Content and Format
The Certified Internal Auditor® (CIA®) exam tests a candidate's knowledge of current internal auditing practices and understanding of internal audit issues, risks and remedies.
The CIA® exam is offered in four parts, each part consisting of 100 multiple-choice questions. Candidates are given 2 hours and 45 minutes to complete each exam part.
The CIA® exam is now available through computer-based testing (CBT), allowing you to test year-round at more than 500 locations worldwide. Through the The IIA's new online Certification Candidate Management System (CCMS), candidates may apply/register for certification programs/exams and access their records online.
Parts I, II, and III are considered the core global syllabus of the CIA® exam - offering a strong focus on corporate governance and risk issues and exhibiting alignment with The IIA's Professional Practices Framework. Part IV of the CIA® exam is designed for modification for regional and audit specialization testing. Hence, The IIA offers Professional Recognition Credit for Part IV (PRC-IV) for qualified professional certifications.
Covering materials and concentration
Part I – The Internal Audit Activity’s Role in Governance, Risk and Control
• Comply with the IIA's Attribute Standards (15-25%)
• Establish a Risk-based Plan to Determine the Priorities of the Internal Audit Activity (15-25%)
• Understand the Internal Audit Activity's Role in Organizational Governance (10-20%)
• Perform Other Internal Audit Roles and Responsibilities (10-20%)
• Governance, Risk, and Control Knowledge Elements (15-25%)
• Plan Engagements (15-25%)
Part II – Conducting the Internal Audit Engagement
• Conduct Engagements (25-35%)
• Conduct Specific Engagements (25-35%)
• Monitor Engagement Outcomes (5-15%)
• Fraud Knowledge Elements (5-15%)
• Engagement Tools (15-25%)
Part III – Business Analysis and Information Technology
• Business Processes (15-25%)
• Financial Accounting and Finance (15-25%)
• Managerial Accounting (10-20%)
• Regulatory, Legal, and Economics (5-15%)
• Information Technology ( 30-40%)
Part IV – Business Management Skills
• Strategic Management (20-30%)
• Global Business Environments (15-25%)
• Organizational Behavior (20-30%)
• Management Skills (20-30%)
• Negotiating (5-15%)
For detailed topic outlines, visit www.theiia.org/certification. Exam topics and/or format are subject to change as approved by the Board of Regents.
Testing Skills
the four part exam is designed to:
• Test the candidates’ nearly all management skills
• Focus on the principles of management control
• Measure the candidates’ understanding of risk management and internal controls
• Test their ability to clearly and concisely communicate conclusions
• Measure technical competence and academic preparation of the candidates
• Test candidates’ judgment and logic
Grading Scale and Results
• All raw scores are converted onto a reporting scale of 250 to 750 points. A scaled score of 600 points or higher is required to pass the CIA® exam (equivalent to 75%)
• Your score is based on the number of scored questions that you answer correctly. Each scored question contributes equally to your final test score (some non-scored questions are included on each exam for the purpose of determining the difficulty of these items only; they do not contribute to your exam scores). There is no penalty for incorrect responses, so it is to your advantage to attempt to respond to every question in the exam.
• Upon exiting the testing room, you will receive a printout of your unofficial exam results
• Official scores will be published by the IIA within few days on the IIA Certification Candidate Management System
• If you fail any one of the CIA® exam parts, you must wait at least 90 days before you will be able to retake that exam part
• Keep in mind that when you register for an exam, you must sit for it within 180 days
• There is no limit to the number of times a candidate can retake a failed exam
Non-disclosed Exam
Candidates in the CIA® program agree to keep the contents of the CIA® exam confidential and therefore may not discuss the specific exam content with anyone except The IIA's Certification Department. Unauthorized disclosure of exam material will be considered a breach of the Code of Ethics and could result in disqualification of the candidate or other appropriate censure.