What the CIA Certification Is
CIA stands for Certified Internal Auditor. It is the professional certification for internal auditors awarded by the Institute of Internal Auditors (the IIA), the global professional body for the internal audit profession. Unlike accounting credentials that are tied to a single country's regulator, the CIA is recognised internationally, and the same three-part exam is sat by candidates worldwide.
Holding the CIA signals that you understand the IIA's professional standards, that you can plan and carry out audit engagements to those standards, and that you have the broader business knowledge internal audit work requires. For auditors who want to progress beyond junior roles, it is usually the first qualification worth considering, and many internal audit job adverts name it directly.
One clarification worth making early: this CIA has nothing to do with the American intelligence agency. In the audit and finance world, CIA has meant Certified Internal Auditor for decades, and recruiters in the field will read it that way on your CV.
Who it's for
The CIA suits three groups in particular:
- Practising internal auditors who want formal recognition of their experience and a route to senior roles such as audit manager or chief audit executive.
- External auditors and accountants moving into internal audit, who bring financial knowledge but need to demonstrate command of the IIA's standards and methodology.
- Risk, compliance, and IT professionals whose work overlaps with internal audit and who want a credential that covers governance, risk management, and control in depth.
The Three Exam Parts at a Glance
The CIA exam is split into three parts, each sat separately as a computer-based test. According to the IIA, the parts are:
- Part 1: Essentials of Internal Auditing. 125 multiple-choice questions in 150 minutes. It covers the foundations of the profession: the IIA's standards, ethics, independence and objectivity, and the core concepts of governance, risk management, and control. Practise Part 1 questions to see the style of material it tests.
- Part 2: Practice of Internal Auditing. 100 multiple-choice questions in 120 minutes. This is the practical part, covering how audit engagements are planned, performed, and communicated, and how an internal audit function is managed. Practise Part 2 questions once you have the Part 1 foundations in place.
- Part 3: Business Knowledge for Internal Auditing. 100 multiple-choice questions in 120 minutes. It tests the wider business, technology, and financial knowledge auditors draw on during engagements. Practise Part 3 questions to find out which areas of business knowledge need the most attention.
Every question across all three parts is multiple choice. There are no essays, case-study write-ups, or oral exams, which makes question practice the most directly relevant form of preparation.
The IIA does not prescribe an order, so you can sit the parts in whatever sequence suits you. Most candidates start with Part 1 because it introduces the standards and vocabulary the other two parts build on. For a fuller breakdown of each part, including domain weightings and what the test-centre experience is like, see our CIA exam format guide.
Eligibility and Requirements
To earn the CIA you need to be accepted into the IIA's certification programme, pass all three exam parts, and meet education and experience requirements. According to the IIA's eligibility criteria, the experience requirement scales with your education:
- With a master's degree, you need 12 months of internal audit experience or its equivalent.
- With a bachelor's degree, you need 24 months.
- Without a degree, there is an alternative route through the IIA's Internal Audit Practitioner (IAP) designation combined with five years of internal audit experience.
Candidates also provide proof of identity and a character reference as part of the application; the IIA's certification candidate handbook sets out who can sign the reference. You do not need everything in place on day one. The IIA states that you have three years from the date you are accepted into the programme to complete the eligibility requirements, so many candidates apply, sit the exams, and finish accumulating their experience within that window.
On cost, the IIA's official pricing page lists the application fee at $120 USD for IIA members and $240 USD for non-members, the Part 1 exam at $310 USD for members and $445 USD for non-members, and Parts 2 and 3 at $280 USD each for members and $415 USD for non-members. Fees change from time to time, so treat the IIA's page as the source of truth before you budget.
How Long It Takes and What the Exam Is Like
There is no fixed timetable. Because each part is booked separately, your timeline depends on how much study time you can commit alongside work. Sitting one part at a time with a dedicated study block for each is the most common pattern, and the three-year programme window gives you a hard outer limit to plan against.
All three parts are delivered at Pearson VUE test centres as secure, computer-based exams. Each part is scored on a scale of 250 to 750, and according to the IIA's exam development documentation the passing score is 600. Your result on one part does not affect the others; you pass or fail each part independently.
The exam has a reputation for being demanding, and a meaningful share of attempts do not pass. We have written separately about CIA exam pass rates and what they do and do not tell you about your own chances.
CIA vs Other Credentials
Candidates weighing up the CIA often compare it against the CPA (the US public accounting licence) and the CISA (ISACA's information systems audit certification). The short version: the CPA centres on external financial reporting and audit, the CISA centres on IT audit, and the CIA is the only one of the three built specifically around internal audit as a discipline. Which one fits depends on the work you want to do, and the credentials stack sensibly for people whose roles span more than one area. Our CIA vs CPA vs CISA comparison works through the differences in eligibility, content, and career paths in detail.
How to Start Preparing
Because the exam is entirely multiple choice, the preparation that pays off is answering exam-style questions early and often, alongside whichever study materials you use for the underlying reading. Working through questions shows you where your knowledge actually stands, which is information you want in week one rather than the week before your booking. We have set out a full approach in our guide to passing CIA Part 1.
A note on what practice can and cannot do: CIA Practice is an exam revision tool. Working through our questions builds your knowledge of the syllabus and your speed in the exam format, but it is not training in how to run real audit engagements, and nothing here is professional advice about your specific work.
If you are considering the CIA and want to gauge where you stand, start with free Part 1 practice questions. Part 1 Domain I (Foundations of Internal Auditing) is free with no card required, so you can test yourself against exam-style questions before you spend anything on the programme.