CIA certification path
Your Complete CIA Certification Path
The process has a clear order: choose the correct pathway, apply, pass the required exams, complete and verify the applicable experience, receive the designation and maintain it each year.
This guide covers the Certified Internal Auditor credential issued by The Institute of Internal Auditors, not employment with the U.S. Central Intelligence Agency.
Written by Tanvi P., CIA, CFE, CISA, CAMS
Technical review by Shyam Sarrof, CPA (USA), CMA (USA), ACA, ACMA. Official requirements checked against current IIA guidance.
The complete process
Eight Steps from Starting Point to CIA Designation
Passing the exams and satisfying the experience requirement are separate stages. Eligible candidates can begin testing before all experience is complete. The designation is awarded only after every requirement for the approved pathway has been met.
Before you apply
CIA Certification and an Internal Audit Job Are Different
You can work in internal audit without yet holding the CIA designation. Employers set their own requirements for entry-level, senior and leadership roles. The CIA is a professional credential awarded by The IIA after a candidate completes the approved certification route.
The credential signals knowledge across internal-audit fundamentals, engagement work and management of the internal-audit function. It does not replace practical judgment, communication skills or the experience needed to perform audit work well. See what Certified Internal Auditors do in practice for a role-by-role view. If you are still deciding whether the credential fits your work, start with our guide to what CIA certification is.
The rest of this guide assumes you have chosen the credential and need the correct sequence from application to designation.
Step 1
Choose the Correct CIA Pathway
The traditional CIA route contains three exam parts and serves most candidates. The current IIA program page lists degree-based options, an active Internal Audit Practitioner pathway and a route based on qualifying experience. The exact experience requirement depends on the route.
| Starting point | Route to investigate | Main consideration |
|---|---|---|
| Bachelor’s or master’s degree | Traditional three-part CIA | Current experience requirements differ by degree level and can usually be completed after the exams. |
| Student or no university degree | IAP or current experience-based route | Review the live IIA pathway carefully before paying because entry conditions differ. |
| Eligible CPA or CA credential | Accounting CIA Challenge Exam | The issuing body, active status and approved credential list matter. |
| Active CISA holder | CISA CIA Challenge Exam | Active credential status and current Challenge requirements apply. |
The traditional route and Challenge routes are separate certification paths. A shorter exam route still has eligibility, application and experience conditions. Read the current CIA certification requirements before choosing.
Which CIA Pathway Should You Explore?
Select the starting point closest to your situation. These route summaries are guidance for your first check, not an eligibility decision.
I have a bachelor’s or master’s degree
Start with the traditional three-part CIA pathway. A master’s degree route normally carries a shorter experience requirement than a bachelor’s route. Prepare proof of education and valid identification, then confirm your live requirements before applying.
I am a student or do not have a degree
Examine the Internal Audit Practitioner and current experience-based pathways. Your existing experience, student status and active IAP status can change the route. Avoid assuming that the degree-based table applies to you.
I hold an eligible CPA or CA qualification
Check the Accounting CIA Challenge Exam route. The IIA uses an approved list of accounting bodies and requires the credential to meet current conditions. Confirm the issuing body and active status in the live application.
I hold an active CISA
Review the one-part CISA CIA Challenge Exam. This route is designed for eligible active CISA holders and tests the gap between technology assurance and the broader CIA body of knowledge.
Step 2
Create Your Profile and Prepare the Application Documents
For certifications administered through IIA Global, candidates use the Certification Candidate Management System. National Institute administration can differ, so follow the route shown for your country.
Degree-based applicants should distinguish entry documents from exit requirements. A valid government-issued photo ID and acceptable proof of education are used during the application stage. Experience verification can be completed later, but must be approved before the designation is awarded.
- Make your profile name match your identification
- Use a valid government-issued photo ID
- Prepare route-specific education or credential evidence
- Check the country and primary address in your profile
- Confirm document scans are complete and readable
- Use the correct application pathway before paying
A character reference is no longer part of the certification application. The IIA removed that requirement in June 2023.
Among EduDelphi learners who requested application or eligibility-document support, 21% had at least one profile or document item that we recommended correcting before submission. Common problems involved name matching, education evidence, identification and experience-verification details.
Step 3
Submit the Application and Track Four Separate Clocks
The CIA process contains several deadlines. They do not all begin on the same day, and treating them as one vague three-year limit creates avoidable mistakes. The current Candidate Handbook is the controlling reference for application and registration deadlines.
Once The IIA approves the application, save the program-expiry date. Each exam registration then has its own authorization window. After all exam and experience requirements are complete and approved, The IIA currently states that the CIA designation normally appears in the account within 7 to 14 business days.
Do this immediately after approval: record the program deadline, decide which exam part you will take first and work backward from a realistic preparation period. Do not register for an exam simply because the approval email has arrived.
Step 4
Build Your CIA Exam Plan
The traditional route has three separate exams. You may take them in any order. Many candidates start with Part 1 because it establishes professional foundations, but experienced engagement auditors or audit-function leaders may choose a different sequence.
| Exam | Current structure | Primary scope |
|---|---|---|
| Part 1 | 125 questions, 150 minutes | Internal Audit Fundamentals |
| Part 2 | 100 questions, 120 minutes | Internal Audit Engagement |
| Part 3 | 100 questions, 120 minutes | Internal Audit Function |
Across the three parts, that is 325 multiple-choice questions and 390 minutes of scheduled exam time. Each part requires a scaled score of 600 or higher. A score of 600 does not mean 80% correct.
Use the current CIA exam format and syllabus to plan coverage, then decide which CIA part to take first based on your background. Your weekly plan should include concept learning, question review, timed practice and revision of weak areas.
Step 5
Prepare, Register and Schedule Each Exam
Application and exam fees do not automatically include a complete preparation system. Choose current study resources, work from the active syllabus and check that older notes or second-hand books still match the examination you will take.
Register only after your program application is approved. Once the exam authorization is active, book an available Pearson VUE test-center appointment within the registration window. At-home online proctoring was discontinued in May 2025.
Ready to register?
- Your application is approved
- Your study material matches the current syllabus
- You have a workable exam target date
- Your identification matches your account
- Your test center and travel plan are practical
- Any accommodation is approved before scheduling
Read the Pearson VUE scheduling and test-day guide before booking. If the content feels unfamiliar or your practice reasoning is inconsistent, use our guide to CIA exam difficulty to diagnose the gap.
Step 6
Pass the Exams and Read the Result Correctly
For three-part CIA examinations taken from April 1, 2026, candidates no longer receive the old immediate unofficial result. The IIA issues the official result within three weeks after its post-exam checks.
A passing report shows Pass rather than a numeric score. If you do not pass, the report includes the scaled score and identifies syllabus areas needing improvement. Use that feedback to rebuild the next study cycle instead of repeating the same preparation plan.
Scaled scoring matters. The reporting scale runs from 250 to 750 and 600 is the passing point. The raw-to-scaled conversion accounts for differences between exam forms, so there is no single published percentage of correct answers that guarantees a pass.
Step 7
Complete and Verify Your Work Experience
The amount of experience required depends on the approved pathway. Degree-based candidates can normally take the exams before completing the full requirement. Experience verification remains an exit requirement and must be approved before certification.
Relevant work is broader than a job titled Internal Auditor. Current IIA categories can include internal audit, quality assurance, risk management, compliance, external audit, internal control and other audit or assessment disciplines. The responsibilities performed matter more than the wording on a business card.
Some candidates complete experience earlier. Follow the verification workflow shown in your account, describe the work accurately and use a verifier who can confirm the employment period and relevant responsibilities.
of surveyed EduDelphi CIA learners initially believed, or were unsure, that the full work-experience requirement had to be completed before they could take the exams.
of EduDelphi CIA learners with prior audit-related experience reported that at least some relevant experience came from roles outside a job formally titled Internal Auditor.
How EduDelphi measured these findings
These findings were compiled from EduDelphi learner surveys and support records used for the CIA requirements study. The 21% document figure uses only learners who requested application or eligibility-document support. The 37% figure uses learners with prior audit-related experience. Results describe EduDelphi’s learner population and are not global IIA statistics.
Step 8
Receive the CIA Designation and Keep It Active
Passing the last exam does not automatically make you a CIA. The certification system must show every applicable exam, education and experience requirement as complete. Once the designation is awarded, check that your name and status are correct.
Certification then moves into annual renewal. Under the current IIA CPE policy, a practicing CIA needs 40 CPE hours each year, including at least two ethics hours. A nonpracticing CIA has a 20-hour requirement, also including two ethics hours. Newly certified holders have a special first reporting period.
Plan maintenance from the start. Our CIA CPE and renewal guide explains qualifying activities, records, fees, Grace status and the first renewal period.
Planning the journey
How Long Does It Take to Become a Certified Internal Auditor?
There is no single completion time. The route, document readiness, weekly study capacity, exam sequence, appointment availability, retakes and outstanding experience all affect the finish date. The IIA’s three-year program window is a deadline, not a recommended study duration.
Accelerated plan
A candidate with eligible experience already completed may prepare for the exams in close succession, leaving enough time for each result and the next registration. This demands sustained weekly study and prompt document handling.
Balanced plan
A working professional can prepare for one part at a time, pause briefly between exams and complete the route without forcing study into every week of the year. This is the most manageable pattern for many learners.
Experience still outstanding
A candidate may pass all required exams and then continue building qualifying work experience. The designation arrives only after that experience has been completed and verified within the program window.
Start with the fixed dates. Record the application window, program expiry and each exam authorization. Then add a preparation period that fits your actual work schedule. For budgeting, use the current CIA certification cost guide and calculator.
Avoid preventable delays
Common Mistakes That Slow Down CIA Certification
- Choosing a route from an old article instead of the live application
- Assuming all experience must be complete before any exam
- Treating three passed parts as automatic certification
- Letting an application or exam registration expire
- Studying from outdated syllabus material
- Booking before an accommodation is approved
- Waiting until the end to identify an experience verifier
- Ignoring National Institute administration in your country
One check at the beginning prevents weeks of correction later: confirm the route, the administering institute, the required entry evidence and the final experience requirement before you pay.
After the final exam
What Happens After You Pass Your Last CIA Exam?
First, wait for the official result. Then open your certification record and check whether experience verification or another exit requirement remains outstanding. Passing all required exams completes the examination stage only.
If every requirement has been approved, The IIA currently states that the designation normally appears in the account within 7 to 14 business days. If the record is incomplete, finish the missing requirement or follow up through the applicable certification support route.
End-to-end candidate support
Get Help from Application to Designation
EduDelphi is an Official Learning Partner of The Institute of Internal Auditors. Initial pathway and application guidance is available even if you have not enrolled in a preparation course.
Our CIA team can help you map the likely route, review document readiness, understand CCMS steps, plan experience verification, prepare for registration, interpret scheduling requirements and follow up on certification cases. An experience-verifier checklist or email template can be arranged on request.
Enrolled learners also receive live faculty teaching, recordings, structured LMS resources, practice questions, mock exams, revision tools and direct faculty support through the examination journey.
EduDelphi guides candidates through the process. The IIA or the applicable National Institute makes the final eligibility and certification decision.
CIA pathway guidance
Check Your Likely CIA Route
Tell us your education, professional background and current credential status. The CIA team will help you identify the pathway to verify and explain the next application and preparation step.
Country course options
Find CIA Preparation in Your Country
The credential is global. Course schedules, fees, contact routes and local administration can vary.
View CIA course locations
Direct answers
How to Become a Certified Internal Auditor: FAQs
What qualifications do I need to become a Certified Internal Auditor?
The route can be based on a master’s degree, bachelor’s degree, active IAP status or qualifying experience. Approved professional credentials can open a Challenge pathway. Each route has its own education, examination and experience conditions.
Can I take the CIA exams before completing work experience?
Yes. Eligible candidates on degree and IAP routes can take the exams before completing all required experience. Experience must still be completed and verified before the designation is awarded.
Can I become a CIA without a degree?
Yes, under current conditions. Candidates without a qualifying university degree should examine the IAP and experience-based entry routes. Check the live route before paying because requirements differ.
How many CIA exams are there?
The traditional CIA route has three exams. Eligible CPA, CA and CISA holders may qualify for a one-part Challenge Exam route.
How long does it take to become a Certified Internal Auditor?
The timeline depends on study capacity, exam order, appointment availability, retakes and whether experience is already complete. The normal certification-program window is three years after approval.
How much does CIA certification cost?
Official fees depend on membership, route and country administration. Preparation, taxes, retakes and renewal may add to the total. Use EduDelphi’s current CIA cost guide for the standard IIA USD schedule and calculator.
Do I need IIA membership?
Membership is not generally required for the traditional CIA route, but it affects standard pricing and benefits. Certain National Institute arrangements require membership, so check the rule for your country.
Is a character reference required?
No. The IIA removed the character-reference requirement from certification-program applications effective June 15, 2023.
Does passing all three exams automatically make me a CIA?
No. You must also complete every applicable education, experience and verification requirement. The designation is awarded after the full certification record is approved.
Can external audit, risk, compliance or controls experience count?
It can. The IIA recognizes several equivalent experience areas, including external audit, risk management, compliance, internal control, quality assurance and audit or assessment disciplines. The work performed and its verification determine whether it qualifies.
How long is a CIA exam registration valid?
An individual exam registration is generally valid for 180 days or until the certification program expires, whichever occurs first.
What do I need to do after becoming certified?
Renew the certification annually and complete the CPE required for your practice category. Practicing CIAs currently need 40 hours each year, including two ethics hours.
Author and technical review
Written by Experienced CIA Faculty
Tanvi P.
CIA, CFE, CISA, CAMS
Former Regional Financial Crime Risk, Standard Chartered · Former Vice President, Citi Global Investigations Unit · Former KPMG Forensic Services Manager
Tanvi brings 20+ years of international experience across internal audit, investigations, risk, controls and regulatory compliance. Her CIA teaching focuses on judgment, evidence and the reasoning behind close answer choices.
Shyam Sarrof
CPA (USA), CMA (USA), ACA, ACMA, CS, CFA, ACTM, MBA, B.Com (H)
13+ Years in CIA Training | 22+ Years in Internal Audit, Risk & Controls
Shyam brings more than 22 years of experience across internal audit, accounting, controls, governance, risk and advisory. He reviewed this guide for route logic, exam facts, certification deadlines and practical candidate support.
Official references
