The CIA and the CFA are both demanding, respected and widely recognized, and they are almost never substitutes for each other. The Certified Internal Auditor, awarded by The Institute of Internal Auditors, certifies that you understand how an organization’s governance, risk management and controls are assured. The Chartered Financial Analyst charter, awarded by CFA Institute, certifies that you can analyze investments and manage portfolios. A candidate choosing between them is really choosing between two professions, and the exams, costs and timelines follow from that choice rather than the other way round.
This guide replaces our earlier comparison, which was written before the CIA’s 2025 syllabus and before CFA Institute’s 2026 fee and program changes. It sets out what each credential is for, how the exams compare in format, content and pass rates, what each costs and how long each takes, the eligibility and experience rules, what it takes to keep each one, where each opens doors, and how to choose. Figures for the CIA come from the IIA’s candidate handbook and pricing page; figures for the CFA come from CFA Institute’s program, policy and results pages, all checked in September 2026. For the CIA in depth, see the CIA exam guide.
In this guide
- The two credentials at a glance
- What each credential says about you
- The exams compared
- What each exam actually tests
- What each costs
- How long each takes
- Eligibility and experience
- The two ethics codes
- Keeping the credential
- Where each one opens doors
- Which should you choose?
- Three candidates, three answers
- Doing both, and in what order
- Common mistakes when choosing
- Questions candidates ask about CIA vs CFA
- Related guides
The two credentials at a glance
| Feature | CIA | CFA |
|---|---|---|
| Awarded by | The Institute of Internal Auditors | CFA Institute |
| Profession | Internal audit: assurance and advice on governance, risk and control | Investment management: analysis, valuation and portfolio management |
| Exams | Three parts, taken in any order | Three levels, taken in sequence |
| Format | Multiple choice: 125 questions in 150 minutes, then 100 in 120 minutes for each of Parts 2 and 3 | Level I: 180 multiple-choice questions; Level II: item sets; Level III: item sets and constructed-response essays; about four and a half hours each |
| Where | Pearson VUE test centers, year-round | Prometric test centers, in set windows |
| Recent pass rates | 44%, 48% and 56% for Parts 1 to 3, as currently published by the IIA | 39% (Level I, May 2026), 43% (Level II, May 2026), 50% (Level III, February 2026) |
| Exam fees | $990 for members, $1,515 for non-members, application and three parts at first attempt | $3,520 to $4,570 for the three levels at 2026 prices; no enrollment fee since February 2026 |
| Typical study time | About 200 to 450 hours in total, depending on experience | CFA Institute recommends 300 hours per level |
| Typical time to complete | Five to eleven months at about ten hours a week | Three to four years for all three levels, on CFA Institute’s own estimate |
| Experience to certify | One to five years in internal audit or an equivalent field, depending on education | 4,000 qualifying hours over at least 36 months in investment decision-making |
| Keeping it | 40 CPE hours a year for practicing CIAs, including two of ethics | Annual membership and conduct statement; continuing education encouraged, not required |
| Holders | More than 220,000 CIAs from 170 countries, per the IIA | More than 200,000 charterholders in more than 160 markets, per CFA Institute |
Two rows explain most of the difference in experience. The CIA is a set of three separate exams that most working candidates finish within a year; the CFA is a multi-year program whose levels must be passed in order, in fixed windows, with limits on how often you can sit. And the CFA’s experience requirement is specifically investment decision-making, while the CIA’s is internal audit or an equivalent assurance field. Neither credential’s experience counts for the other in most roles.
What each credential says about you
The CIA says that you know how internal auditing is supposed to work: what the function is for, how it is governed and kept independent, how engagements are planned and performed, how results are communicated and followed up, and how a function is run and its quality assured, all measured against the Global Internal Audit Standards. It is the baseline credential for the profession. Audit committees, chief audit executives and recruiters read it as evidence that someone understands the profession’s standards rather than only its tasks.
The CFA says that you can analyze and value securities, understand financial markets and instruments, and construct and manage portfolios within an ethical framework. It is the leading credential for investment professionals: research analysts, portfolio managers, wealth managers and the risk and strategy roles around them. Its reputation rests partly on its difficulty, with three levels, low pass rates and a multi-year path, and partly on its breadth across quantitative methods, economics, financial reporting, asset classes and portfolio management.
The overlap is narrower than the shared letters “C” and “A” suggest. Both place ethics at the center, each with its own code, and both touch risk and financial reporting. But the CIA looks at an organization from the assurance side, asking whether its controls and risk management work, while the CFA looks at an investment from the owner’s side, asking what it is worth and how it fits a portfolio. A bank’s internal auditor and its fund manager both work with the same balance sheet from different ends.
The exams compared
Both exams are computer-based and sat in person at test centers; neither is currently offered for remote testing at home. The IIA discontinued online proctoring for the CIA on 28 May 2025, and CFA Institute’s current exams are delivered at Prometric centers. Beyond that, the formats differ in ways that shape preparation.
| Exam | Questions | Time | When | Scoring |
|---|---|---|---|---|
| CIA Part 1: Internal Audit Fundamentals | 125 multiple choice | 150 minutes | Year-round | Scaled 250 to 750; 600 to pass |
| CIA Part 2: Internal Audit Engagement | 100 multiple choice | 120 minutes | Year-round | Scaled 250 to 750; 600 to pass |
| CIA Part 3: Internal Audit Function | 100 multiple choice | 120 minutes | Year-round | Scaled 250 to 750; 600 to pass |
| CFA Level I | 180 multiple choice, three answer choices each | Two sessions of 135 minutes | February, May, August and November | Pass or fail against a standard CFA Institute sets for each exam |
| CFA Level II | 22 item sets with 88 questions, two of them unscored trial sets | Two sessions of 132 minutes | May, August and November | As for Level I |
| CFA Level III | 11 item sets and 11 constructed-response sets | Two sessions of 132 minutes | February and August | As for Level I |
On pass rates, the CFA is harder at every level, and it compounds. The most recent results CFA Institute has published are 39 percent for Level I in May 2026, 43 percent for Level II in May 2026 and 50 percent for Level III in February 2026, and its ten-year averages are 40, 45 and 51 percent. The IIA’s currently published rates for the CIA are 44, 48 and 56 percent for Parts 1 to 3. Because CFA candidates must pass each level before sitting the next, the share of starters who eventually earn the charter is well below any single level’s pass rate.
Pass rates are not the whole story of difficulty. The CIA’s challenge is precision: its questions reward the exact requirement of the Standards over plausible workplace practice, which trips experienced auditors as often as new ones, as the guide to the hardest CIA exam topics shows. The CFA’s challenge is volume and quantitative depth: far more material per level, heavier calculation, and at Level III written answers. Most candidates who have sat both describe the CFA as the bigger undertaking, and the numbers support them.
What each exam actually tests
The CIA’s 2025 syllabus is built around the internal audit function. Part 1 covers foundations, ethics and professionalism, governance, risk management and control, and fraud risks. Part 2 covers engagement planning, information gathering and evaluation, and supervision and communication. Part 3 covers internal audit operations, the internal audit plan, quality, and engagement results and monitoring, which alone is 45 percent of the part. The 2025 syllabus guide lists every topic.
The CFA’s curriculum is built around investments. For 2026 Level I exams, CFA Institute’s topic weights are ethical and professional standards 15 to 20 percent; quantitative methods, economics and corporate issuers 6 to 9 percent each; financial statement analysis, equity and fixed income 11 to 14 percent each; derivatives 5 to 8 percent; alternative investments 7 to 10 percent; and portfolio management 8 to 12 percent. Level II goes deeper into the same areas through case-based item sets, and Level III focuses on portfolio management and wealth planning, with a common core and one of three pathways: portfolio management, private wealth or private markets, introduced with the February 2025 exam.
| Subject area | In the CIA | In the CFA |
|---|---|---|
| Ethics | Ethics and Professionalism is 20% of Part 1, built on the five principles of the Standards | 15% to 20% of Level I in 2026, and present at every level, built on the CFA Institute Code of Ethics and Standards of Professional Conduct |
| Governance, risk and control | The core of the exam: 30% of Part 1, and the frame for Parts 2 and 3 | Touched through corporate governance and risk management topics |
| Financial statement analysis | Not a syllabus domain since 2025 | A major Level I and Level II topic |
| Fraud | 15% of Part 1 | Not a distinct topic |
| Audit engagements and the audit function | All of Parts 2 and 3 | Not covered |
| Valuation, asset classes, portfolio management | Not covered | Most of the curriculum |
| Quantitative methods and economics | Not covered, beyond basic analytics | Level I and II topics |
The table shows why one credential rarely helps with the other’s exams. A CFA charterholder moving into internal audit starts the CIA almost from zero on the Standards, and an internal auditor starting the CFA meets valuation, fixed income and derivatives as new subjects. The shared ground is ethics, and even there the codes differ in structure and emphasis.
What each costs
The CIA is the cheaper credential by a wide margin, on fees and on the study materials around them. The table compares the fees each body charges; review materials come on top for both.
| Item | CIA, IIA member | CIA, non-member | CFA |
|---|---|---|---|
| Program entry | Application $120 | Application $240 | No enrollment fee for exams from February 2026 |
| Exams at first attempt | $310 for Part 1, $280 each for Parts 2 and 3 | $445 for Part 1, $415 each for Parts 2 and 3 | Levels I and II: $1,140 early or $1,490 standard; Level III: $1,240 early or $1,590 standard |
| Total exam fees, first attempt | $990 | $1,515 | $3,520 to $4,570 |
| Changing the date | $75 per reschedule, up to 48 hours before | $75 | $250 to reschedule within a window |
| Membership | IIA individual membership, $290 a year in North America | None required in most countries | $299 a year once a charterholder, lower in eligible markets, plus any local society dues |
| Retakes | The part fee again | The part fee again | The level fee again |
Review courses widen the gap. CIA courses from the main providers ranged in September 2026 from about $500 for a question bank to about $1,600 for a full course with live classes, with subscription options in between; the CIA review course comparison has the detail. CFA preparation is typically bought level by level, so a candidate who takes all three levels buys three rounds of materials. A realistic all-in budget for the CIA, including membership and a mid-priced course, is a few thousand dollars; for the CFA it is several times the exam fees alone once materials for three levels and any retakes are added. The CIA cost guide builds the CIA budget line by line.
How long each takes
Time is where the two credentials differ most in daily life. CFA Institute recommends 300 hours of study per level and says candidates typically take three to four years to complete all three. Its attempt rules add to the calendar: candidates may sit a given level at most twice in a calendar year, not in consecutive windows or windows less than six months apart, and at most six times in total. With Level III offered only in February and August, a single failed attempt can move the charter out by six months or more.
The CIA is a shorter project. This site’s planning ranges put the total at about 200 to 450 hours depending on experience, which at ten hours a week is five to eleven months, and the three parts can be taken in any order, year-round. A failed part can be retaken 30 days after the attempt, up to eight attempts per part within the three-year program window. The CIA study hours guide explains the ranges.
The practical consequence is that the CIA fits inside a year of a working life, and the CFA occupies several. That makes the order of the two, for the minority who want both, a real decision: a candidate who starts the CFA and the CIA together will usually finish the CIA first and should plan the CFA’s fixed windows around it rather than the reverse.
Eligibility and experience
| Rule | CIA | CFA |
|---|---|---|
| To start | A degree, the IAP designation, or five years of relevant experience; students enter through the IAP | A bachelor’s degree; or an undergraduate whose Level I window is 23 months or less before graduation; or 4,000 hours of work and/or higher education over at least three sequential years |
| Identification | Government-issued photo ID matching the candidate profile | A valid international travel passport |
| Experience to certify | One year with a master’s, two with a bachelor’s, five without a degree, in internal audit or an equivalent field such as external audit, compliance, risk management, quality assurance or internal control | 4,000 qualifying hours in at least 36 months, gained before, during or after the program, in work that is part of or feeds into investment decision-making |
| Can experience come after the exams? | Yes, for candidates entering with a degree or the IAP, provided it is complete within the three-year program window | Yes |
| References and conduct | Agreement to the IIA’s ethics requirements; experience verified by a supervisor | Two or three references, a membership application and an annual Professional Conduct Statement |
The experience rules are where people planning both credentials get caught. Internal audit work satisfies the CIA but only counts for the CFA if the work itself meets CFA Institute’s test of being part of, or feeding into, investment decision-making; CFA Institute’s work experience self-assessment is the place to check a particular role. The reverse is also true: an analyst’s investment work does not count as internal audit experience for the CIA unless it falls within the IIA’s accepted equivalents. The CIA requirements guide covers the IIA’s rules in full.
The two ethics codes
Ethics is the one subject both credentials test heavily, and it is worth seeing why the two codes feel different to study. The IIA’s ethics requirements now sit inside the Global Internal Audit Standards, as Domain II, Ethics and Professionalism: five principles, each with standards that turn it into requirements. The CFA Institute Code of Ethics and Standards of Professional Conduct is organized around an investment professional’s duties to markets, clients and employers, in seven standards, and CFA Institute updated it with effect from 1 January 2024.
| IIA: Domain II principles | CFA Institute: Standards of Professional Conduct |
|---|---|
| 1. Demonstrate Integrity | I. Professionalism |
| 2. Maintain Objectivity | II. Integrity of Capital Markets |
| 3. Demonstrate Competency | III. Duties to Clients |
| 4. Exercise Due Professional Care | IV. Duties to Employers |
| 5. Maintain Confidentiality | V. Investment Analysis, Recommendations, and Actions |
| VI. Conflicts of Interest | |
| VII. Responsibilities as a CFA Institute Member or CFA Candidate |
The rows do not line up, and that is the point. The IIA’s principles describe how an auditor must think and behave to give trustworthy assurance: honestly, objectively, competently, carefully and discreetly. The CFA standards describe how an investment professional must treat the parties whose money and markets they touch: no misuse of material nonpublic information, loyalty and fair dealing with clients, suitability, disclosure of conflicts. Both codes take objectivity and conflicts seriously, but they apply them to different relationships, which is why ethics questions on the two exams read so differently. The Domain II guide covers the IIA’s side in full.
Keeping the credential
The two credentials take different approaches to staying current. The CIA requires continuing professional education: practicing CIAs report 40 hours a year, including two hours of ethics, and renew by 31 December with an attestation; those not practicing report 20 hours. The IIA’s annual renewal fee is included in membership for members in North America with active designations, and is $30 for members elsewhere and $120 for non-members. The CIA CPE guide sets out the rules and the caps.
The CFA charter is kept through membership rather than hours. Charterholders pay annual CFA Institute dues, $299 in standard markets and less in eligible ones, and file a Professional Conduct Statement each year affirming their adherence to the Code of Ethics and Standards of Professional Conduct, which CFA Institute updated with effect from 1 January 2024. Continuing education is encouraged rather than required: CFA Institute suggests at least 20 professional learning credits a year, two of them in standards, ethics and regulations. Both bodies can discipline members for conduct breaches.
Where each one opens doors
Because the credentials certify different professions, the useful question is not which is more valuable but which is valued in the roles you want. The table maps common roles to the credential employers in that role usually look for.
| Role | Usually looks for | Why |
|---|---|---|
| Internal auditor, senior, audit manager | CIA | The profession’s baseline credential, often listed as required or preferred |
| Chief audit executive | CIA, often with a CPA or CA | Credibility with the audit committee on the Standards and the function |
| Internal auditor at an asset manager, bank markets or treasury team | CIA first; CFA knowledge valued | The job is assurance, but the subject matter is investments |
| Investment risk, model validation, investment operations oversight | CFA, sometimes FRM; CIA useful for control-heavy roles | Quantitative and product knowledge matter most |
| Research analyst, portfolio manager | CFA | The charter is the benchmark credential for investment decision-making |
| Wealth management and private banking | CFA, or local wealth credentials | Portfolio construction and client suitability |
| Risk and compliance generalist | CIA, CRMA or compliance credentials | Assurance and control frameworks over valuation |
Salary comparisons between the two are mostly comparisons between professions: investment management roles often pay more at senior levels than internal audit roles, whichever credential the individual holds. Within internal audit, the CIA is what supports promotion; within investment management, the CFA is. The internal auditor salary guide covers what the audit market pays at each level, and the exit opportunities guide covers moves from internal audit into other fields, including investment roles.
Which should you choose?
| If your goal is | Choose | Reasoning |
|---|---|---|
| A career in internal audit, at any level | CIA | It is the profession’s credential; the CFA adds little to most audit roles |
| Chief audit executive at a financial institution | CIA first, then consider the CFA or a risk credential | The CIA is the entry ticket; investment knowledge helps with the audit universe |
| Investment analysis or portfolio management | CFA | The charter is the benchmark; the CIA does not test investment skills |
| Moving from internal audit into investments | CFA, while using audit experience as a bridge | The move needs the investment knowledge the CFA builds; the experience rule must be checked |
| Moving from investments into internal audit | CIA | The Standards and the audit process are new; the CIA signals the move is deliberate |
| Undecided, early in a finance career | Decide the profession first | Each credential is a multi-month or multi-year commitment to a specific path |
Candidates who are undecided sometimes start Level I of the CFA as a general finance qualification. That can make sense for someone heading toward investments, but it is an expensive way to learn that internal audit is the career, when the CIA’s Part 1 or the IIA’s Internal Audit Practitioner designation would test the fit at a fraction of the cost and time. The certification roadmap by career stage places both credentials on a career timeline alongside the others auditors consider.
Three candidates, three answers
The choice becomes clearer in particular cases. The three below are composites of common situations rather than real people.
A senior internal auditor at a regional bank, four years into the profession, whose audit plan includes treasury, the investment portfolio and wealth management. She is tempted by the CFA because the audits she finds hardest are the investment ones. The better answer is the CIA now, because it is the credential her next promotion depends on and it fits inside a year, followed, if the investment audits remain her specialty, by CFA Level I as structured learning. Level I alone does not make her a charterholder, but it gives her the vocabulary of the business she audits, and her audit work would not by itself meet the charter’s experience test.
A finance graduate in a rotational program, undecided between an internal audit rotation and an investment research one. He should not start either credential yet. The CFA’s first level is a substantial commitment of time and money to a path he has not chosen, and the CIA’s value is highest to people who stay in audit. A rotation, a conversation with people in each role, and perhaps the IIA’s Internal Audit Practitioner designation, whose exam is CIA Part 1, would test the fit at far lower cost.
A charterholder who has spent eight years as an analyst and is moving into an investment risk and control role at an asset manager, with a reporting line into the second line of defense. The CFA stays her core credential. If the role grows toward assurance, auditing the investment process rather than overseeing it, the CIA would signal that shift and teach the Standards she would then work under. She would take the three-part exam, because the Challenge Exam’s routes do not include the CFA, and her investment experience would need to be assessed against the IIA’s equivalents.
In each case the profession decided the credential, and the credential’s details decided only the order and timing. That is the pattern for almost everyone comparing the two.
Doing both, and in what order
Holding both makes sense for a small group: internal auditors who specialize in investment businesses, chief audit executives of asset managers and banks, and investment risk professionals whose roles include control oversight. For them, order matters. An internal auditor should take the CIA first, because it is shorter, it serves the current job, and it can be completed inside a year; the CFA can follow, level by level, with its fixed windows planned around work peaks. An investment professional moving into audit should do the reverse only if the charter is already well advanced; otherwise the CIA is the credential the new role needs.
Do not expect either credential to shorten the other. There is no exemption between them, and the CIA’s Challenge Exam, a single exam for holders of recognized accounting qualifications and for CISA holders, does not include the CFA among its routes. Plan each on its own hours: roughly 200 to 450 for the CIA and 300 per level for the CFA.
Common mistakes when choosing
Four mistakes come up again and again. The first is choosing by prestige rather than by profession: the CFA’s difficulty makes it famous, but an internal auditor who spends three years on it gains less for the career than the CIA would give in one. The second is assuming the experience transfers, and discovering at the end of the CFA that years of audit work do not meet the investment decision-making test. The third is underestimating the CFA’s calendar: fixed windows, sequential levels and attempt limits mean a failed level costs half a year, not a month. The fourth is using old comparisons: the CIA’s content changed substantially in 2025, and CFA Institute’s fees and program changed for 2026, so comparisons written before then describe different exams.
Questions candidates ask about CIA vs CFA
Is the CFA harder than the CIA?
By most measures, yes: lower pass rates at every level, more study hours per level, a multi-year path, and written answers at Level III. The CIA is hard in a different way, through the precision of its questions on the Standards, but it is a shorter and cheaper undertaking.
Can a CFA charterholder take the CIA Challenge Exam?
Not on the strength of the CFA. The Challenge Exam’s routes are for holders of recognized accounting qualifications, for active CISA holders, and, as a pilot, for professionals with long internal audit or related experience. A CFA charterholder takes the three-part CIA unless another route applies. The Challenge Exam guide lists the routes.
Does internal audit experience count toward the CFA charter?
Only if the work itself is part of, or feeds into, investment decision-making, which CFA Institute judges role by role. Its work experience self-assessment is the place to check before relying on audit years.
Which pays more?
The professions pay differently more than the credentials do. Senior investment roles often pay more than senior audit roles, but within internal audit the CIA is the credential that supports promotion. Compare roles, not letters.
Is the CIA useful for someone working in investments?
For control, oversight and risk roles in investment firms, it can be, because those roles apply the same governance and control thinking the CIA tests. For analysis and portfolio management roles, the CFA is the relevant credential.
Can I study for both at the same time?
You can, but few working candidates should. The CFA’s 300 hours per level and the CIA’s few hundred hours in total compete for the same evenings, and the content barely overlaps. The usual sensible sequence is to finish the credential your current role needs first, then start the other.
Which is more recognized internationally?
Both are global. The IIA reports more than 220,000 CIAs from 170 countries, and CFA Institute more than 200,000 charterholders in more than 160 markets. Recognition within each profession matters more than the raw count: the CIA is what audit employers recognize, the CFA what investment employers recognize.
Does CFA ethics study help with the CIA’s ethics domain?
A little, in habits of mind: reading a scenario for conflicts, duties and disclosure. The content does not transfer, because the CIA tests the IIA’s five principles and their thirteen standards, applied to an internal audit function. Study the IIA’s requirements as new material even if you know the CFA code well.
How do the CIA and CFA compare with the CPA?
The CPA is an accounting license, with its own experience and state board rules, and it is the credential most often paired with the CIA in internal audit leadership. The CIA vs CPA comparison covers that choice.
Related guides
- The CIA exam, explained — parts, fees, rules and study plans.
- CIA vs CPA — the pairing most common in audit leadership.
- CIA vs CISA — for auditors weighing IT assurance.
- CIA vs CFE — assurance generalist or fraud specialist.
- The CRMA — the IIA’s risk management assurance credential.
- Certification roadmap by career stage — what to earn when.
- What the CIA costs — the full budget, line by line.
- CIA study hours — how long each part takes.
- Internal auditor salary guide — what the audit market pays.
- Free CIA practice questions — test the fit before you commit.
- CIA vs CMA — auditing the finance function or running it.
- CIA vs ACCA — a specialist certification or a full accountancy qualification.
- IAP vs CIA — the IIA’s entry designation and the route to the CIA.
- Internal audit certifications compared — every credential on one page.
Leave a Reply