Current CIA exam guide
What is the CIA exam format in 2026?
The traditional Certified Internal Auditor exam has three computer-based parts. Part 1 contains 125 multiple-choice questions in 150 minutes. Parts 2 and 3 each contain 100 questions in 120 minutes. Across the full route, that is 325 questions and 390 minutes of testing.
For English-language candidates, the current syllabus is the 2025 CIA syllabus, introduced on May 28, 2025 and used throughout 2026. A scaled score of 600 is required to pass each part.
In this guide
The full blueprint
CIA Exam Structure at a Glance
The three parts follow the work of an internal audit function from first principles through engagement delivery and function leadership. Part 1 establishes the foundation. Part 2 examines how an engagement is planned, performed and communicated. Part 3 moves upward to managing the internal audit function, planning its work, assessing quality and monitoring results.
Internal Audit Fundamentals
125 questions · 150 minutes
Foundations, ethics, governance, risk, controls and fraud risks.
Internal Audit Engagement
100 questions · 120 minutes
Planning, evidence, analysis, supervision and communication.
Internal Audit Function
100 questions · 120 minutes
Operations, audit planning, quality, results and monitoring.
A useful way to read the blueprint is to ask what level of judgement each part expects. Part 1 asks whether you understand the profession. Part 2 asks whether you can make sound decisions during an engagement. Part 3 asks whether you can think like someone responsible for the function as a whole.
Current for 2026: English-language CIA exams use the 2025 syllabus. Some non-English versions have separate transition dates. The detailed tables below describe the current English-language blueprint. Always confirm the language and test date shown in your IIA and Pearson VUE records.
Part 1 of 3
CIA Part 1 Syllabus: Internal Audit Fundamentals
Part 1 contains 125 multiple-choice questions and allows 150 minutes. It carries the broadest foundation: what internal audit is, how independence and objectivity work, how the Global Internal Audit Standards shape professional conduct, and how auditors evaluate governance, risk and control.
| Part 1 domain | Weight | What it covers |
|---|---|---|
| Foundations of Internal Auditing |
35%
|
Purpose, mandate, independence, objectivity, assurance and advisory services, and the role of the internal audit function. |
| Ethics and Professionalism |
20%
|
Ethical behaviour, due professional care, professional scepticism, confidentiality and continuing competence. |
| Governance, Risk Management and Control |
30%
|
Governance structures, risk concepts, control frameworks, culture, accountability and the relationship between assurance providers. |
| Fraud Risks |
15%
|
Fraud risk, red flags, responsibilities, prevention, detection, investigation support and communication. |
Part 1 is the most common starting point because it gives Parts 2 and 3 a shared language. That said, The IIA does not require a fixed exam order. An experienced engagement auditor may prefer Part 2 first, while someone managing an audit team may find Part 3 more immediately familiar.
Part 2 of 3
CIA Part 2 Syllabus: Internal Audit Engagement
Part 2 contains 100 multiple-choice questions and allows 120 minutes. Half of the blueprint is engagement planning. That weighting matters. Candidates need to understand objectives, scope, risk assessment, resources, work programs and the choices an auditor makes before fieldwork begins.
The remaining domains move through evidence, analysis, evaluation, supervision and communication. In practice, these activities overlap. A weakness in planning changes the evidence you obtain. Weak evidence changes the strength of a finding. An unclear finding makes corrective action harder to agree and monitor.
| Part 2 domain | Weight | What it covers |
|---|---|---|
| Engagement Planning |
50%
|
Objectives, scope, risk assessment, resource planning, work programs and engagement-level coordination. |
| Information Gathering, Analysis and Evaluation |
40%
|
Evidence, sampling, data analysis, documentation, findings, conclusions and evaluation of results. |
| Engagement Supervision and Communication |
10%
|
Supervising work, discussing results, issuing communications and monitoring agreed action. |
Part 3 of 3
CIA Part 3 Syllabus: Internal Audit Function
Part 3 contains 100 multiple-choice questions and allows 120 minutes. The current syllabus is much more clearly centred on the internal audit function than many older web pages suggest. Its largest domain, at 45%, is Engagement Results and Monitoring.
This part asks candidates to think across the audit universe. The chief audit executive must align resources with risk, coordinate assurance, protect quality, communicate with senior management and the board, and monitor whether management has acted on reported issues.
| Part 3 domain | Weight | What it covers |
|---|---|---|
| Internal Audit Operations |
25%
|
Resources, policies, technology, coordination, reporting and management of the internal audit function. |
| Internal Audit Plan |
15%
|
Risk-based planning, audit universe decisions, stakeholder input and adapting the plan as risks change. |
| Quality of the Internal Audit Function |
15%
|
Quality assurance and improvement, performance measures, internal assessments and external assessments. |
| Engagement Results and Monitoring |
45%
|
Communicating results, monitoring action plans, escalation and acceptance of risk by management. |
Use the right material
CIA 2019 vs 2025 Syllabus: What Changed?
The 2025 syllabus is more than a light wording update. The IIA reorganised all three parts to align more closely with the Global Internal Audit Standards and the way internal audit work is performed. The change followed a global job analysis with more than 2,300 responses.
Part 1 has a clearer professional foundation
Ethics and professionalism now stand as a distinct domain, while governance, risk, control and fraud remain central.
Part 2 follows the engagement lifecycle
Planning carries half the weight, followed by evidence and evaluation, then supervision and communication.
Part 3 is centred on the audit function
The part now focuses on operations, planning, quality, results and monitoring rather than the broader legacy structure seen in older resources.
Standards alignment is current
The active blueprint is aligned with the Global Internal Audit Standards, so older material can teach outdated terminology or emphasis.
Is the 2019 CIA syllabus still current? Not for candidates taking the CIA exam in English. English exams moved to the 2025 syllabus on May 28, 2025. Arabic and Simplified Chinese have separate transition dates during 2026, which is why some official and third-party pages may appear inconsistent. Check the language and date of your own appointment.
Official references: The IIA CIA exam syllabus and The IIA’s explanation of the syllabus change.
Pass mark and reporting
How Is the CIA Exam Scored?
You need a scaled score of 600 to pass each CIA exam part. The scale runs from 250 to 750. The number 600 is not a raw percentage and does not mean that every candidate needs exactly 80% of questions correct.
Different exam forms can vary slightly in difficulty. Scaled scoring lets The IIA apply a consistent performance standard across those forms. Because the exam is non-disclosed and scoring is scaled, candidates cannot reliably convert a mock-exam percentage into an official result.
CIA exam results in 2026: For traditional CIA exams taken from April 1, 2026, candidates no longer receive an immediate unofficial score. The IIA issues one official result within three weeks of the exam date. The same delayed result model applies to the CIA Challenge Exam from September 1, 2026.
If you do not pass, the result report can help you identify weaker syllabus areas. Use that information to rebuild your revision plan instead of simply repeating the same volume of questions.
Official references: The IIA scoring guidance and the current Certification Candidate Handbook.
Your sequence
Which CIA Exam Part Should You Take First?
The IIA allows candidates to take the three parts in any order. Part 1 is the most natural starting point for many people because it establishes the profession’s language and principles. It is not the only sensible choice.
| Your background | A practical starting point | Why |
|---|---|---|
| New to internal audit | Part 1 | Builds the foundation for standards, ethics, governance, risk, controls and fraud. |
| Experienced in engagement delivery | Part 2 or Part 1 | Planning, evidence and findings may already be familiar, but Part 1 still helps with IIA terminology. |
| Audit manager or function leader | Part 3 or Part 1 | Operations, planning, quality and monitoring may align closely with your current role. |
| Returning after a long study break | Part 1 | A structured foundation can rebuild exam discipline before the more role-specific parts. |
In our experience, the strongest sequence is the one a candidate can actually sustain. A theoretically perfect order is less useful than a booked, realistic plan with enough time for reading, question review and mocks.
Test-day logistics
Where and How Do You Take the CIA Exam?
CIA exams are delivered at authorised Pearson VUE test centres. The IIA discontinued at-home online proctoring in May 2025. Appointment availability changes by location and date, so check the live Pearson VUE calendar before you finalise leave, travel or the final weeks of your study plan.
Register for the exam part
Complete the relevant registration in The IIA’s Certification Candidate Management System after your programme application is approved.
Book with Pearson VUE
Select an authorised test centre, date and time within your exam-registration window.
Check identification and arrival rules
Use the current candidate handbook and appointment confirmation. Name mismatches and late arrival can prevent admission.
Plan around result timing
Do not expect an immediate pass or fail message under the current 2026 result process.
Exam registrations are generally valid for 180 days, or until the end of your certification programme if that comes first. The current CIA programme window is three years from acceptance. Book only when your preparation plan can support the appointment.
A realistic route
How to Study for All Three CIA Exam Parts
Treat each part as a separate project, but keep the connections between them. Part 1 explains the principles. Part 2 applies them inside an engagement. Part 3 applies them to the function as a whole.
A practical plan has three phases: learn the content, practise by domain, then complete timed mocks and final revision. Repeat that cycle for each part rather than reading all three syllabi before you begin serious question practice.
Learn the part
Complete the core teaching and study material. Build an accurate mental model before you chase question volume.
Practise by domain
Review every incorrect answer. Record whether the problem was knowledge, interpretation, sequencing or careless reading.
Use timed mocks and final revision
Test pace, stamina and judgement. Return to weak domains, then retest them rather than rereading everything.
Most importantly, make your revision active. Explain why an answer is best, why the alternatives are weaker, and which clue in the question changed the decision. That habit is more useful than memorising a large bank of answers.
Instructor-led preparation
Prepare for the CIA Exam with EduDelphi
EduDelphi is an IIA Official Learning Partner. Our CIA preparation combines live faculty teaching, recordings, structured revision, question debriefs, mock exams and direct support across all three parts.
A separate pathway
What About the CIA Challenge Exam?
The CIA Challenge Exam is a separate one-part route for approved candidates. It is not the same as choosing one part from the traditional CIA programme. Current routes include eligible members of approved accounting bodies, active CISA holders and time-limited professional pathways announced by The IIA.
If you may qualify, check the exact eligibility, application window and syllabus before you begin studying. EduDelphi’s CIA Challenge Exam guide and preparation page explains that route separately so this three-part syllabus guide stays clear.
Direct answers
CIA Exam Format and Syllabus FAQs
How many questions are on the CIA exam?
The traditional three-part CIA exam contains 325 multiple-choice questions in total: 125 in Part 1, 100 in Part 2 and 100 in Part 3.
How long is each CIA exam part?
Part 1 allows 150 minutes. Parts 2 and 3 each allow 120 minutes. The combined scheduled testing time is 390 minutes across all three parts.
What score do you need to pass the CIA exam?
You need a scaled score of 600 on a 250-to-750 scale for each part. A 600 is not the same as a raw score of 80%.
Is the 2025 CIA syllabus current in 2026?
Yes for English-language exams. The 2025 CIA syllabus became effective for English exams on May 28, 2025. Some other languages have separate transition dates.
Can I take CIA Part 2 or Part 3 before Part 1?
Yes. The IIA does not require the three parts to be taken in numerical order. Choose the sequence that fits your experience, preparation and schedule.
Does the CIA exam include essays?
The current traditional CIA exams use multiple-choice questions. There is no essay section in Parts 1, 2 or 3.
Can I take the CIA exam from home?
No. The IIA discontinued online proctoring in May 2025. CIA exams are currently delivered at authorised Pearson VUE test centres.
When will I receive my CIA exam result?
For traditional CIA exams taken from April 1, 2026, The IIA issues one official result within three weeks. Candidates no longer receive an immediate unofficial result.
Are CIA exam questions publicly released?
No. The CIA is a non-disclosed examination. Avoid recalled or purported live questions. Use original practice questions and official syllabus-aligned study material.
How often does the CIA syllabus change?
The IIA updates the syllabus when its job analysis and professional standards indicate a material change is needed. Candidates should always check the official syllabus for their exam language and planned date.
Country course options
Looking for CIA Training in Your Country?
Official CIA requirements are global, while schedules, fees and learner support vary by market. Open the country list to find the most relevant EduDelphi course page.
View CIA course locations
Written and reviewed by CIA practitioners
About the Authors
Tanvi P.
CIA, CFE, CISA, CAMS
Tanvi brings 20+ years of international experience across audit, investigations, risk, controls and regulatory compliance. Her CIA teaching focuses on judgement, evidence and the reasoning behind close answer choices.
Shyam Sarrof
CPA (USA), CMA (USA), ACA, ACMA, CS, CFA, ACTM, MBA, B.Com (H)
Shyam has 13+ years of CIA training experience and 22+ years across internal audit, risk, controls and advisory. He reviewed this guide for exam structure, audit terminology and practical teaching accuracy.
Reviewed against The IIA’s current CIA syllabus, certification candidate handbook and scoring guidance. Last reviewed: September 20, 2026.
