CIA exam order guide
Which CIA Exam Part Should You Take First?
Most candidates should take CIA Part 1 first, followed by Part 2 and Part 3. That order builds from professional foundations to engagement work and then to management of the internal audit function.
The decision in one minute
The Best First CIA Part for Your Background
The Institute of Internal Auditors does not impose a fixed order. It tells candidates to review the syllabi and decide what is appropriate for them. That flexibility is useful, but most candidates still benefit from a clear default. Part 1 is that default.
Official reference: The IIA Certified Internal Auditor programme and exam-order guidance.
Our default sequence
Our Recommended CIA Exam Order
For most candidates, the strongest sequence is Part 1, then Part 2, then Part 3. It follows the way internal audit knowledge develops. You first learn the profession’s mandate and principles, then apply them within an engagement, and finally consider how the internal audit function is planned, managed and monitored.
Internal Audit Fundamentals
Internal Audit Engagement
Internal Audit Function
Part 1 gives you a shared language for ethics, governance, risk, control, fraud and the responsibilities of the board, chief audit executive and internal audit function. Part 2 expects you to use that foundation while planning and performing engagements. Part 3 asks you to think across the function as a whole.
Do the numbers force you to start with Part 1? No. The numerical labels do not create an official prerequisite. The value of numerical order is the learning progression, not an administrative rule.
For a full explanation of every domain, question count and time limit, read our current CIA exam format and syllabus guide.
Match the exam to your work
Choose Your First CIA Part by Professional Background
Your job title is a rough clue. Your actual responsibilities matter more. A person called an internal auditor may spend most of the week testing evidence, while another may manage the audit plan, quality programme and reporting to the audit committee. Those candidates should not automatically receive the same advice.
| Your background | Best starting part | Why |
|---|---|---|
| New to internal audit | Part 1 | Build the professional foundation before moving into applied engagement decisions. |
| Risk, compliance or controls | Part 1 | The concepts will be familiar, but internal audit authority, independence and governance need precise treatment. |
| External audit or accounting | Part 1 | Evidence skills transfer. The internal audit mandate, stakeholders and reporting relationships differ. |
| Experienced engagement auditor | Part 2 or Part 1 | Part 2 works when planning, evidence, analysis and findings are current strengths. |
| Audit manager, director or CAE | Part 3 or Part 1 | Part 3 can align closely with planning the function, quality, reporting and follow-up. |
| Early-career candidate | Part 1 | The foundation makes Part 2’s engagement scenarios easier to interpret. |
| Active IAP holder | Part 2 or Part 3 | Part 1 is waived. Choose according to engagement-level or function-level experience. |
| Challenge Exam candidate | Not applicable | The Challenge Exam is a separate one-exam pathway. |
Before choosing a route, compare your eligibility with the current CIA certification requirements. IAP and Challenge pathways change the exam structure itself.
The strongest default
Start with CIA Part 1 for the Professional Foundation
Part 1 is the right first exam for most candidates. It establishes how The IIA defines the purpose, authority and responsibilities of internal auditing. That language shapes the way questions are written across the programme.
- Foundations of internal auditing
- Ethics and professionalism
- Governance, risk management and control
- Fraud risks and internal audit responsibilities
Start here if you are new to internal audit, moving from external audit or accounting, or coming from risk, compliance and controls. These backgrounds give you useful knowledge, but Part 1 teaches where internal audit sits, who owns which decision and how independence and objectivity work in practice.
Tanvi’s recommendation: Part 1 is the safest starting point because it gives you the language used across the CIA programme. The word “fundamentals” does not make it an easy exam. It makes the part foundational.
The engagement route
Start with CIA Part 2 When Engagement Work Is Your Strength
Part 2 can be the stronger first choice for an experienced engagement auditor. The active syllabus follows the engagement lifecycle through planning, evidence, analysis, evaluation, supervision and communication.
You should be able to say yes to most of the following before choosing Part 2 first:
- You regularly determine or review engagement objectives and scope.
- You assess risks and controls while planning audit work.
- You gather, evaluate and document audit evidence.
- You develop or review findings and engagement communication.
- You understand how evidence sufficiency changes the auditor’s next step.
Experience helps, but it can also create a trap. Your employer’s usual practice may differ from the professional logic tested in a question. Part 2 rewards candidates who can identify the actor, authority, evidence and correct sequence described in the scenario.
“I do not recommend Part 2 first merely because someone has ‘auditor’ in their title. I look at whether they actually plan engagements, evaluate evidence and communicate findings, and whether they can separate workplace habit from IIA principles.”
Tanvi P., CIA, CFE, CISA, CAMS
The audit-function route
Start with CIA Part 3 When You Manage the Audit Function
Part 3 can be an effective first exam for audit managers, directors, chief audit executives and quality-assurance professionals. The current Part 3 is called Internal Audit Function. It covers operations, the risk-based audit plan, quality, engagement results and monitoring.
Choose it first when your current responsibilities include several of these:
- Building or maintaining a risk-based audit plan
- Allocating audit resources and using technology
- Coordinating assurance providers
- Operating a quality assurance and improvement programme
- Reporting to senior management or the audit committee
- Monitoring management action and accepted risk
Ignore old Part 3 advice. Current English-language exams use the 2025 syllabus. Part 3 is no longer organised as the former collection of separate business acumen, IT and financial-management domains. The IIA rebuilt it around management of the internal audit function.
The syllabus refresh followed extensive global research and brought the exam closer to current internal audit practice. Read The IIA’s explanation of the CIA exam refresh and review the active CIA exam syllabus.
Four practical routes
The Best CIA Exam Order for Common Candidate Profiles
Most candidates
Part 1 → Part 2 → Part 3
Build the foundation, apply it to engagements, then move to the internal audit function.
Experienced engagement auditors
Part 2 → Part 1 → Part 3
Use recent engagement experience to begin strongly, then formalise the professional foundation.
Audit managers and function leaders
Part 3 → Part 1 → Part 2
Start where your function-level responsibilities give you the clearest advantage.
Active IAP holders
Part 2 → Part 3 or Part 3 → Part 2
Part 1 is waived. Choose the next exam from your strongest current responsibilities.
These are preparation routes, not rigid rules. Once you choose a sequence that fits your experience, follow it consistently unless exam feedback or a material change in your schedule gives you a clear reason to adjust.
Verified EduDelphi learner patterns
Which CIA Part Do Candidates Actually Take First?
EduDelphi’s verified learner records show a clear preference for Part 1 among candidates following the traditional three-part CIA route.
Part 1 remained the most common starting point in every professional group. Experience changed the alternatives candidates selected.
| Professional background | Part 1 first | Part 2 first | Part 3 first |
|---|---|---|---|
| Early-career or limited audit experience | 85% | 10% | 5% |
| Experienced engagement auditors | 60% | 30% | 10% |
| Audit managers or function leaders | 50% | 15% | 35% |
The pattern is useful. Early-career learners overwhelmingly chose Part 1. Engagement auditors were three times as likely as early-career learners to start with Part 2. Audit managers and function leaders were seven times as likely to begin with Part 3.
A separate verified EduDelphi finding adds context: 48% of early-career learners identified Part 2 as their hardest part, compared with 29% of experienced internal auditors. That difference supports a foundation-first route for candidates who have not yet built substantial engagement experience. See the complete findings in our guide to CIA exam difficulty and pass rates.
How EduDelphi analysed first-part selection
EduDelphi reviewed verified first-part selections among many hundreds of learners following the traditional three-part CIA route. Active IAP holders with a Part 1 waiver and candidates pursuing a one-part Challenge Exam were excluded. Professional-background groupings were based on the learner’s recorded role and relevant experience. These figures describe observed learner choices. They do not claim that one sequence causes a higher pass rate.
Choose the sequence, not a shortcut
Should You Start with the Easiest CIA Part?
Start with the part that creates the strongest overall sequence. The part that feels most familiar is not automatically easy, and the part with the highest published pass rate is not automatically the right starting point for you.
Part 1 is the best default because its concepts support the other exams. Part 2 is a good first move when engagement work is already second nature. Part 3 is a good first move when you operate at function level. Those are stronger reasons than trying to guess which examination will require the least work.
Our CIA exam difficulty guide explains why the hardest part changes with professional background and why a passing score of 600 is not the same as a raw 80%.
Avoid a weak start
Mistakes to Avoid When Choosing Your First CIA Part
Following a colleague’s order without comparing your actual responsibilities.
Starting with Part 2 because your title says auditor even though you have limited engagement experience.
Treating Part 1 as easy because the title includes the word fundamentals.
Using old Part 3 advice written for the pre-2025 syllabus.
Choosing from pass rates alone instead of comparing the current content with your background.
Studying all three parts seriously at once and weakening focus across every part.
Confusing IAP or Challenge routes with the traditional three-part programme.
Booking too early before confirming current material, realistic study time and test-centre availability.
Already started elsewhere?
What If You Have Already Started with Part 2 or Part 3?
Continue when the part fits your background and your preparation is moving well. There is no reason to restart simply because numerical order is common.
If you have already sat an exam, use the waiting period to begin a light introduction to the next planned part. Current CIA results are issued within three weeks, so you can maintain momentum without committing immediately to an aggressive new exam date.
Change your sequence when the evidence supports it. A weak diagnostic, a failed attempt, a major work deadline or a clear mismatch between the syllabus and your experience can justify a new order. Frustration alone is not a study strategy.
IIA Official Learning Partner
Prepare with Current, IIA-Aligned CIA Training
EduDelphi is an Official Learning Partner of The Institute of Internal Auditors. Our preparation follows the current CIA examination structure and combines live faculty teaching, recordings, question debriefs, mock exams and structured revision support.
The CIA credential is awarded by The IIA after the candidate satisfies its current examination, eligibility and certification requirements.
Direct answers
CIA Exam Order Frequently Asked Questions
Do I have to take CIA Part 1 first?
No. The IIA permits candidates to take the three traditional CIA exam parts in any order. EduDelphi recommends Part 1 first for most candidates because it establishes the professional foundation used across Parts 2 and 3.
Can I take CIA Part 2 before Part 1?
Yes. Part 2 can be a strong first choice for experienced engagement auditors who regularly plan audits, evaluate evidence and communicate findings. Candidates without substantial engagement experience should begin with Part 1.
Can I take CIA Part 3 first?
Yes. Current Part 3 is a sensible first choice for audit managers, directors, CAEs and quality professionals whose work already covers audit operations, risk-based planning, quality, reporting and monitoring.
What is the best CIA exam order for beginners?
Beginners should take Part 1, then Part 2, then Part 3. The sequence moves from professional foundations to engagement work and then to management of the internal audit function.
What should an experienced internal auditor take first?
An experienced engagement auditor can begin with Part 2 when planning, evidence and findings are current strengths. An audit manager or function leader can consider Part 3. Part 1 remains the strongest starting point when there is any doubt about formal IIA principles.
Is CIA Part 1 the easiest part?
Part 1 is the best default starting point, but it is not automatically the easiest. It tests precise understanding of ethics, governance, risk, control, fraud and the responsibilities of internal audit.
Does CIA Part 2 build on Part 1?
The syllabi are separate, but Part 2 is easier to interpret when you understand the professional principles, authority and governance relationships covered in Part 1. That is one reason numerical order works well for most candidates.
Does CIA Part 3 still focus heavily on IT and accounting?
No. Current English-language exams use the 2025 syllabus. Part 3 now focuses on the Internal Audit Function: operations, the audit plan, quality, engagement results and monitoring. Older material may describe the previous syllabus.
What order should an active IAP holder use?
An active Internal Audit Practitioner can receive a waiver for CIA Part 1. The remaining choice is Part 2 or Part 3 first. Engagement practitioners should normally favour Part 2, while function leaders can reasonably begin with Part 3.
Does the CIA Challenge Exam have three parts?
No. Eligible Challenge Exam candidates take a separate one-part examination. It is not the same as selecting one part from the traditional CIA programme. Review the CIA Challenge Exam pathway separately.
Should I wait for my result before studying the next part?
No. Begin a light introduction to the next planned part after the exam. Current official results can take up to three weeks. Delay a firm booking decision until you receive the result and understand whether your sequence still makes sense.
Instructor-led CIA preparation
Build the Right CIA Exam Sequence with EduDelphi
Prepare for all three CIA parts through live teaching, recordings, question debriefs, mock exams, structured revision and direct faculty support.
Country course options
Find CIA Training in Your Country
Official CIA requirements are global. Schedules, fees and learner support vary by market.
View CIA course locations
Written and reviewed by CIA practitioners
About the Authors
Tanvi P.
CIA, CFE, CISA, CAMS
Tanvi brings 20+ years of international experience across audit, investigations, risk, controls and regulatory compliance. Her CIA teaching focuses on judgement, evidence and the reasoning behind close answer choices.
Shyam Sarrof
CPA (USA), CMA (USA), ACA, ACMA, CS, CFA, ACTM, MBA, B.Com (H)
Shyam has 13+ years of CIA training experience and 22+ years across internal audit, risk, controls and advisory. He reviewed this guide for current syllabus alignment, audit terminology and practical sequence recommendations.
Primary references
