CIA
The CIA is the only globally recognized certification for internal auditors, administered by The Institute of Internal Auditors (IIA). Earning it means passing three separate exam parts — each with its own 600-point bar — and many employers tie audit-manager roles, promotions, and salary bands directly to those three letters. Miss a part and you re-book, re-pay, and reset your timeline, so getting each sitting right the first time matters. This page breaks down exactly what each part tests, how it's delivered, and how to get it done.
Pay Only After You Pass
No upfront fee — you settle only after your verified passing result. We advertise guaranteed results — 100% pass guaranteed or money back.
How the three-part CIA exam is built — at a glance
125
Essentials of Internal Auditing: 125 multiple-choice questions in 2.5 hours. Covers the foundations, ethics, governance, risk, control, and fraud risk that anchor the whole credential.
100
Practice of Internal Auditing: 100 multiple-choice questions in 2 hours. The applied part — managing the audit function, planning and performing engagements, and reporting results.
100
Business Knowledge for Internal Auditing: 100 multiple-choice questions in 2 hours. The broadest part — strategy, business processes, and information technology.
Each part is booked, sat, and scored separately — you do not take all three on one day. You can attempt them in any order, though most candidates start with Part 1. After you enter the program you generally have a multi-year window to complete all three parts and meet the experience requirement.
Every part is reported on a scaled range of 250 to 750, and you must reach 600 to pass each one. The 600 is a converted scaled score, not a raw percentage, so the exact number of correct answers needed shifts with the difficulty of your question set. There is no overall average — fail one part and you re-sit only that part.
Domains within each part — bars show each domain's share of that part's questions
The largest domain — governance principles, risk frameworks, and control concepts including the three-lines model and control self-assessment.
The knowledge, skills, and competencies auditors need, applying due professional care and exercising professional skepticism.
Mission, mandatory guidance, the IPPF, and the purpose, authority, and responsibility that anchor the internal audit function.
Organizational independence, individual objectivity, and identifying and managing impairments and conflicts of interest.
Fraud risk awareness, red flags, and the internal auditor's role in detecting and responding to fraud.
Building and maintaining a quality assurance and improvement program, including internal and external assessments.
The heart of fieldwork — gathering and analyzing evidence, sampling, working papers, and documenting findings.
Risk-based audit planning, resourcing, coordination with assurance providers, and quality assurance programs.
Scoping the engagement, setting objectives and criteria, assessing risk, and allocating resources before fieldwork begins.
Communicating results, reporting to the board and management, and following up on remediation of issues.
Organizational objectives, structures, and business processes, plus data analytics and the broader operating environment.
Cybersecurity, physical and data security, common threats, and the controls auditors evaluate to protect information.
IT infrastructure and frameworks, application and general controls, disaster recovery, and business continuity.
Financial accounting and finance, managerial accounting, and the financial concepts auditors rely on.
Part 3 has the broadest range, which is why many candidates find its IT and finance content the hardest if they come from a pure audit background. Domain weights are set by The IIA and are being refreshed for the 2025 syllabus that phases in over 2026 — always confirm the current breakdown against the official CIA syllabus before your sitting.
Where you sit each part — and what to expect on test day
Every part is now sat in person in a quiet, monitored room at one of Pearson VUE's ~900 test centers worldwide. Staff verify your government-issued ID, store your belongings, and watch the room throughout. You're provided an erasable noteboard, and your result is typically shown on screen at the end and confirmed in your IIA Certification Candidate Management System (CCMS) account.
The IIA retired remote online (OnVUE) proctoring for CIA exams on 28 May 2025, so there is no longer a from-home option — all three parts must be taken at a physical Pearson VUE test center. Book the earliest convenient center slot, since seats can fill in peak windows. (Older guides still mention online testing; that route has closed.)
Bring a valid, unexpired government photo ID with your name matching your IIA registration exactly. Center staff verify it and take your photo and signature at check-in.
Phones, notes, bags, and personal items go into a locker. You're seated at an assigned workstation and given an erasable noteboard for working out answers.
The room is monitored by staff and cameras throughout. The clock keeps running; you must sign out and back in for any break, and leaving the center or accessing prohibited items ends the session.
The CIA is the benchmark credential for the audit profession
Real eligibility rules — and a genuinely demanding exam
Difficulty: Published global pass rates have run in the mid-40s to mid-50s percent per part, with Part 1 historically the toughest. The challenge is volume and judgment — heavy standards-based material plus scenario questions that reward reasoning over recall. Most candidates spend dozens of focused hours on each part, exactly the pressure point our help is designed to ease.
Three separate parts, three separate 600-point bars, and a fee for every retake — the CIA is built to wear candidates down. Exam Assist pairs you with a vetted internal-audit specialist and works on a pay-after-you-pass model, so the risk sits with us, not you. No upfront fee, guaranteed results: Exam Assist handles the sitting end to end, and you settle only after the verified result.
Tell us which part or parts you need, your Pearson VUE test center, and your test window. Takes a couple of minutes over WhatsApp, Telegram, or Discord.
We review your timeline and the parts involved and tell you plainly whether it's realistic — before any money is discussed. If it isn't a fit, we say so.
Exam Assist handles the sitting end to end. You're matched with a CIA specialist who maps the work around each part's domains, the scaled 600 pass mark, and the Pearson VUE environment — discreetly and confidentially.
You only pay once your passing result is confirmed in your IIA account. No verified result, nothing owed.
Tell us which parts you need and get a straight, no-obligation feasibility answer.
Straight answers about the CIA exam
Get help and compare sibling finance & accounting certifications
Pair with a vetted internal-audit specialist on a results-first arrangement. No upfront fee — settle only after a verified passing result.
Book a free check CFEThe ACFE's anti-fraud credential — a natural complement to the CIA for auditors focused on fraud detection and investigation.
View exam CMAThe IMA's two-part credential in management accounting and financial management — popular with finance-track auditors.
View exam CFA L1The CFA Institute's entry exam into investment analysis — the deepest finance credential among these siblings.
View examGet expert CIA help with no upfront fee — you settle only after your verified passing result. Honest feasibility answer first, results-first arrangement always.