The Published Figures
The IIA publishes CIA pass rate data periodically, and the figures tell a consistent story: each part of the CIA exam has a pass rate in the region of 40–50%, depending on the part and the year. Part 1 and Part 2 have historically sat at around 40–45%. Part 3 has typically come in slightly higher, closer to 45–50%, though this varies.
These pass rates apply to candidates who sat the exam, not those who registered and did not appear. The IIA does not publish no-show data, but anecdotal evidence from candidates and preparation providers suggests the effective failure rate among those who actually show up is consistent with the published figures.
The headline message is that the CIA exam is genuinely difficult, and a majority of candidates fail at least one part. Understanding why is more useful than simply noting the statistic.
What the Pass Rate Actually Tells You
A 40–45% pass rate does not mean the exam outcome is random or that strong candidates are at the mercy of luck. It means that the exam requires a level of preparation that a substantial portion of candidates do not achieve.
The CIA candidate population is broad. It includes:
- First-time candidates with recent internal audit experience who have prepared thoroughly
- Candidates who have been working in audit for years but underestimated how much the exam tests conceptual knowledge rather than practical familiarity
- Candidates who have purchased study materials but not had enough time to work through them properly
- Retakers who may or may not have changed their preparation approach
The average pass rate across this entire population does not say much about what any individual candidate's preparation should look like. A candidate who allocates adequate study time, works through practice questions systematically, and understands the IIA's professional standards framework should expect to pass. The evidence from candidates who pass consistently points to preparation quality, not innate ability.
Why Candidates Fail
Survey data from CIA candidate communities and the analysis of preparation providers point to a small number of recurring reasons:
Underestimating the conceptual demand of Part 1. Part 1 covers the IIA's professional standards, the IPPF, the Code of Ethics, and governance and risk frameworks. Candidates who have been working in internal audit for years sometimes assume that their practical experience will carry them through without structured study of the standards. The exam tests specific knowledge of the IIA framework, including details of the Global Internal Audit Standards (GIAS) that candidates may not encounter regularly in their day-to-day roles.
Treating study as a reading exercise. The CIA exam is multiple-choice throughout. Candidates who spend their preparation time reading study materials without practising questions under exam conditions consistently underperform. Reading the IPPF and the Wiley or Gleim study notes is useful context, but answering questions is what builds the ability to apply that knowledge within a time limit.
Insufficient time per part. A preparation timeline of six to eight weeks for Part 1, with the candidate studying in the evenings around a full-time job, often leaves less than 100 hours of actual study. Most preparation providers and passing candidates report that 150–200 hours per part is a more reliable target. Candidates who schedule their exam before they have accumulated that preparation time are more likely to sit in the 40–45% failure group.
Weak coverage of high-weight domains. Each part of the CIA exam publishes its domain weights, and the exam reflects those weights. A candidate who focuses on their strongest or most familiar domains without giving proportional attention to the high-weight areas will have coverage gaps that the exam reliably exposes.
Part-by-Part Considerations
Part 1 has the lowest pass rate of the three parts in most years. This is partly a candidate selection effect: Part 1 is typically the first part candidates sit, and first-time takers have not yet calibrated their preparation approach to the specific demands of the CIA exam. Candidates who retake Part 1 after an initial failure typically pass at higher rates on the second attempt.
Part 2 covers audit engagement practice and is often described as the most intuitive part for candidates who have been working in internal audit, since the content maps closely to what internal auditors do day to day. Despite this, the pass rate is broadly similar to Part 1, which suggests that familiarity with audit work is not a substitute for exam-specific preparation. The questions test the specific IIA approach to engagement planning, execution, and reporting rather than generic audit practice.
Part 3 has the most diverse content, covering business acumen, IT concepts, and financial management. Candidates whose backgrounds are entirely in financial audit sometimes find the IT domains of Part 3 more demanding. Conversely, those with an IT audit background often find Part 1 and its professional standards focus the most conceptually unfamiliar.
Pass Rates and Your Study Plan
The most useful application of the pass rate data is in building a realistic study plan rather than in predicting your outcome.
If roughly half of sitting candidates fail each part, and the evidence suggests the primary driver is insufficient or poorly structured preparation, then the plan that puts you in the passing half is:
- Allow enough total time. 150–200 hours of structured preparation per part is a realistic target. For a working professional studying evenings and weekends, that typically means four to six months per part.
- Start practice questions early. Working through Part 1 practice questions from the start of your study period gives you an accurate benchmark of where your knowledge currently stands relative to exam level. Candidates who leave all practice until the final weeks discover their gaps too late to address them.
- Review wrong answers carefully. The most common form of wasted preparation time is answering a question incorrectly and moving on without understanding why. The explanation behind each wrong answer tells you specifically which concept or standard you misapplied. Systematic wrong-answer review is the mechanism by which practice questions actually improve your knowledge.
- Give proportional time to high-weight domains. In Part 1, Governance/Risk/Control and Fraud Risk together account for 40% of the exam. In Part 2, Managing the Internal Audit Activity alone accounts for 35%. Allocate your preparation time to reflect those weights.
Retaker Strategy
A meaningful proportion of candidates who eventually pass the CIA do so on a second or third attempt at one or more parts. If you fail a part, the IIA allows you to retake it, subject to a waiting period. You are also permitted to continue sitting other parts while retaking a failed one, subject to the 18-month completion window.
The most common mistake after a failed attempt is repeating the same preparation approach and expecting a different result. Candidates who fail Part 1 after reading-heavy preparation and insufficient practice questions typically improve their outcome by shifting their second-attempt preparation toward question-heavy practice from an early stage.
If you failed because you ran out of time in the exam, practise under timed conditions before retaking. If you failed because you underestimated a particular domain, give that domain disproportionate attention in your retake preparation. The pass rate data does not predict your individual outcome; your preparation approach does.
Start practising CIA questions and use your accuracy data across domains to identify where your preparation is strongest and where it needs more work.