Finance & Accounting

CIA (Certified Internal Auditor)

advanced

Certified Internal Auditor (CIA)

By The Exam Atlas Editorial Team · Verified 2026-06-07

Free CIA practice questions 82 questions with full answer explanations. No sign-up. Start practice →

Overview

The CIA (Certified Internal Auditor) is the leading globally recognised credential for internal auditors, awarded by the Institute of Internal Auditors (IIA). It is not connected to any intelligence agency; it is a professional designation in internal audit, risk and control.

The CIA is earned by passing three exam parts: Part 1 Essentials of Internal Auditing, Part 2 Practice of Internal Auditing and Part 3 Business Knowledge for Internal Auditing. Exams are computer-based, multiple-choice, and delivered at Pearson VUE test centres worldwide. You also need a qualifying mix of education and internal-audit experience, and you keep the credential active through annual continuing professional education (CPE).

✓ Who it is for

  • Internal auditors who want the recognised global standard for their field
  • Risk, controls, compliance and governance professionals
  • Accountants or external auditors moving into an internal-audit career

✕ Who it is not for

  • People aiming at US public accounting and signing audit opinions - that is the CPA.
  • Those wanting a credential with no work-experience requirement - the CIA needs qualifying internal-audit experience.
  • Anyone not working in or moving toward internal audit, risk or controls.

Exam structure

Part 1 - Essentials of Internal Auditing125 questions in 2.5 hours. Covers the foundations of internal auditing: purpose and mandate, independence and objectivity, proficiency and due professional care, the quality programme, governance, risk management and control, and fraud risk.
Part 2 - Practice of Internal Auditing100 questions in 2 hours. Covers managing the internal audit activity and the engagement process: planning and performing engagements, gathering evidence and communicating results.
Part 3 - Business Knowledge for Internal Auditing100 questions in 2 hours. Covers the business context: business acumen and financial management, information technology and information security, and broader management and leadership topics.

Realistic study time

  • Per part ~50-120 hours each
  • All three parts Several months to ~2 years alongside work

Bars show relative effort, not a guarantee. Your time depends on background and study method.

Turn this into a week-by-week schedule with the Study Plan Generator.

What it really costs

Application fee ~USD 120 member / 240 non-member one-time, to enter the CIA programme
Part 1 ~USD 310 member / 445 non-member
Parts 2 and 3 ~USD 280 member / 415 non-member each
IIA membership Optional annual fee lowers the application and exam fees

Fees change and vary by region. Confirm the current amount on the official site before you register.

Want your full out-of-pocket figure? Try the Cost Calculator.

Salary & career value

Indicative ranges for orientation only - not surveyed data, and not financial or career advice. Sources and date below.

US-centric and indicative. Internal auditors in the US commonly report ~$60k-100k, and surveys link the CIA to a meaningful pay premium over non-certified peers. Audit managers and senior roles indicatively reach ~$100k-150k, with chief audit executives higher. Figures vary by industry, city and experience.

Pass rate: Not published. The IIA does not release official CIA pass rates. Third-party estimates circulate but are unverified, so treat any specific percentage with caution and rely on The IIA for authoritative information.

Internal Auditor (entry) ~$55k-75k
Senior Internal Auditor ~$75k-100k
IT / Risk Auditor ~$80k-120k
Internal Audit Manager ~$100k-135k
Chief Audit Executive (CAE) ~$130k-200k+

Indicative annual pay (USD), each role's typical band on a shared scale.

Other markets (indicative)

United States~$70k-100k (certified)
United Kingdom~£45k-70k
Germany~€55k-85k

Jobs that often ask for it:

  • Internal Auditor
  • Senior Internal Auditor
  • Internal Audit Manager
  • Risk and Controls Specialist
  • Chief Audit Executive

Is it worth it?

Worth it if internal audit, risk or controls is your career - the CIA is the recognised global standard for the field and is linked to a meaningful salary premium. If your goal is US public accounting and signing audit opinions, the CPA is the more direct licence; many controls and IT-audit professionals pair the CIA with the CISA instead.

Not sure this is the right exam for you? Compare your options with the Exam Finder.

Our specialty · side by side

Compare CIA with other exams

Independent, like-for-like comparisons to help you choose the right one.

What to do next

The CIA is the global standard for internal audit. If you are weighing it against US public accounting, compare CIA vs CPA before committing.

On exam day

Computer-based multiple-choice at a Pearson VUE test centre, by appointment, with most centres open year-round. Online remote proctoring has been discontinued, so plan to attend a centre. You have 180 days to schedule each part after you register for it. Results for multiple-choice parts are typically available on screen at the centre.

Keeping your certification

Keep the CIA active with annual continuing professional education: 40 CPE hours per year if practising (including 2 hours of ethics), or 20 hours per year if non-practising. You self-report CPE to The IIA each year; let it lapse and reinstatement steps apply.

FAQ

Is the CIA the same as the intelligence agency?
No. CIA here stands for Certified Internal Auditor, a professional credential awarded by the Institute of Internal Auditors (IIA). It has nothing to do with any government intelligence agency - it certifies skills in internal audit, risk and control.
How many parts does the CIA exam have?
Three: Part 1 Essentials of Internal Auditing (125 questions, 2.5 hours), Part 2 Practice of Internal Auditing and Part 3 Business Knowledge for Internal Auditing (each 100 questions, 2 hours). All are computer-based multiple-choice.
What is the CIA passing score?
Each part is reported on a scaled score from 250 to 750, and you need a scaled 600 to pass. It is not a simple percentage: raw scores are converted to the scale, so 600 is the consistent passing line across parts and exam versions.
What are the CIA eligibility requirements?
A common route is a bachelor's degree plus two years of internal-audit experience; a master's degree reduces the experience to one year, and five years of experience can qualify without a degree. Final-year bachelor's students and eligible graduate students can sit the exam first and meet the education requirement afterwards. Check The IIA for the current rules.
How much does the CIA cost?
There is a one-time application fee plus a fee for each of the three parts, and IIA members pay less than non-members. In US dollars the application is around 120 (member) to 240 (non-member), with parts roughly 280-445 each depending on the part and membership. Confirm current pricing with The IIA, as fees change and vary by region.
How long does the CIA take?
Most candidates take several months to around two years across the three parts, depending on study pace. You have three years from acceptance into the programme to complete all requirements, and 180 days to schedule each part once you register for it.
CIA or CPA?
The CIA is the global specialist credential for internal audit, risk and controls and is portable across countries. The US CPA is a state licence for public accounting (external audit, tax, signing audit opinions). Choose by the role: internal audit points to the CIA, US public accounting points to the CPA.
Does the CIA expire?
It does not expire on a fixed date, but you must keep it active with continuing professional education: 40 CPE hours a year if practising (including 2 hours of ethics), or 20 hours a year if non-practising, reported annually to The IIA.

Related exams

Free study resources

Sources