The IIA (Institute of Internal Auditors)
CIA
Certified Internal Auditor
The only globally recognized certification for internal auditors and the leading standard of competence in the profession. The CIA is earned by passing a three-part exam aligned with the Global Internal Audit Standards. The blueprint below details Part 1, Essentials of Internal Auditing.
What's on the exam
CIA Exam Syllabus — Part 1: Essentials of Internal Auditing (2025)
Governance, Risk Management, and Control
35%Governance concepts and frameworks · Risk management processes · Organizational risk and control models · COSO and other control frameworks · Risk and control self-assessment
Proficiency and Due Professional Care
18%Knowledge, skills and competencies · Due professional care · Continuing professional development · Use of technology and data analysis · Professional skepticism
Foundations of Internal Auditing
15%Purpose and mission of internal audit · Global Internal Audit Standards · Mandatory guidance · Internal audit charter · Types of internal audit services
Independence and Objectivity
15%Organizational independence · Individual objectivity · Impairments to independence and objectivity · Reporting lines and access · Safeguards and disclosure
Fraud Risks
10%Fraud risk awareness · Internal audit role in fraud · Fraud red flags and indicators · Controls to prevent and detect fraud · Investigation considerations
Quality Assurance and Improvement Program
7%Internal assessments · External assessments · Conformance reporting · Continuous improvement · QAIP requirements
Frequently asked questions
How much does the CIA cost?
Fees vary. IIA charges a one-time application fee plus per-part exam registration fees, with member rates lower than nonmember rates; confirm current amounts on the IIA pricing page.
How long is the CIA and how many questions does it have?
Part 1: 125 items; Part 2: 100 items; Part 3: 100 items — Part 1: 2.5 hours; Parts 2 and 3: 2.0 hours each.
What do you need to pass the CIA?
Scaled score of 600 or higher (on a 250–750 scale) required for each part.
Can you retake the CIA?
After a 60-day waiting period per failed part.
What is the best way to study for the CIA?
Study the official blueprint, not random material: the exam is weighted by domain (Governance, Risk Management, and Control 35%, Proficiency and Due Professional Care 18%, Foundations of Internal Auditing 15%, Independence and Objectivity 15%, Fraud Risks 10%, Quality Assurance and Improvement Program 7%). Spaced-repetition flashcards built domain-by-domain against that blueprint are the most time-efficient way to cover everything the exam tests.
Program in development
We're building a blueprint-complete program for this exam. Meanwhile, explore live programs across 11 exam.
Explore programs →