CIA Aptitude Test
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The Certified Internal Auditor (CIA) credential is the global professional designation for internal auditors, awarded by the Institute of Internal Auditors (IIA). It signals that a practitioner can plan and supervise engagements, apply the International Standards for the Professional Practice of Internal Auditing, and advise on governance, risk, and control. Candidates typically work in internal audit, risk, compliance, or public accounting, and many pursue the CIA to move into audit management or chief audit executive roles.
The exam tests judgement as much as recall. Questions are scenario-based: you are placed in an audit situation and asked what the auditor should do next, what evidence is sufficient, or how independence is preserved. Content spans the profession's foundations, independence and objectivity, proficiency and due professional care, quality assurance, governance and risk, fraud, engagement planning and supervision, procedures and evidence, reporting and monitoring, and business acumen.
Preparation works best in layers. Read the IIA's Global Internal Audit Standards and Code of Ethics directly, since many questions turn on their exact logic. Then work through a study text per domain, and finish with timed practice that forces you to justify each answer against a standard rather than gut feel. Track weak domains and revisit them; the ethical and independence topics reward careful reading more than memorization. Confirm current exam structure, scheduling, and pricing on the IIA website, as the official body publishes the up-to-date figures.
What you'll study
About CIA Aptitude Test preparation
What is the CIA exam format?
It is a computer-based, multiple-choice exam delivered in parts, each containing a set of scored questions. The IIA publishes the current number of parts, questions per part, and time allowed on its website; check there before scheduling, because the structure has changed over time.
How hard is the CIA exam?
Most candidates find it moderate but demanding because questions test applied judgement, not definitions. Two or three distractors are usually plausible. If you have audit experience and have read the Standards carefully, the logic becomes familiar; candidates without audit exposure need more scenario practice.
Can I retake a part if I fail?
Yes, the IIA allows retakes of failed parts, subject to a waiting period and a fee per attempt. The exact wait time and fee are set by the IIA and vary by location, so confirm the current retake policy on the official site rather than relying on older study material.
How much time should I plan for preparation?
A common approach is one to three months per part for working candidates, depending on audit background. Rather than fixating on hours, set a schedule that covers each domain, then reserve the final two weeks for timed practice and review of missed questions by topic.
In what order should I take the parts?
Many candidates start with the foundations and independence content, since later parts assume fluency with the Standards and Code of Ethics. Others begin with governance and risk if that is their daily work. There is no required order, so choose based on your strengths and schedule.
Why do candidates fail, and how do I avoid it?
Common failure modes are memorizing terms without understanding the Standards' reasoning, ignoring the Code of Ethics, and misreading what a question asks (what the auditor should do first versus ultimately). Slow down, identify the decision point, and eliminate answers that violate independence or due care.
Do I need audit experience to pass?
Not strictly to sit the exam, but experience helps with scenario questions. If you lack it, study real audit reports and work through cases that ask you to choose procedures, evaluate evidence sufficiency, and decide how to communicate findings. The IIA sets its own eligibility and experience requirements for certification.
Where do I confirm fees, dates, and eligibility?
Only the IIA and its local affiliates publish authoritative information on application fees, exam pricing, testing windows, eligibility, and score reporting. Requirements differ by country, so use the official IIA site or your local institute chapter rather than third-party summaries.