CIA logo
Focused certification exam prep
Start practice

CIA Exam Schedule 2026: How to Register at Pearson VUE

TL;DR
  • The CIA is administered by the IIA and delivered at Pearson VUE test centers year-round - no fixed testing windows.
  • IIA members pay approximately $760 total across all three parts; non-members pay approximately $1,250.
  • All three parts use multiple-choice questions only; passing requires a scaled score of 600 on a 250-750 scale per part.
  • The 2025 syllabus added Fraud Risks as a standalone domain in Part 1 and expanded technology coverage in Part 3.

What the CIA Exam Actually Is in 2026

The Certified Internal Auditor (CIA) is the only globally recognized certification for internal auditors, administered exclusively by The Institute of Internal Auditors (IIA). In 2025, the IIA launched a fully revised syllabus aligned with the new Global Internal Audit Standards - the most significant content overhaul in years. If you are planning to sit for the exam in 2026, you are studying under this updated framework from day one.

Unlike many professional certifications that restrict testing to quarterly windows, the CIA is available year-round through Pearson VUE test centers worldwide. This gives candidates scheduling flexibility, but it also means there is no external deadline forcing you to act. The candidates who earn the credential fastest are those who build a deliberate registration and study plan - and stick to it.

The exam is offered in 14 or more languages, making it accessible to internal audit professionals across every major market. Employers ranging from Big Four accounting firms and multinational corporations to government agencies and financial institutions recognize and actively recruit CIA holders.

Why the 2025 Syllabus Matters for 2026 Candidates: The revised syllabus introduced Fraud Risks as a distinct, standalone domain in Part 1 - previously this content was embedded in other sections. Part 3 now carries increased emphasis on information security and technology, reflecting the operational realities of modern audit functions. Every study resource you use must be aligned to this updated version.

Eligibility Requirements Before You Register

You cannot schedule a Pearson VUE appointment until the IIA has accepted your application. Understanding the eligibility requirements upfront prevents delays and wasted fees.

Education Requirement

Candidates must hold a bachelor's degree or equivalent. If you are in your final year of an undergraduate program, you may still apply and sit for exam parts before graduation. However, you will need to provide proof of degree completion before the IIA will issue your certificate.

Experience Requirement

The CIA requires 24 months of internal auditing experience or an acceptable equivalent. Critically, this experience does not have to be completed before you begin testing. The IIA allows candidates to fulfill the experience requirement within three years of being accepted into the program - meaning you can pass all three exam parts while still accumulating your work hours.

Program Window

Once accepted, you have three years to complete all three parts and all exit requirements. Three years sounds generous, but candidates who procrastinate on scheduling routinely find themselves under pressure in year three. Plan your part-by-part schedule at the application stage, not after you have already started studying.

Character Reference Requirement: In addition to education and experience documentation, the IIA requires a character reference as part of the application. This is typically a supervisor or professional colleague. Gather this reference early - waiting on a third party is one of the most common causes of application delays.

Step-by-Step: Registering Through the IIA and Pearson VUE

CIA registration is a two-stage process. You apply through the IIA first, then schedule your specific exam appointment at Pearson VUE. These are two separate systems, and confusing them is a common source of frustration for first-time candidates.

  1. Create an IIA account at the IIA's official website and submit your application, including educational transcripts, experience documentation, and your character reference.
  2. Pay the application fee. This is a one-time fee - approximately $115 for IIA members and $230 for non-members - that covers your entire program enrollment, not just a single part.
  3. Receive your eligibility confirmation from the IIA. This is your authorization to register for Part 1 (or whichever part you choose to begin with).
  4. Pay the per-part exam registration fee through the IIA. Members pay approximately $215 per part; non-members pay approximately $340 per part.
  5. Receive your Pearson VUE authorization. Once the IIA processes your part registration, you will receive a scheduling authorization that you use on the Pearson VUE website or app.
  6. Schedule your appointment at Pearson VUE. Log in to your Pearson VUE account, find a test center or on-demand online proctored option near you, and select your date and time.

For a detailed walkthrough of the Pearson VUE scheduling interface, including how to find available test center seats and reschedule without penalty within the allowed window, see our full guide: CIA Exam Schedule 2026: How to Register at Pearson VUE.

CIA Exam Fees and Cost Breakdown

The total cost of the CIA depends heavily on whether you join the IIA as a member. The math is straightforward, and for most candidates who are serious about completing all three parts, IIA membership pays for itself.

Fee Component IIA Member Non-Member
Application Fee (one-time) ~$115 ~$230
Part 1 Registration ~$215 ~$340
Part 2 Registration ~$215 ~$340
Part 3 Registration ~$215 ~$340
Total Estimated Cost ~$760 ~$1,250

These fees are paid per-part, not all at once. This means if you need to reschedule a part or defer it, you are not losing your entire investment simultaneously. However, keep in mind that retaking a failed part requires paying the registration fee again - another reason pass rates in the 40-50% range on first attempt (as published periodically by the IIA) make thorough preparation a financial decision, not just an academic one.

Exam Structure: Parts, Domains, and Time Limits

The CIA consists of three separate computer-based exams, each covering a distinct set of domains. All questions are multiple-choice - no simulations, no written responses, no document analysis tasks. Here is what each part contains under the 2025 syllabus.

Part 1 - Foundations of Internal Auditing (125 questions / 2.5 hours)

Part 1 tests the conceptual and ethical bedrock of the profession. The 2025 update elevated fraud content to its own domain, meaning fraud is now a testable focus rather than a subtopic buried elsewhere.

  • Domain 1: Internal Audit Fundamentals - purpose, authority, and responsibility of internal audit; the new Global Internal Audit Standards framework
  • Domain 2: Ethics and Professionalism - IIA Code of Ethics, independence, objectivity, due professional care
  • Domain 3: Governance, Risk Management, and Control - board oversight, risk appetite, control frameworks including COSO
  • Domain 4: Fraud Risks - fraud schemes, red flags, the auditor's role in fraud deterrence and detection

Part 2 - Internal Audit Practice (100 questions / 2 hours)

Part 2 shifts from theory to application. Expect scenario-based questions testing how an auditor actually plans, performs, and communicates an engagement.

  • Domain 5: Managing the Internal Audit Function - audit strategy, staffing, quality assurance and improvement programs
  • Domain 6: Planning the Internal Audit Engagement - risk-based audit planning, scope, objectives, and work programs
  • Domain 7: Performing the Internal Audit Engagement - evidence gathering, sampling, analytical procedures, documentation
  • Domain 8: Communicating Internal Audit Results and Monitoring Progress - final communications, management responses, follow-up

Part 3 - Business Knowledge for Internal Auditing (100 questions / 2 hours)

Part 3 is the broadest in scope and, for many candidates, the most challenging because it tests knowledge outside pure audit methodology. The 2025 syllabus significantly increased technology content.

  • Domain 9: Business Acumen - financial statements, business processes, organizational structures, strategic analysis
  • Domain 10: Information Security - cybersecurity frameworks, data governance, access controls, incident response
  • Domain 11: Information Technology - IT general controls, systems development, cloud computing, data analytics

Domain 9 alone covers a wide range of financial and operational business concepts that many candidates with non-finance backgrounds find demanding. Our dedicated CIA Domain 9: Business Acumen Part 3 Study Guide 2026 breaks down every subtopic with targeted practice questions.

Scoring, Results, and the 2026 Scoring Update

The CIA uses a scaled scoring model. Raw question performance is converted to a score on a 250-750 scale. The passing threshold for each part is a scaled score of 600. You do not need to achieve a specific percentage of correct answers - the scaling accounts for question difficulty across different exam versions.

If you do not pass a part, your score report identifies which domain areas were weak, allowing you to target your retake preparation precisely rather than reviewing everything from scratch.

April 2026 Scoring Process Change: Effective April 2026, the IIA is updating its official scoring process. Under the new timeline, candidates will receive their official results within three weeks of testing. If you are testing in early 2026, note that results may arrive under the prior process. Check the IIA's official communications for the exact implementation date and any transition period details.

Scheduling Your Test Appointment at Pearson VUE

Once the IIA has processed your per-part registration and issued your Pearson VUE authorization, scheduling is straightforward. Pearson VUE offers two delivery formats for the CIA: in-person at a physical test center and online proctored testing from a qualified home or office environment.

Test center availability varies by region. In major metropolitan areas, same-week appointments are often available. In smaller markets or during peak scheduling periods (typically late in a calendar year as candidates rush to meet self-imposed deadlines), availability tightens. The practical rule: do not wait until you feel "ready enough" to look at available dates. Open the Pearson VUE scheduler the same week you begin studying each part and identify your target test date first, then build your study timeline backward from that date.

Rescheduling policies apply if you need to move your appointment. Review the IIA's current rescheduling and cancellation fee schedule before booking, as fees apply within certain windows before your scheduled date.

Which Part Should You Take First?

The IIA allows candidates to take the three parts in any order. This flexibility is useful, but it also means candidates frequently make suboptimal sequencing decisions. Here is a framework based on what each part actually tests.

Most candidates benefit from starting with Part 1. The four domains in Part 1 - Internal Audit Fundamentals, Ethics and Professionalism, Governance/Risk/Control, and Fraud Risks - establish the conceptual vocabulary you will apply throughout Parts 2 and 3. Studying Part 1 first means you encounter terms like risk appetite, control environment, and objectivity in Part 2 and Part 3 already fluent in their precise meanings.

Candidates with strong technology backgrounds might consider tackling Part 3 (which contains Domains 10 and 11 on Information Security and IT) earlier, while that knowledge is fresh. However, without the Part 1 conceptual foundation, Part 3 business acumen questions can feel unanchored.

Part 2 is most efficiently taken second for most candidates. Its four domains are deeply applied - they test execution of the audit process, not just knowledge of it - and that application is richer when you already understand the standards and governance context from Part 1.

Use our CIA practice tests to take a diagnostic across all three parts before committing to a sequence. Your weakest domain cluster may surprise you and should influence your order.

A CIA-Specific Preparation Timeline

Generic study schedules do not account for the fact that the CIA's eleven domains vary enormously in their density and abstraction. Below is a domain-anchored six-week sprint designed for Part 1 candidates working roughly 10-12 hours per week.

Week 1

Domain 1: Internal Audit Fundamentals

  • Study the Global Internal Audit Standards structure and mandatory guidance components
  • Understand the definition of internal auditing, purpose, authority, and responsibility
  • Complete 30-40 practice questions on standards application scenarios
Week 2

Domain 2: Ethics and Professionalism

  • Memorize the four principles of the IIA Code of Ethics and their behavioral implications
  • Practice scenario questions on independence impairments and objectivity threats
  • Review due professional care and continuing professional development requirements
Week 3

Domain 3: Governance, Risk Management, and Control

  • Study COSO Internal Control framework components in depth
  • Understand the three lines model and board/audit committee oversight relationships
  • Practice questions on risk appetite, risk tolerance, and risk response types
Week 4

Domain 4: Fraud Risks

  • Study the fraud triangle and fraud diamond models
  • Understand the auditor's responsibility to detect vs. prevent fraud
  • Review common fraud schemes in financial reporting, asset misappropriation, and corruption
Week 5

Full-Part Review and Weak Domain Targeting

  • Take a full 125-question timed mock exam under test conditions
  • Analyze results by domain - allocate remaining study hours to lowest-performing areas
  • Review all missed questions using the Feynman technique: explain each wrong answer aloud in plain language
Week 6

Final Reinforcement and Logistics

  • Complete two additional timed practice sessions of 50-60 questions each
  • Confirm your Pearson VUE appointment, test center location, and ID requirements
  • Review any IIA errata or updates to the 2025 syllabus published since you began studying

For Part 3 candidates working through Domain 9, structured business acumen study requires a slightly different approach because the domain spans financial analysis, organizational behavior, and operational concepts simultaneously. Start your Part 3 preparation with our CIA Domain 9: Business Acumen Part 3 Study Guide 2026 to benchmark your baseline knowledge before building your weekly schedule.

After You Pass: CPE and Certification Maintenance

Earning the CIA is not a one-time event. The IIA requires certified members to complete 40 Continuing Professional Education (CPE) hours annually, with a minimum of 20 of those hours focused specifically on internal audit topics. The remaining 20 hours may cover related professional areas including risk management, governance, information technology, or ethics.

In North America, certification renewal fees are included with active IIA membership, making maintaining your membership financially rational beyond just the exam fee savings. Internationally, renewal fee structures may vary - confirm your local chapter's requirements.

The CPE requirement reflects the IIA's recognition that internal audit is a dynamic profession. The same syllabus changes that updated Domains 10 and 11 in 2025 signal ongoing evolution in technology-related audit responsibilities. Staying current through CPE is not bureaucratic box-checking - it directly supports the competencies you are expected to bring to complex engagements.

When you are ready to begin building those competencies and testing your knowledge before exam day, our full CIA practice test library covers all eleven domains with questions aligned to the 2025 syllabus.

Frequently Asked Questions

Can I take CIA exam parts in any order at Pearson VUE?

Yes. The IIA permits candidates to take Part 1, Part 2, and Part 3 in any sequence. Most candidates start with Part 1 because its foundational domains establish the conceptual vocabulary used throughout the other parts, but the decision should reflect your professional background and diagnostic test performance.

How long does the IIA application process take before I can schedule at Pearson VUE?

Processing times vary, but candidates generally receive IIA application decisions within a few weeks after submitting complete documentation. Delays most often occur because of missing character references or incomplete transcripts. Submit all documents simultaneously, not in stages, to avoid back-and-forth.

What happens if I fail a CIA exam part?

You must pay the per-part registration fee again to retake the failed part. Your score report will indicate performance by domain area, allowing you to focus retake preparation on specific weaknesses. There is no cap on the number of retake attempts, but each attempt counts against your three-year program window.

Does the CIA exam include anything other than multiple-choice questions?

No. All three parts of the CIA are entirely multiple-choice. Part 1 contains 125 questions in 2.5 hours, while Parts 2 and 3 each contain 100 questions in 2 hours. There are no written responses, simulations, or document review tasks in any part.

When does the April 2026 scoring change take effect for results timing?

Effective April 2026, the IIA is updating its scoring process so that candidates receive official results within three weeks of their test date. Candidates testing before the implementation date may receive results under the prior timeline. Monitor the IIA's official announcements for the exact cutover date.

Ready to Start Practicing?

Test your knowledge across all eleven CIA domains with practice questions aligned to the 2025 syllabus. Identify your weak areas before you sit for the real exam at Pearson VUE - not after.

Start Free Practice Test

Ready to pass your CIA exam?

Put this into practice with free CIA questions across every exam domain.