Accounting & Tax • Exam
Certified Internal Auditor Part 1: Essentials of Internal Auditing
CIA Part 1: the essentials of internal auditing every candidate must pass first.
Researched and maintained by TestPrepPilot Editorial BoardAccounting & internal audit certifications desk · Figures last verified August 2026
The short version
What is the Certified Internal Auditor Part 1: Essentials of Internal Auditing and is it worth it?
CIA Part 1 is a 125-question, 2.5-hour multiple-choice exam on the essentials of internal auditing, scored on the IIA scale with a published pass mark. It is the first of three CIA parts and costs a member/non-member exam fee on top of the IIA application fee.
- Foundational CIA paper every candidate takes
- Covers mandate, governance and risk basics
- Computer-based, available year-round
- Counts first toward the global CIA
- Strong base for Parts 2 and 3
What is it?
What exactly is the Certified Internal Auditor Part 1: Essentials of Internal Auditing?
CIA Part 1: the essentials of internal auditing every candidate must pass first.
CIA Part 1, Essentials of Internal Auditing, is the first of three Certified Internal Auditor exams and covers the mandate and function of internal audit, independence and objectivity, proficiency and due care, governance, risk management and control, and fraud risks. It is the foundational paper that every CIA candidate sits and carries the heaviest weight in the overall certification. Passing Part 1 demonstrates command of the principles that frame all internal audit work.
The path in brief
- Apply to the IIA
- Pay application and part fee
- Schedule Part 1
- Pass the 125-Q exam
- Continue to Parts 2 and 3
Before you book
Who is eligible to sit the Certified Internal Auditor Part 1: Essentials of Internal Auditing?
Who it is for: Aspiring internal auditors
The test itself
What is the format of the Certified Internal Auditor Part 1: Essentials of Internal Auditing?
The Certified Internal Auditor Part 1: Essentials of Internal Auditing is administered by Pearson VUE test centers and online and runs 2.5 hours and contains 125 multiple-choice questions.
| Administered by | Pearson VUE test centers and online |
|---|---|
| Questions | 125 multiple-choice |
| Time limit | 2.5 hours |
| Pass mark | IIA published pass mark (scaled) |
| Exam fee | Member and non-member exam fee (plus application fee) |
| Format | Multiple-choice, computer-based |
Content outline
What topics are on the Certified Internal Auditor Part 1: Essentials of Internal Auditing?
The Certified Internal Auditor Part 1: Essentials of Internal Auditing covers 5 content domains.
Weightings come from the official exam outline. Study time is best allocated in roughly these proportions rather than evenly across domains.
- Foundations of Internal Auditing (mandate and function)
- Independence and Objectivity
- Proficiency and Due Professional Care
- Governance, Risk Management and Control
- Fraud Risks
Money & time
How much does the Certified Internal Auditor Part 1: Essentials of Internal Auditing cost?
For the Certified Internal Auditor Part 1: Essentials of Internal Auditing, the exam fee is Member and non-member exam fee (plus application fee); the all-in cost is typically $430 to $685 (Part 1); most candidates spend 6 to 10 weeks prep preparing.
Cost breakdown
| IIA application fee | $120 (member) / $240 (non) |
|---|---|
| Part 1 exam fee | $310 (member) / $445 (non) |
| Typical total | $430 to $685 for Part 1 |
Member rates apply to IIA members; non-member rates are higher.
Timeline
- Study 6 to 10 weeks
- Test 2.5 hours
- Result at center
Typical prep: 6 to 10 weeks prep
The path
How do you register for the Certified Internal Auditor Part 1: Essentials of Internal Auditing?
- 1
Create an IIA account and applyweeks
Apply through theiia.org, submitting education and character references; approval opens a three-year window to pass all CIA parts.
- 2
Pay the application and exam fees5 minutes
Fees differ for IIA members and non-members and are paid per part; a one-time application fee applies.
- 3
Schedule each part15 minutes
Book Part 1, 2 and 3 with Pearson VUE at a center or online, in any order you choose.
- 4
Sit and pass the partsper part
Parts are computer-based multiple-choice exams of 100 to 125 questions. Scores post immediately at the center.
The fine print
What are the retake and renewal rules for the Certified Internal Auditor Part 1: Essentials of Internal Auditing?
- Proctoring & delivery
- CIA and CGAP exams are delivered by Pearson VUE at test centers and through online proctoring. A valid photo ID is required and personal items are stored.
- Retake policy
- A failed part may be retaken after a short wait for a new exam fee. Candidates must complete all parts within three years of application approval.
- Score reporting
- Each part is scored on a scale with a published pass mark; results appear on screen at the test center immediately after the exam.
- Recertification
- CIAs maintain certification with 40 hours of continuing professional education each year and an annual renewal fee; lapsed certification can be reinstated within limits.
Context
IIA certifications compared
| Credential | Audience | Parts | |
|---|---|---|---|
| CIA | All internal auditors | 3 parts | |
| CGAP | Government internal auditors | Retired 2021 |
What it pays
How much does this credential pay?
$81,680 median for accountants and auditors (BLS, May 2024)
Passing CIA Part 1 does not by itself move a salary line: it is the first of three parts a candidate must clear for the Certified Internal Auditor designation, and that designation is what gates advancement into professional internal audit roles. The relevant wage benchmark is therefore the Bureau of Labor Statistics occupation Accountants and Auditors (SOC 13-2011), which paid a May 2024 median annual wage of $81,680. The distribution matters more than the headline: the lowest 10 percent earned less than $52,780 and the highest 10 percent more than $141,420, and the median within finance and insurance industries was $87,980, which is where many internal audit shops sit. The occupation employed 1,579,800 people in 2024, and BLS projects 5 percent growth from 2024 to 2034 with about 124,200 openings a year, most of them replacement need. For a CIA candidate the honest reading is that Part 1 is a toll gate on an already-solid accounting career rather than a pay lever on its own: BLS positions internal auditing as one pathway within the accounting occupation, but it does not single out CIAs, and no certification-specific wage is published in the OOH. The IIA and ACFE conduct their own member surveys that report certification premiums, and those are the right source for a credential premium, but we have not quoted a figure from them here because the survey populations and methodologies differ from BLS and the numbers are not directly comparable. The practical planning implication is that the credential pays through promotion into specialist audit, risk and compliance roles over time, and that pay follows the three-part completion rather than any single part, so candidates should budget Part 1 as the entry cost of a larger career step.
| Measure | Figure | Source / note |
|---|---|---|
| Median annual wage, accountants and auditors | $81,680 | BLS Occupational Outlook Handbook, May 2024 |
| Lowest 10 percent | less than $52,780 | BLS OOH Pay tab, May 2024 |
| Highest 10 percent | more than $141,420 | BLS OOH Pay tab, May 2024 |
| Median in finance and insurance | $87,980 | BLS OOH Pay tab, May 2024 — top industry for this occupation |
| Employment, 2024 | 1,579,800 jobs | BLS OOH Quick Facts, 2024 |
| Projected annual openings | ~124,200 per year | BLS OOH Job Outlook, 2024-34 — mostly replacement need |
Job growth.5% projected growth 2024-34 (faster than average), with ~124,200 openings a year; the CIA pays through promotion into specialist audit, risk and compliance roles rather than as a standalone salary bump.
Source: BLS Occupational Outlook Handbook — Accountants and Auditors
Your odds
What are the pass rates?
IIA-reported global pass rate for Part 1 is roughly 44% — the lowest of the three CIA parts — with a scaled 600 of 750 as the pass line
The IIA reports a global pass rate for CIA Part 1 of roughly 44 percent in recent published figures, which makes it the lowest of the three exam parts, and the pass line is a scaled score of 600 on a 250-750 scale. The number needs careful framing: it is a reported global pass rate across all languages and administrations, it is updated periodically rather than annually for every market, and it measures all candidates rather than only well-prepared ones, so a candidate who follows a structured syllabus should expect to do materially better than the headline. The second part of the picture is the scoring model. Part 1 is 125 multiple-choice questions in 150 minutes, and your raw count of correct answers is converted to the 250-750 scale through a standard-setting process, which means 600 is not a percentage of items correct and cannot be reverse-engineered into one; the number of correct items required varies by the difficulty of the form you draw. The exam is non-disclosed, so no live items are published and prep products work from IIA-published sample questions and retired practice items. Two operational rules matter for planning. A registration for an exam part is valid for 180 days, and if you fail you must wait 30 days before retaking, with no limit on the number of attempts. Since the April 2026 policy change, candidates receive one official result within roughly three weeks of sitting, and the old instant on-screen score report no longer appears. Read the 44 percent as the reason to prepare seriously rather than as a forecast of your own odds, and treat the scaled 600 as the only number that actually decides a pass.
Read this before quoting the number.The ~44% figure is the IIA-reported global pass rate for Part 1, which is updated periodically and can shift; we have not found a single audited national pass-rate series. What is fixed and verifiable is the 600/750 scaled pass line, the 125-question/150-minute format and the 30-day retake wait. Confirm the current reported rate on theiia.org before relying on it.
Source: The IIA — Certified Internal Auditor certification pages
Your schedule
How long should I study for it?
90-110 hours over 10-12 weeks of focused study
A realistic CIA Part 1 preparation cycle is ten to twelve weeks at eight to ten hours a week, roughly 90-110 total hours, and the single most important fact to establish before buying anything is which syllabus you are preparing for. The IIA released a revised CIA syllabus on 28 May 2025, renamed Part 1 from Essentials of Internal Auditing to Internal Audit Fundamentals, and re-mapped the content onto the Global Internal Audit Standards (GIAS), which replaced the legacy International Professional Practices Framework (IPPF) on 9 January 2025. Any study book printed before that change is built on the old six-topic structure and the old Standards, and a candidate who studies from it will be tested against the wrong framework. The current Part 1 blueprint has four domains: Foundations of Internal Auditing at 35 percent, Governance, Risk Management, and Control at 30 percent, Ethics and Professionalism at 20 percent, and Fraud Risks at 15 percent. Notice that governance, risk and control plus foundations together are nearly two-thirds of the paper, and that fraud risk is a named domain rather than a topic buried inside another. The schedule below assumes you have some exposure to audit or accounting concepts, which the IIA’s eligibility requirements largely assume, and it front-loads the two heavy domains before touching ethics and fraud. Because the exam is non-disclosed, your practice loop is the IIA’s own sample and practice questions plus a current-syllabus course, and the final weeks should be timed 125-question sets at the real 150-minute pace, because stamina and pacing are where Part 1 candidates lose most points.
- Week 18-10 hrs
Syllabus check and the GIAS baseline
- Download the official 2025 CIA Part 1 syllabus and confirm your prep materials are GIAS-based, not IPPF-based
- Read the Global Internal Audit Standards structure: five domains, fifteen principles, fifty-two standards, plus the Implementation Guidance
- Take the IIA sample questions once, untimed, to see the item style
- Confirm your application is approved in the CCMS and your registration window is open
- Weeks 2-410-12 hrs/week
Domain 1 — Foundations of Internal Auditing (35%)
- Internal audit mandate, purpose, authority and responsibility, and the difference between assurance and advisory services
- The IIA Mission, core principles of the professional practice of internal auditing, and the Code of Ethics
- The structure of the Standards and when mandatory guidance versus recommended guidance applies
- Quality assurance and improvement programme: internal and external assessments, their frequency and who may conduct them
- Weeks 5-710-12 hrs/week
Domain 3 — Governance, Risk Management, and Control (30%)
- Governance frameworks, the three lines model, and the relationship between the board, senior management and internal audit
- Risk management: risk appetite, risk assessment processes, and COSO ERM concepts
- Internal control: the COSO internal control framework, control types, and evaluating control design and operation
- Build answer banks for the scenario questions — this domain is where most scenario items are drawn from
- Week 89-11 hrs
Domain 2 — Ethics and Professionalism (20%)
- The Code of Ethics: the four principles and the rules of conduct, plus how violations are reported and resolved
- Independence and objectivity: impairments, safeguards, and prohibited conditions such as operating a control
- Due professional care, competence and continuing professional development
- Work through every ethics scenario in your question bank twice — the distractors are subtle
- Week 99-11 hrs
Domain 4 — Fraud Risks (15%)
- Fraud triangle and fraud schemes: asset misappropriation, corruption and financial statement fraud
- Red flags and fraud risk assessment, and the internal auditor’s role versus management’s role in fraud
- The relationship between the fraud risk domain and the Standards on consulting services
- Drill the smaller, higher-density domain so it does not leak points on exam day
- Week 1010-12 hrs
Timed sets and gap closing
- Two timed 125-question sets at 150 minutes each, under exam conditions with no notes
- Re-lab every miss to a domain and an error type — recall failure, scenario misread, or rule confusion
- Re-drill the two heaviest domains from your miss list
- Confirm the retake policy and the 180-day registration window you are working inside
- Week 1110-12 hrs
Scenario rehearsal
- Do nothing but scenario-based items: independence conflicts, control evaluation, assurance versus consulting
- Write one-line rationales for every answer you get wrong
- Re-read the Code of Ethics rules of conduct one final time — ethics items are cheap points
- One full timed set as a final readiness check
- Week 126-8 hrs
Taper and logistics
- Light review of your answer bank and the GIAS domain structure
- Confirm your Pearson VUE appointment, the test centre location and your photo ID
- Check your name in the CCMS matches your ID exactly
- One quiet day before the exam
Adjusting the pace
Working auditor or accountant with COSO exposure.Seven to eight weeks at 8-10 hrs/week. Your work covers much of the governance, risk and control domain; spend the recovered time on the GIAS structure, the Code of Ethics rules and the fraud domain, which are the areas working accountants know least well.
Career changer from a non-audit role.Fourteen to sixteen weeks at 8-10 hrs/week. Add three weeks before Week 1 on the basic vocabulary of internal control, risk and audit engagements; the blueprint assumes familiarity that you will otherwise chase through the whole schedule.
IAP holder already waiving Part 1.If you hold the Internal Audit Practitioner designation, you receive a waiver for Part 1 and sit Part 2 and Part 3 directly — do not spend money on Part 1 prep, but do review the GIAS foundations because Parts 2 and 3 assume them.
How to study
How do I prepare most effectively?
The dominant prep decision for CIA Part 1 is not which study course but which syllabus the course covers, because the May 2025 revision replaced the IPPF with the Global Internal Audit Standards and restructured the exam, and a large stock of pre-2025 materials is still on sale — a candidate who starts with the wrong framework is effectively preparing for a different exam. After that, the highest-yield tactics are to learn the GIAS structure rather than isolated facts, to treat ethics and fraud as drillable domains rather than afterthoughts, and to rehearse the 125-question, 150-minute format under a clock, because the exam is non-disclosed and timed practice is the only realistic rehearsal of the pacing. The weighting should drive the plan: Foundations of Internal Auditing at 35 percent and Governance, Risk Management, and Control at 30 percent together are nearly two-thirds of the paper, so a candidate who gives those two domains roughly 60 percent of total hours and drills Ethics and Professionalism and Fraud Risks to near-perfection is allocating time exactly where the points are. Scenario items dominate the heavy domains, which is why answer-bank building — writing down why an answer is correct and why each distractor is wrong — outperforms passive re-reading. The same judgement practice is what separates a mid-500s score from a passing 600, because the scaled line is a standard, not a curve, and it does not move to accommodate a weak cohort. The strategies below are ordered by score impact, and the first two are the difference between a passing plan and an expensive guess.
Confirm your materials are GIAS-based before Week 1
The 2025 CIA syllabus re-mapped Part 1 onto the Global Internal Audit Standards, which replaced the IPPF on 9 January 2025. Books and question banks built on the old framework still rank highly in search results and still use the old six-topic structure and old Standards language. Check the publication date and the syllabus reference before buying, and if a course does not explicitly say 2025 CIA syllabus, treat it as a partial reference rather than your primary source.
Learn the Standards architecture, not scattered standards
The GIAS is organized into five domains and fifteen principles, with the standards grouped under them, and Part 1 scenario questions are much easier when you can place a rule in its structural home. Build a one-page map of the framework and drill against it, because the exam rewards knowing how the pieces relate — mandate, independence, proficiency, due professional care, quality — more than recalling any single clause.
Drill the Code of Ethics and independence rules separately
Ethics and Professionalism is a full 20 percent of the paper and it is the most distinctly memorizable content on the exam: four principles, the rules of conduct under each, and the reporting of violations. Independence and objectivity items are scenario-heavy and the distractors are subtle — operating controls, accepting gifts, auditing an area you previously managed. Work every ethics and independence scenario in your bank at least twice.
Treat governance, risk and control as the deep-water domain
At 30 percent plus a 35 percent foundations domain, governance, risk and control is where the paper is won. Study COSO internal control and COSO ERM concepts, the three lines model, risk appetite and risk assessment, and the auditor’s role in evaluating controls. This is also the domain where scenario questions concentrate, so answer bank building here pays the most.
Do not let the 15 percent fraud domain leak points
Fraud Risks is smaller than the other domains but the material is self-contained: the fraud triangle, the main fraud schemes, red flags and the boundary between the auditor’s role and management’s role. A focused week of drilling it is cheap points that a candidate who studies only foundations and control will drop.
Rehearse the full 150-minute format under a clock
125 questions in 150 minutes is roughly 72 seconds an item, and the exam is non-disclosed, so your only realistic rehearsal is timed sets of IIA practice questions. Run at least three full-length timed sets in the final three weeks, answer every question even when unsure — there is no penalty for a wrong answer — and review misses by domain and by error type, not just by total score.
What to buy
Which study resources are worth paying for?
CIA Part 1 prep resources split into the IIA’s own materials, which are the only source of retired real items, and the commercial review courses, which add structure and question volume. The buying logic is different from many exams: because the exam is non-disclosed, no third party has real item content, and because the syllabus changed in 2025, the first check on any purchase is the publication date and the GIAS alignment. The official IIA practice questions are built from retired exam items and are the closest thing to the real test, while the big commercial courses bundle videos, adaptive practice and the official practice questions into a single subscription that costs roughly as much as the exam fee itself. Candidates who already work in audit often need only the official questions plus a current syllabus guide, while career changers benefit from the structured course, and the difference between those two profiles is the difference between spending $50 and spending $700. The exam fees themselves are the other budget line: the Part 1 exam is $310 for IIA members and $445 for non-members, with a $120 or $240 application fee depending on membership, and IIA membership itself carries an annual fee, so a non-member who fails and retakes is paying full price each time. Note that the IIA has partnered with Becker on an official review product, and that Gleim, Surgent and others maintain GIAS-aligned courses; we do not rank by commission and we recommend confirming syllabus alignment on the product page rather than trusting the box. The table below lists list prices as of 2026-08 in USD before tax and promotions, and they move frequently with sales and regional pricing.
| Resource | Price | Format | Best for |
|---|---|---|---|
| IIA exam registration (Part 1) + application | $310 member / $445 non-member, plus $120/$240 application | Pearson VUE, test centre only (online testing ended 2025) | Required — budget the full three-part path, not just Part 1 |
| IIA CIA Practice Questions | Included with membership or small add-on (check the IIA store) | Online retired items with rationales | The only real-item source; anchor every plan on it |
| Becker — The IIA CIA Exam Review | ~$700-900 for the full three-part bundle | Videos, adaptive practice, simulated exams, digital text | Candidates who want a single vendor-aligned program |
| Gleim CIA Review (2025 syllabus edition) | ~$400-600 per part or bundle | Study units plus thousands of practice questions | Self-paced, question-heavy preparation |
| Surgent CIA Review | ~$400-500 per part | Video and question bank with a pass guarantee | Working candidates who need condensed video coverage |
| IIA 2025 CIA Exam Syllabus and sample questions | Free | Official PDF blueprint plus sample items | The scope map — download before buying anything else |
| Your own answer bank from practice sets | Free | Personal notes keyed to the four domains | Targeted gap closing in the final weeks |
Prices checked 2026-08 in USD before tax and vary by region, promotion and whether you buy parts separately or as a bundle; IIA membership is required or discounted for every line above. We do not rank by commission.
Avoid these
What mistakes do candidates most often make?
The CIA Part 1 failure modes cluster around two roots: preparing against the wrong syllabus, which is a 2025-specific trap with a large stock of outdated materials still on sale, and studying content without rehearsing the exam mechanics of a non-disclosed, 125-question, 150-minute paper. A third root is structural — candidates underestimate how scenario-heavy the two large domains are and treat them as recall content, when governance, risk and control plus foundations together carry nearly two-thirds of the paper and reward judgment practice over memorisation. The 44 percent reported global pass rate reads intimidating until you notice what it measures: all candidates, including the entirely unprepared, under a criterion-referenced standard set so that the same underlying ability passes every form. The six traps below are the recurring ones in candidate post-mortems, and every one of them is fixable within a single ten-to-twelve-week cycle. Notice that most of them are process errors rather than knowledge gaps — buying the wrong edition, skipping timed sets, ignoring the retake clock, leaning on the headline rate — which is the encouraging part of the analysis, because process errors are corrected by changing behaviour rather than by studying more content. A candidate who confirms the syllabus, weights hours by domain, drills ethics and fraud to near-perfection, runs at least three timed 125-question sets, and respects the 30-day retake wait has removed the five most common failure causes before sitting, and the sixth — relying on the pass rate instead of a plan — disappears the moment the first timed set produces a score to work from.
✕Studying a pre-2025, IPPF-based course for the current exam
✓The May 2025 revision replaced the IPPF with the Global Internal Audit Standards and restructured Part 1 from six topics into four domains. Old books still rank in search results. Check the publication date and the syllabus reference on everything you buy, and prefer materials that explicitly name the 2025 CIA syllabus and the GIAS.
✕Treating ethics and fraud as minor topics
✓Ethics and Professionalism is 20 percent and Fraud Risks is 15 percent of the paper — a third of the exam between them, and both are self-contained enough to drill to near-perfection. Candidates who study only foundations and control leave 35 percent of the exam poorly prepared and then fail near the 600 line.
✕Memorizing standards without learning the architecture
✓The exam rewards knowing how the GIAS hangs together — domains, principles and the standards grouped under them — because scenario questions test relationships such as when a safeguard restores objectivity. A one-page framework map beats flashcards of isolated clauses.
✕Never running a timed 125-question set
✓125 items in 150 minutes is roughly 72 seconds a question, and the exam is non-disclosed, so pacing is only rehearsed with timed practice sets. Candidates who never run the full sitting over-think early items, run out of clock on the final domain, and fail despite knowing the material.
✕Ignoring the 30-day retake wait and the 180-day registration window
✓A failed part cannot be re-sat for 30 days, and each exam registration is only valid for 180 days before it expires at full cost. A candidate who fails in the middle of a tight three-year program window can lose both the attempt fee and calendar time. Treat the first sitting seriously and schedule with the window in mind.
✕Basing the decision to sit on the headline pass rate
✓The roughly 44 percent reported global pass rate measures all candidates, including the unprepared. Candidates who work a structured GIAS-based course and run timed sets beat it by a wide margin, while candidates who read the rate as "too low" or "too high" and skip planning on that basis are exactly the ones the number describes.
What you'll face
What question types will I see?
CIA Part 1 is 125 multiple-choice questions in 150 minutes, computer-delivered at Pearson VUE test centres, scored on a 250-750 scaled scale with a 600 pass line. The current syllabus has four domains — Foundations of Internal Auditing (35%), Governance, Risk Management, and Control (30%), Ethics and Professionalism (20%) and Fraud Risks (15%) — and the exam is non-disclosed, so no live items are published. Items are overwhelmingly single-answer multiple choice with four options, mixing direct recall of Standards requirements with scenario questions that present a situation and ask for the correct judgment, and with the IIA’s own practice questions being the closest thing to real item style. Because the scaled score is standard-set rather than a percentage, the number of correct answers needed varies by form difficulty, and there is no penalty for guessing, so every question should be answered even when uncertain. The four option choices in scenario items are typically plausible-sounding rules misapplied — the most common wrong answers swap independence, objectivity, due professional care and confidentiality against each other — which is why candidates who learn the distinctions between those concepts score far higher than candidates who memorize isolated facts. Pacing matters as much as knowledge: 125 items in 150 minutes is roughly 72 seconds per question, so the discipline is to answer confidently, flag genuine uncertainties, and reserve the final minutes for flagged scenario items rather than re-reading everything. That pacing habit is trainable, and it is the difference between finishing the paper and leaving the last domain half-answered. The samples below are editor-written illustrations of that style, not live items.
Four options testing Standards requirements, the Code of Ethics rules of conduct, and definitions of risk and control concepts. Distractors are usually real rules applied to the wrong situation.
A described situation — a gift, a prior role, a control weakness, an assurance-versus-consulting choice — with a question asking for the auditor’s correct action or the governing standard.
Direct questions about the GIAS domains, principles, mandatory versus recommended guidance, and the frequency and conduct of quality assessments.
Try these
Q1An internal auditor is assigned to audit a procurement process that the auditor personally designed and operated until six months ago. Which action best maintains objectivity under the Standards?
Answer:C
Objectivity requires that auditors avoid engagements where they have a real or perceived impairment, and having personally designed and operated a process within the previous year is a direct impairment. The correct response is to decline or reassign the work (C). Disclosing but proceeding anyway (B) converts an impairment into a disclosed one but does not remove it, and restricting the report (A) misrepresents the work performed. Proceeding without disclosure (D) violates both the Standards and the Code of Ethics. The item is designed to test the distinction between transparency and actual removal from the conflict.
Q2Under the Global Internal Audit Standards, which of the following is a mandatory component of the internal audit charter?
Answer:A
The charter is the formal document defining the internal audit activity’s purpose, authority and responsibility, including access to records and personnel, and it is a mandatory element under the Standards (A). Performance appraisal methods (B), training budgets (C) and external provider names (D) are operational matters that may be documented elsewhere but are not required charter content. The item tests the mandatory-versus-recommended distinction that runs through the foundations domain.
Q3Which combination of conditions is most consistent with an increased risk of fraudulent financial reporting?
Answer:A
The fraud triangle names pressure, opportunity and rationalization as the conditions that converge to produce fraud, and fraudulent financial reporting typically combines management pressure to meet targets, control weaknesses that create the opportunity, and a rationalization that justifies the act (A). Strong tone at the top, segregation of duties and a hotline (B) are controls that reduce risk. High internal audit turnover (C) is a process concern but does not by itself signal reporting fraud, and strong reconciliation plus board oversight (D) is a protective environment. The item ties the fraud-risk domain to the governance and control concepts tested elsewhere on the paper.
Samples are editor-written illustrations of the published blueprint, not live exam items.
The big day
What should I expect on exam day?
CIA Part 1 is a 125-question, 150-minute computer-based exam delivered at a Pearson VUE test centre — online at-home testing was discontinued by the IIA from 28 May 2025, so plan for a physical centre. The pass line is a scaled 600 on the 250-750 scale, and the exam is non-disclosed, so nothing about the content may be discussed afterwards. The single most common way a prepared candidate loses the seat is identity paperwork: you need one valid, government-issued photo ID, and the name on it must match your name in the IIA’s Certification Candidate Management System (CCMS) exactly, because a mismatch cannot be repaired at the check-in desk. Arrive with enough time for check-in, which includes identity verification and a digital signature; personal items such as phones, smartwatches and notes go into a locker, and test centres provide their own erasable noteboard and pen. Inside the exam, the 150-minute clock runs continuously, there are no scheduled breaks in the appointment, and you may flag questions and return to them within the section, so the pacing plan is to answer every item — there is no penalty for guessing — and to spend any saved time on flagged scenario items rather than re-reading everything. Because results now arrive within about three weeks rather than on screen, budget that delay before your retake window calculations. On finishing, the system confirms your submission, and the official result follows by email and in the CCMS, with a score report that shows your scaled score against the 600 pass line.
Bring
- One valid, unexpired, government-issued photo ID with your name matching your CCMS account exactly
- Your appointment confirmation or CCMS account number in case check-in cannot locate the booking
- A second form of identification if your primary ID is non-standard or expired
- Nothing else — the test centre provides an erasable noteboard and pen
Leave at home
- Phones, smartwatches, fitness trackers and earbuds — locker storage
- All notes, study materials, calculators and electronic devices
- Bags, coats, food and drink beyond what the centre permits
- Any other person in the testing room
How the day runs
Rules in the room
- 125 questions, 150 minutes, computer-delivered at a Pearson VUE test centre; online testing is no longer available.
- Passing score is a scaled 600 on the 250-750 scale; it is not a percentage of items correct.
- One valid government-issued photo ID required, name matching your CCMS account exactly.
- No scheduled breaks in the appointment; the clock does not stop if you leave the room.
- The exam is non-disclosed — discussing live item content violates the non-disclosure agreement.
- You may flag questions and return to them within the section; there is no penalty for guessing.
- A failed part can be retaken after a 30-day wait with no limit on attempts; each exam registration is valid for 180 days.
Afterwards.Your official result arrives within roughly three weeks, by email and through the CCMS, rather than on screen at the test centre. On a pass, that part of the CIA program is banked, and the realistic next step is to schedule Part 2, Internal Audit Engagement, while the GIAS architecture you just learned is still fresh — Part 2 builds directly on the foundations and standards tested here. Remember the structural clock: you have three years from program acceptance to pass all three parts and complete the experience requirement, and each exam registration is only valid for 180 days, so plan the sequence against those two deadlines rather than part by part. On a fail, the path is mechanical: wait the 30 days, but use the window deliberately. The score report shows your scaled score against the 600 line, and your own timed-set history will tell you which of the four domains dragged the result — most failing candidates are weak in exactly one domain, usually governance, risk and control or ethics, and that is fixable in a targeted two-week pass before the retake. Do not re-sit on the same knowledge; repair the one domain, re-run a timed set, and treat the retake as a different exam.
Reference
What are the key facts about the Certified Internal Auditor Part 1: Essentials of Internal Auditing?
Certified Internal Auditor Part 1: Essentials of Internal Auditing is a exam credential; awarded by Institute of Internal Auditors (IIA); the exam fee is Member and non-member exam fee (plus application fee); typical preparation is 6 to 10 weeks prep.
| Credential | Certified Internal Auditor Part 1: Essentials of Internal Auditing |
|---|---|
| Abbreviation | CIA Part 1 |
| Type | Exam |
| Profession | Accounting & Tax |
| Specialty | Accounting & Audit |
| Awarded by | Institute of Internal Auditors (IIA) |
| Difficulty | Moderate |
| Typical prep time | 6 to 10 weeks prep |
| All-in cost | $430 to $685 (Part 1) |
| Questions | 125 multiple-choice |
| Time | 2.5 hours |
| Position | First of three CIA parts |
| Window | All parts within 3 years of approval |
| Scope | National / Multi-state |
Real questions
Frequently asked questions about the Certified Internal Auditor Part 1: Essentials of Internal Auditing
How hard is CIA Part 1?
Most candidates rate Part 1 moderate. It is conceptual and principle-based, so memorizing the IPPF and understanding governance and risk matter more than calculation.
How long should I study?
Plan six to ten weeks with the IIA study materials, focusing on the internal audit mandate and the fraud-risk area.
Can I take Part 1 alone?
Yes. Parts may be taken in any order, but most candidates start with Part 1 because it is the foundation for Parts 2 and 3.
What is the pass mark?
The IIA uses a scaled pass mark on its exams; you receive a result at the center and a diagnostic by topic.
How long are scores valid?
You must complete all three CIA parts within three years of your application approval, or the candidacy lapses.
Is the CIA recognized outside the US?
Yes. The CIA is the only globally recognized internal audit certification and is respected by employers in more than 170 countries.
What happened to the CGAP?
The CGAP was retired; the last exams were offered through June 30, 2021 and existing holders maintain it through IIA CPE. It is no longer bookable.
In short
Is the Certified Internal Auditor Part 1: Essentials of Internal Auditing worth it?
- First CIA part on essentials of internal auditing
- 125 questions, 2.5 hours, computer-based
- Covers mandate, governance and fraud risk
- Foundation for the global CIA
Trust
Where does this information come from?
Everything above is taken from the awarding body's own published material. Fees, question counts and domain weights are revised regularly — check the official page before you pay.
- Institute of Internal Auditors (IIA) Awarding body
Research confidence: high · Last reviewed 2026-08