Much of a CIA’s CPE is now earned online. There are live webinars from the IIA and the large firms, on-demand courses, virtual conferences, nano-learning modules, and certificate programs that mix several of these. The IIA’s rules do not care about format. Its renewal policy does not mention webinars or e-learning at all. A program counts if it meets the policy’s criteria and you can evidence completion. What differs between formats is the provider’s own rules for issuing a certificate, and that is where most online hours are won or lost. A webinar watched from a background tab, a recording that carries no credit, or a virtual conference with a lump-sum certificate can all leave you short in an audit.
This guide explains each online format and how it earns credit, and what the IIA’s policy requires of any of them. It sets out the attendance rules behind a webinar certificate, how virtual conferences work, the main types of provider and what they offered in September 2026, how to vet a provider you do not know, and how to get real learning, not just hours, from online sessions. It ends with online CPE for teams, a worked year and the pitfalls. The full requirement is in the guide to CIA CPE requirements. Free online sources are covered in detail in the guide to free CIA CPE.
In this guide
- The online formats and how each earns credit
- What the IIA’s policy requires of online learning
- Live webinars: the rules behind the certificate
- Virtual conferences
- On-demand courses and nano-learning
- Online certificate programs
- Where to find online CPE
- Outside the United States
- Vetting a provider you do not know
- Getting learning, not just hours
- The admin that protects your hours
- Online formats by career stage
- Online CPE for teams
- A year of online CPE, worked
- Online pitfalls
- Questions about online CPE
- Related guides
The online formats and how each earns credit
Online CPE comes in five main formats. They differ in who sets the pace, what proves you completed it, and how the credit is calculated. Many providers build their programs to the NASBA and AICPA standards for CPE programs, because they also serve CPAs. NASBA keeps the US registry of CPE sponsors. The standards’ terms and rules therefore shape most online certificates, even though the IIA does not require them.
| Format | How it runs | What earns the certificate | How credit is counted |
|---|---|---|---|
| Live webinar | Real-time session with an instructor and polls or questions | Attending for the required time and responding to engagement or attendance checks | Instruction time on the 50-minute hour |
| Virtual conference | A day or more of live online sessions, often in parallel tracks | Attendance at each session, tracked by the platform | The sessions you attended, not the whole agenda |
| On-demand self-study | Course taken at your own pace with review questions and a final exam | Passing the final exam | The credit the sponsor assigns to the course |
| Nano-learning | Modules of 10 to under 20 minutes with two questions | Answering both questions correctly | 0.2 hours per module |
| Blended program | Self-study combined with live sessions | Completing each component | The sum of the components’ credit |
| Recorded webinar | A past live session watched later | Depends entirely on the provider: often nothing | If eligible, as the provider states |
The last row causes the most disappointment. Most firms give no credit for recordings. The IIA’s own recording pages differ: some mark a member webinar recording as eligible for IIA CPE (not NASBA credit), others state that the recording earns no CPE, and the IIA’s support article on webinar credit says CPE is not awarded for on-demand viewing. Before you watch any recording for CPE, read the statement on that recording’s page, and count it only if the page says it is eligible.
What the IIA’s policy requires of online learning
The IIA’s renewal policy sets the same test for every educational program, online or not. It must be a formal program of learning that contributes directly to your professional competence. It must state its objectives and any prerequisites, be developed by people qualified in the subject and in instructional design, and have current content. And it must provide evidence of completion and the hours earned, such as a certificate. The content must also relate to the subject areas of the certification. Measurement follows the policy’s general rule: one 50-minute period is one CPE hour, and programs shorter than 50 minutes can be reported in 10- or 25-minute increments.
Three consequences follow for online learning. First, no accreditation is required. A webinar from a vendor, a university or a professional body counts if it meets the criteria. Second, the evidence standard is the same as for a classroom course. A registration confirmation is not evidence of completion, and neither is a calendar entry. Third, the burden of proof is yours. The policy says it is the certified individual’s responsibility to show that an activity qualifies, so choose online programs whose certificates would satisfy a skeptical reviewer.
Live webinars: the rules behind the certificate
A live webinar earns a certificate when you meet the provider’s attendance and engagement conditions. For sponsors following the NASBA and AICPA standards, those conditions come from the standards. The 2024 edition requires group internet-based programs to have at least three instances of participant interactivity per CPE credit. The 2026 edition, now being phased in, requires participant engagement related to the content during each full credit, plus attendance prompts at least three times per 50-minute credit hour, timed so they lack predictability. That is why webinars ask polling questions throughout, and why missing them costs the certificate.
| Provider | Condition for a certificate (as published, September 2026) | Recordings |
|---|---|---|
| The IIA (live webinars) | Attend at least 50 minutes of the live event and respond to at least 75 percent of the alertness checks; certificates emailed within 15 business days | Varies by recording: some member recordings are marked eligible for IIA CPE (not NASBA credit), claimable once; others earn nothing |
| Deloitte Dbriefs | View the original live webcast; at least 50, 75 or 100 minutes and 3, 5 or 6 polls for 1.0, 1.5 or 2.0 credits | No credit |
| KPMG | Live attendance; no partial credit | No CPE for on-demand viewing |
| PwC | At least three polls per 50-minute credit; no credit if technical problems prevent participation | Check the program |
| Grant Thornton; Crowe; RSM; BDO | Live attendance and at least 75 percent of polls, or three polls per credit, depending on the firm; RSM also requires 50 minutes logged in | No credit for archived programs (Grant Thornton; Crowe); credit once per session (BDO) |
| ISACA | Webinar credit posted to your ISACA account within about seven days | On-demand webinars available to members; not eligible for NASBA credit |
The practical rules are the same everywhere. Register in your own name with an address you will keep. Join on time and stay for the whole session. Answer every poll. Do not rely on a colleague’s connection, because several providers give no credit to people watching together on one login. And download the certificate the day it arrives. The guide to free CIA CPE lists the free webinar programs in more detail.
Virtual conferences
A virtual conference delivers a conference’s program without the travel. Registration is usually cheaper than attending in person, and there is no hotel or flight, so the cost per CPE hour falls sharply. Credit works session by session. The platform records which sessions you attended and for how long, often with polls in each session, and the certificate reflects what you attended rather than the whole agenda. Treat each session as a live webinar for credit purposes.
Before registering, read the event’s CPE terms as carefully as its program. Five questions settle most of it. Are the sessions live, or recorded and streamed? Do recordings carry credit if you miss a session? How many CPE hours are available, and in which fields? Will the certificate list sessions and hours, or give one total? And is there a track that matches this year’s priorities, or only general content? An event that answers all five well is worth the registration fee. One that answers none is a collection of webinars at a premium.
Three habits get full value. Block the conference days in your calendar as if you were away, because a virtual conference attended between meetings produces partial credit and little learning. Choose sessions against your CPE plan’s priorities before the day, not on the fly. And keep the agenda with the certificate, marked with the sessions you attended. If the certificate is a single figure for the whole event, the agenda is what shows which hours were ethics and which were instruction. What a virtual conference cannot fully replace is the network. If meeting people is the point, go in person. If the program is the point, virtual attendance usually wins. The guide to affordable CPE compares the cost per hour of both.
On-demand courses and nano-learning
On-demand courses are self-study: you set the pace, and credit comes from passing the final exam. For courses built to the NASBA and AICPA standards, the sponsor assigns the credit through a pilot test or a word-count formula. The course must be finished within a year of enrolling, and the exam requires at least 70 percent. Nano-learning is the smallest unit: modules of 10 to under 20 minutes, two questions, and 0.2 hours of credit. The 2026 edition of the standards allows other self-study courses to start at one-fifth or one-half of a credit, so short online courses will become more common as it is phased in. The guide to self-study CPE covers how credit is set, the providers and the pitfalls.
Online certificate programs
Between the single webinar and a full certification sits the certificate program: a structured set of online courses on one subject, often mixing self-study and live elements, that ends with a certificate of completion. It is the most useful online format for building depth in a priority skill, because it is designed as a sequence rather than a collection. For CPE purposes it is simply an educational program, and the credit is the sum of the components you complete.
The IIA listed the following certificate programs in September 2026. Three of them, AI-Enabled Internal Audit (8 CPE), Auditing the Cybersecurity Program (9 CPE) and Data Literacy (11.2 CPE), were included with membership for members in the United States, Canada and the Caribbean. The AI-Enabled Internal Audit program was priced at $195 for non-members.
| IIA certificate program | Subject | Fits a CPE plan that prioritizes |
|---|---|---|
| AI-Enabled Internal Audit | Applying artificial intelligence across the audit lifecycle | AI use in the function; digital disruption risk |
| AI-Enabled Coordinated Assurance | AI in coordinating assurance, aligned with the Standards’ coordination requirements | Assurance mapping and working with other assurance providers |
| Data Literacy: A Journey to Data Analytics | Foundations of working with data | A first step into analytics |
| Data Analytics | Analytics techniques for auditors | Full-population testing |
| Auditing the Cybersecurity Program | Cyber program audits | The Cybersecurity Topical Requirement in practice |
| COSO Fraud Risk Management | Fraud risk management | Fraud risk assessment and anti-fraud programs |
| ESG: Internal Auditing for Sustainable Organizations | Sustainability and ESG assurance | Sustainability reporting and related risks |
| Financial Services for Internal Auditors | Banking and financial services topics | Moving into, or deepening, financial services audit |
One distinction matters on a CV. A certificate program shows that you completed a course of study. It is not a certification like the CIA, CISA or CFE, which require an exam, experience and ongoing maintenance. Describe it accurately, as “certificate in…” rather than as a designation. The certifications compared guide covers the certifications themselves.
Where to find online CPE
Online CPE for internal auditors comes from six kinds of provider. Each has a typical strength and a typical catch. The table uses what each published in September 2026. Prices and programs change, so check the provider’s own page before relying on a figure.
| Provider type | Examples and terms (September 2026) | Strength | Catch |
|---|---|---|---|
| The IIA | Webinars of 1 to 4 CPE; free monthly member webinars (1 CPE); on-demand courses of 0.5 to 20 CPE; certificate programs such as AI-Enabled Internal Audit (8 CPE) and Data Literacy (11.2 CPE), both included with North American membership | Built for internal auditors; Standards and Topical Requirements | Member benefits vary outside North America |
| Other professional bodies | ISACA: webinars free to members, $75 for non-members; ACFE: members-only quarterly webinars and free sponsored webinars; AGA: four free members-only webinars a year and 2-CPE webinars at $59 or $99 | Depth in IT, fraud and public-sector subjects | Membership needed for the best terms; some credits restricted to their own credential |
| Public-sector audit forums | The Intergovernmental Audit Forums, run with the US GAO, offer free webinars when scheduled; ALGA webinars at about $20 | Government audit content at little or no cost | Certificates only for registered participants; irregular schedules |
| Accounting and consulting firms | Free live webcasts from Deloitte, KPMG, PwC, Grant Thornton, RSM, BDO, Crowe and others; Protiviti offers some sessions with free CPE | Current, high-quality updates on reporting, risk, regulation and technology | Live-only credit; little ethics content |
| Software vendors | Workiva lists courses with complimentary CPE; AuditBoard, now Optro, runs a user conference with CPE | Practical tool-based content | Demonstrations are not instruction; claim only the teaching |
| Commercial CPE providers and platforms | Becker CPE plans from $329 (90 days) to $799 (one year); Surgent unlimited self-study at $549 or webinars at $749; LinkedIn Learning is a NASBA-registered self-study sponsor | Large catalogs and flexible formats | Built mainly for CPAs; check the internal audit and risk titles |
For most CIAs the order of search is simple. Start with the IIA and your chapter for the profession’s own subjects and for ethics. Use the firms’ free webcasts for current developments. Go to ISACA, the ACFE or the AGA for specialist depth if you belong to them. Pay for a commercial course only for a priority skill the free sources do not cover well. The guide to planning your CPE year covers how to decide what that priority is.
Outside the United States
Much of the online CPE market is American. The firms’ free programs described above are run by their US practices and follow US standards and regulation, and many providers build to NASBA’s rules because their main customers are US CPAs. That does not stop a CIA elsewhere from using them. The IIA’s rules are the same worldwide, and a relevant program with a certificate counts wherever you are. But the content may not match your jurisdiction, and live sessions run on US time.
For CIAs outside North America, the better starting points are usually local. Your national IIA institute and its chapters, the local offices of the large firms, and professional bodies in your country often run online programs on local regulation at convenient hours. Combine them with the global content that travels well, such as the Standards, the Topical Requirements, analytics, IT audit and fraud. If you renew through a national institute, check what online learning your membership includes before paying for anything.
Vetting a provider you do not know
The online market includes excellent small providers and a fair amount of repackaged marketing. Because the IIA requires no accreditation, the vetting is yours. Five minutes with the checklist below separates the two.
| Check | What good looks like | Warning sign |
|---|---|---|
| Who is the sponsor? | A named organization with a track record; a NASBA sponsor number if you also need CPA credit | No organization named; only a brand or an individual |
| What will you learn? | Specific learning objectives and a stated level | Vague promises; no objectives |
| Who teaches it? | Named instructors with relevant experience | Anonymous speakers; a sales team presenting |
| Is it current? | Recent date; built on the Global Internal Audit Standards where relevant | Content that predates the 2025 Standards presented as current |
| How is credit earned? | Clear attendance, polling or exam rules | “CPE available” with no rules stated |
| What does the certificate show? | Your name, title, date, sponsor, hours, ideally field of study and the 50-minute basis | No certificate, or a certificate sold separately |
| Is it education or marketing? | Teaches a method, a rule or a skill | Tours a product or pitches a service |
| What happens to your data? | A clear privacy notice; registration used for the event | Registration that signs you up to sales campaigns by default |
Getting learning, not just hours
Online learning makes it easy to collect hours and hard to learn much. The polls prove you were present, not that anything stayed with you. A few habits change that without adding time.
- Choose on purpose. Pick sessions from your CPE plan’s priorities first, and general updates second. One session on the subject of your next engagement is worth three on whatever was scheduled.
- Close everything else. A webinar watched alongside email teaches almost nothing, and the missed polls often cost the certificate too.
- Take one page of notes. Three things to do differently, and where they belong in your audit program or methodology.
- Use the questions. Live sessions take questions. Ask about your real situation, since the answer is free consulting.
- Apply it within a week. Put one technique into live work, or into the next work program.
- Share it. A short session for your team on what you learned consolidates it for you, and earns presentation credit if you run it as a formal in-house program.
The admin that protects your hours
Online certificates arrive in many ways: by email, in a provider’s portal, in a certificate vault, or as a line on a transcript. Some come immediately, some within 24 hours, and some within 15 business days or 30 days. Every one of them has to end up in your evidence folder, and the ones that do not are the hours most often lost in an audit. The table sets out a routine for each stage.
| Stage | What to do | Why |
|---|---|---|
| Registering | Use your own name and an email address you will keep; note the credit rules | Certificates follow the registration |
| Before the session | Test the link and your connection; block the time | Technical failures can void credit |
| During the session | Join on time; answer every poll; stay to the end | Attendance and engagement rules |
| Afterwards | Complete any closing survey or quiz the provider requires | Some firms release the certificate only after it |
| When the certificate arrives | Download it, name it by date, sponsor, title and hours, and file it | Portals and vaults change; emails get lost |
| Transcripts | Save a copy of any provider transcript at year end | Access can lapse |
| Monthly | Check for certificates not yet received and chase them | Late certificates are easier to chase within weeks than months |
The CPE tracking guide has the full naming convention and log template.
Online formats by career stage
The best online mix changes as a career moves on. Early on, structured courses build the craft. Later, live sessions and conferences matter more, for the discussion and the people. The table suggests a starting mix for each stage.
| Stage | Online formats that serve best | Why |
|---|---|---|
| Staff auditor | On-demand courses and certificate programs in audit craft and analytics; member webinars | Structure and fundamentals at your own pace |
| Senior auditor | A certificate program in a specialism; firm webcasts on the functions you audit | Depth plus business context |
| Audit manager | Live webinars and virtual conference tracks on leadership, risk assessment and planning | Discussion and peer experience |
| Chief audit executive | Virtual or in-person conference programs for audit leaders; governance and emerging-risk webinars | Perspective, peers and the board’s agenda |
Online CPE for teams
Watching a webinar together in a meeting room feels efficient, and for learning it can be. For credit it often fails. Several firms give no CPE when several people watch on one connection, and RSM, for example, states that group CPE is not available. If the team wants to watch together, each person should register and log in individually and answer the polls on their own device.
A better team pattern uses online sessions as the input to a team discussion. Each person attends a relevant webinar individually and earns their certificate. A week later the team meets for a 50-minute session on applying it to the function’s own work. Run that session as a formal in-house program, with objectives, a presenter and attendance with times recorded, and it earns everyone another CPE hour and the presenter presentation credit. It also turns generic content into the function’s methodology, which is the development the Standards ask for. The GIAS Domain IV guide covers the chief audit executive’s side of that.
A year of online CPE, worked
The example meets the full requirement online for a practicing CIA who is an IIA member in North America. It uses member benefits for depth and ethics, firm webcasts for breadth and one virtual conference. A non-member would replace the member courses with a mix of chapter sessions, firm webcasts and a paid course.
| Quarter | Online activity | Hours | Running total |
|---|---|---|---|
| January to March | Member ethics course (2.2); three member webinars (3); two firm webcasts on governance and reporting (2) | 7.2 | 7.2 |
| April to June | AI-Enabled Internal Audit certificate program, included with membership (8); three member webinars (3); two firm webcasts (2) | 13 | 20.2 |
| July to September | A two-day virtual conference, sessions attended per agenda (11); two firm webcasts (2) | 13 | 33.2 |
| October to December | Three member webinars (3); four firm webcasts on year-end topics (4); renew once past 40 | 7 | 40.2 |
In this year the ethics hours come first, the depth program sits in the spring trough, and the virtual conference replaces travel. The only money spent is the membership and the conference registration. The guide to CPE for busy auditors shows how to shift the pattern around a heavier fieldwork calendar.
Online pitfalls
| Pitfall | Consequence | Prevention |
|---|---|---|
| Watching a recording that carries no credit | Time spent, no certificate | Check the recording page’s CPE statement first |
| Multitasking through a live webinar | Missed polls; no certificate | Treat it as a class |
| Group viewing on one login | No credit for anyone but the registrant, at some providers | Individual registrations and logins |
| A dropped connection mid-session | Partial or no credit; some providers give none after technical problems | Test beforehand; use a wired connection for long sessions |
| A lump-sum virtual conference certificate | No proof of which sessions or how much ethics | Keep the marked agenda |
| Vendor demonstrations logged as CPE | Hours that fail the instruction test | Claim only teaching content |
| Certificates left in portals | Lost when access lapses | Download and file within the week |
| Registering with a work email | Certificates and transcripts lost at a job change | Register with an address you keep |
The guide to CPE claims that fail an audit covers these and the other claim errors in detail.
Questions about online CPE
Does the IIA accept online CPE?
Yes. The policy’s criteria apply to every educational program regardless of format. It must be a formal, relevant program with objectives, qualified developers, current content and evidence of completion. Online programs that meet them count exactly as classroom programs do, and educational programs are uncapped.
Can I get credit for a webinar recording?
Only if the provider grants it. Most firms give credit for live attendance only. Some IIA member webinar recordings are marked eligible for IIA CPE but not NASBA credit, claimable once; others are marked not eligible. Check the recording page before you watch.
How many CPE hours is a one-hour webinar?
Usually one. Most webinars run about 50 to 60 minutes and are designed as one-credit programs. The certificate states the credit. If a session ends early or you leave early, the provider’s minimum-time rule decides whether you receive any certificate at all.
Do online courses have to be NASBA-registered?
Not for the CIA. They may need to be for a CPA license. The IIA is itself a registered NASBA sponsor for live online and self-study formats, among others, so its programs serve both.
Is online learning as good as in person?
For knowledge, yes, and it is usually cheaper and easier to fit around fieldwork. For judgment, networking and difficult skills such as influence or interviewing, in-person or small live groups tend to work better. A good year uses online learning for most of the hours and saves in-person time for the few subjects where it matters.
Is an online certificate program the same as a certification?
No. A certificate program is a structured course of study that ends with a certificate of completion and earns CPE for its components. A certification such as the CIA requires an exam, experience and annual maintenance, and it is a designation you can use after your name. Both have value, but describe each accurately.
Are vendor webinars legitimate CPE?
They can be. The test is the content, not who pays for it. A vendor session that teaches a method, such as how to design a continuous monitoring test or how the Standards apply to a process, is instruction and counts if it meets the criteria and issues a certificate. A session that demonstrates product features is marketing and does not count, whatever its certificate says.
What if the certificate never arrives?
Check the provider’s stated timing first. Some issue certificates immediately, some within 24 hours, and some take up to 15 business days or 30 days. After that, write to the provider with the date, title and the email address you registered with. Providers keep attendance records and can usually reissue. Do not log the hours until you have the certificate.
Can I attend a webinar on my phone?
Usually, yes, if the platform supports it and you can answer the polls. The risks are practical: a dropped connection can cost the credit, and some providers give none when technical problems stop you participating. For long sessions or ones you need, use a computer on a stable connection.
Related guides
- Free CIA CPE — the free online sources and their rules.
- Self-study CPE — on-demand courses in depth.
- Affordable CPE — the cost per hour of each format.
- CIA CPE requirements — the rules behind every format.
- CIA ethics CPE — ethics courses online.
- Tracking CIA CPE — filing online certificates.
- CPE for busy auditors — fitting sessions around fieldwork.
- Planning your CPE year — choosing sessions on purpose.
- AI in internal audit — one subject online programs now cover heavily.
- The CIA exam, explained — the hub for every CIA guide.
Leave a Reply