraph · Verified 1 August 2026
Open official source (opens in a new tab)
24
CTC Global: CTC Global — Professional Training and Consultancy
Customised corporate programmes, dedicated corporate batches, online/onsite/hybrid delivery and proposal-based corporate training
Relevant location: Homepage sections “Annual Training Partnerships”, “Delivery Modes”, corporate training and customised proposal CTAs · Verified 1 August 2026
Open official source (opens in a new tab)

Editorial methodology and independence

Certification requirements were checked against current official sources on 1 August 2026. Fees, dates, languages, testing arrangements and pilot pathways can change, so candidates should confirm current rules through The IIA before paying or scheduling.

CTC Global provides independent preparation support. The CIA credential, official eligibility decisions, examination appointments, results and certification award are controlled by The Institute of Internal Auditors. Certified Internal Auditor, CIA and related names are used only to identify the credential and examination.

The CIA examination is non-disclosed. CTC Global does not request, reproduce or encourage disclosure of confidential examination content.

Corrections may be sent to trainings@ctc-global.com.

For individuals

Build the right preparation plan for your pathway.

Request the current programme brief for available Parts or Challenge pathways, delivery format, HOCK material access, instructors and fees.

Chat About CIA Preparation on WhatsApp

For organisations

Plan a focused cohort for your audit team.

Discuss candidate profiles, pathway mix, scheduling, delivery preferences and proposal scope.

Request a Corporate CIA Preparation Proposal

Preparation enquiry

Tell us what you are preparing for.

This enquiry form does not start an official IIA application and does not request identity documents or CCMS credentials.

Share your intended pathway or Part.
Confirm delivery and timing preferences.
Request the current programme brief and fee information.

Submitting this form sends an enquiry to CTC Global. It does not create an IIA account, register an examination or establish official eligibility.

Chat About CIA Preparation on WhatsApp

JavaScript is unavailable. This form will use your browser’s native validation and open the submission response in this tab. For a corporate enquiry or immediate assistance, use the verified WhatsApp link or email trainings@ctc-global.com.

Full name

WhatsApp number

City and country

Professional role

Current qualification

Pathway of interest

Part or route of interest

Preferred delivery mode

Preferred time zone

Message

This enquiry is not an application to The IIA. Do not send passports, identity documents, CCMS credentials, payment-card details or sensitive employment records. For privacy questions, contact info@ctc-global.com.

CIA quick facts

1. What the CIA Is and Who It Is For

Who should seriously consider it

Who may not need it immediately

Certification, examination and training are different

2. Choose Your CIA Pathway

Which route may deserve a closer look?

A practical pathway decision sequence

When the one-exam route is not automatically easier

Pathway mistakes to avoid

Decision record before enrolment

Pathway switching risk

3. Eligibility and Experience

Traditional education and experience logic

Supporting-requirement exemptions are not Challenge eligibility

Accepted experience

Experience timing

Edge cases that require official review

How to present mixed experience

Education equivalence and documents

Character and professional standing

Eligibility planning scenarios

4. Documents, Application and Deadlines

Documents and the 90-day application period

Traditional programme period

Exam registration and the 180-day authorization

Challenge application timing and testing windows

Extensions

Payment, expiry and record control

5. CIA Examination Structure

Traditional three-Part route

Challenge structure

Choosing a first traditional Part

Exam security

6. Current CIA Syllabus

Part 1 — Internal Audit Fundamentals

Part 2 — Internal Audit Engagement

Part 3 — Internal Audit Function

Challenge Exam domains

Syllabus discipline

7. Language and Syllabus-Transition Notice

Challenge Exam languages

8. CIA Fees, Membership and Total Cost

Published central traditional CIA fees

Published central Challenge fees

Secondary official charges

CIA renewal fees

Build a realistic total-cost budget

CTC Global fees are separate

9. Scheduling, Test Centres and Exam Day

Test-centre delivery

Scheduling and appointment confirmation

Rescheduling and cancellation

No-show consequences

Arrival, identification and check-in

NDA, breaks and security

Centre closure and technical incidents

Testing accommodations

10. Scoring, Results and Retakes

Traditional CIA results

Challenge results in 2026

Understanding a failed result

Retakes

After a pass

After a fail

11. Certification, Designation and Renewal

Award and designation timing

Certificate, registry and digital badge

Annual renewal requirements

Active, Grace, Revoked and Retired status

Hardship and regional administration

12. How to Prepare for the CIA Exam

Start with a diagnostic, not a calendar

Suggested preparation paths

A disciplined weekly cycle

Practice-question method

Mock-exam method

Final week

Common mistakes

Converting the syllabus into a study system