Certified Internal Auditor® (CIA®) Exam Preparation and Practice Resources
The CIA exam is a self-study exam and does not require a prescribed curriculum. Candidates may choose their own method of preparing or practicing for the exam.
The IIA’s CIA Learning System – Now Aligned with the new IPPF
The IIA’s CIA Learning System teaches the entire global CIA exam syllabus in a mobile format for flexible study time. In addition, online and in-person courses taught by CIA experts are available. Group pricing and packages are offered. Learn more.
CIA Review Manuals and Software
Various CIA exam review manuals and software programs are available and may be ordered through the IIA Bookstore (powered by the Internal Audit Foundation).
CIA Review Courses
The IIA and a variety of independent third parties offer CIA exam review courses.
Sample CIA Exam Questions
The IIA provides a limited number of sample CIA exam questions (with answers) to give candidates an understanding of the types of questions that typically appear on the exam.
NOTE: Inclusion of a review course on The IIA's website does not imply endorsement. The IIA is not responsible for errors or inaccurate information included in this listing. The data is claimed to be accurate as reported by the providers.
CIA Reference Resources
CIA exam questions are derived from the body of knowledge for internal auditing, which includes – but is not limited to – the following key references. Please note that periodically, new references are added and outdated references are removed from these reference lists:
CIA Part 1
| Most Relevant |
Additional Resources |
- The IIA’s International Professional Practices Framework
- Applying the International Professional Practices Framework, by Urton Anderson and Andrew J. Dahle
- Internal Auditing Assurance and Advisory Services, by Urton Anderson, Michael Head, and Sridhar Ramamoorti
- Sawyer's Guide for Internal Auditors, by Larry Sawyer
- Quality Assessment Manual, by The IIA
- Enterprise Risk Management Framework, by COSO
- Internal Control – Integrated Framework, by COSO
- Risk Appetite Critical to Success, by COSO
- Managing Cyber Risk in a Digital Age, by COSO
- The IIA’s Internal Audit Competency Framework
- IIA Position Paper “The IIA’s Three Lines Model: An Update of the Three Lines of Defense”
|
- Auditor Essentials: 100 Concepts, Tips, Tools, and Techniques for Success, by Hernan Murdock
- New Auditor’s Guide to Internal Auditing, by Bruce Turner
- Auditing Social Media: A Governance and Risk Guide, by J. Mike Jacka and Peter Scott
- Ready and Relevant: Prepare to Audit What Matters Most, by Timothy Berichon
- Understanding Management, by Richard Daft and Dorothy Marcic
- People-Centric Skills Interpersonal and Communication Skills for Auditors and Business Professionals
- Current resources on internal auditing and relevant topics
|
CIA Part 2
| Most Relevant |
Additional Resources |
- The IIA’s International Professional Practices Framework
- Applying the International Professional Practices Framework, by Urton Anderson and Andrew J. Dahle
- Internal Auditing Assurance and Advisory Services, by Urton Anderson, Michael Head, and Sridhar Ramamoorti
- Sawyer's Guide for Internal Auditors, by Larry Sawyer
- IIA Position Paper “Staffing Considerations for the Internal Audit Activity”
- “Managing Cyber Risk in a Digital Age,” by COSO
|
- Auditor Essentials: 100 Concepts, Tips, Tools, and Techniques for Success, by Hernan Murdock
- New Auditor’s Guide to Internal Auditing, by Bruce Turner
- Auditing Social Media: A Governance and Risk Guide, by J. Mike Jacka and Peter Scott
- Data Analysis and Sampling Simplified: A Practical Guide for Internal Auditors, by Donald Dickie
- Internal Audit of the Future: The Impact of Technology and Innovation, by A. Michael Smith
- Ready and Relevant: Prepare to Audit What Matters Most, by Timothy Berichon
- Current resources on internal auditing and relevant topics
|
CIA Part 3
| Most Relevant |
Additional Resources |
- The IIA’s International Professional Practices Framework
- Applying the International Professional Practices Framework, by Urton Anderson and Andrew J. Dahle
- Internal Auditing Assurance and Advisory Services, by Urton Anderson, Michael Head, and Sridhar Ramamoorti
- Sawyer's Guide for Internal Auditors, by Larry Sawyer
- Understanding Management, by Richard Daft and Dorothy Marcic
- Data Analytics: Elevating Internal Audit's Value, by Warren Stippich Jr. and Bradley Preber
- Data Analysis and Sampling Simplified: A Practical Guide for Internal Auditors, by Donald Dickie
- Rethinking Data Governance and Data Management, by ISACA
- Principles of Information Security, by Michael Whitman and Herbert Mattord
- IT Auditing: Using Controls to Protect Information Assets, by Chris Davis, Mike Schiller, and Kevin Wheeler
- Internal Audit of the Future: The Impact of Technology and Innovation, by A. Michael Smith
- Implementing the NIST Cybersecurity Framework, by ISACA
- Enterprise Risk Management Framework, by COSO
- Internal Control – Integrated Framework, by COSO
- “Managing Cyber Risk in a Digital Age,” by COSO
- Privacy and Data Protection: Internal Audit’s Role in Establishing a Resilient Framework, by IIA Foundation and Crowe
- Accounting Principles, by Jerry Weygandt, Paul Kimmel, and Donald Kieso
|
- Auditor Essentials: 100 Concepts, Tips, Tools, and Techniques for Success, by Hernan Murdock
- Ready and Relevant: Prepare to Audit What Matters Most, by Timothy Berichon
- Project Management Body of Knowledge (PMBOK) Guide, by Project Management Institute
- Contract and Commercial Management: The Operational Guide, by IACCM
- Performance Auditing: Measuring Inputs, Outputs, and Outcomes, by Stephen Morgan, Ronell Raaum, and Colleen Waring
- "Analytics: Good Practices for (smaller) IAFs," by IIA-Netherlands
- Data Analytics for Beginners: Practical Guide to Master Data Analytics, by TechWorld
- Auditing Social Media: A Governance and Risk Guide, by J. Mike Jacka and Peter Scott
- Auditing the Procurement Function by David O'Regan
- Information Technology Control and Audit, by Sandra Senft, Frederick Gallegos, and Aleksandra Davis
- Transfer Pricing Guidelines for Multinational Enterprises and Tax Administrations, by OECD
- Current resources on internal auditing and relevant topics
|
NEW! Official IIA Glossary
The IIA Glossary comprises internal audit terminology extracted from our official sources: the International Professional Practices Framework (IPPF); Internal Auditing: Assurance & Advisory Services, 4th Edition (Textbook); and Sawyer's Internal Auditing, 7th Edition. |
|
|
|
|
|
Candidates from the following countries must refer to their local IIA Institute web-site or contact their local representative for more information about local certification processes:
The information contained on this website pertains to all other countries. |
|
|