The CIA exam Part 1 — Essentials of Internal Auditing — is your entry point into the IIA's three-part certification. It covers the IIA Standards, independence, objectivity, governance, and risk management. Here's how to build the foundation that makes Parts 2 and 3 easier.
1. Know the IIA Standards Cold
The IIA's International Professional Practices Framework (IPPF) is the backbone of Part 1. You must understand both the Attribute Standards (1000 series) and Performance Standards (2000 series) inside and out.
- 1000 – Purpose, Authority, and Responsibility
- 1100 – Independence and Objectivity
- 1200 – Proficiency and Due Professional Care
- 2000 – Managing the Internal Audit Activity
Pro Tip: Create a one-page summary card for each Standard series and review it every morning for 10 minutes.
2. Focus on Governance and Risk
Questions on governance and enterprise risk management (ERM) appear frequently in Part 1. Understand the COSO ERM framework components and how internal audit supports governance at the board level.
- Risk appetite vs. risk tolerance
- Three Lines Model (formerly Three Lines of Defense)
- Role of the audit committee
- Control environment components
3. Simulate Exam Conditions Early
The CIA exam delivers 125 questions in 2.5 hours. Time pressure is real. Begin timed practice runs in your third week, not the night before. Aim for under 60 seconds per question on average.
Important: The CIA exam is scored 250–750 with a passing score of 600. There are no partial credits — each MCQ is all-or-nothing.