The best time to take the CIA exam is earlier than most candidates think, and the reason is a rule many of them never read closely. You do not need to finish your work experience before you sit the exam. A candidate with a degree, or with the IIA’s Internal Audit Practitioner designation, can enter the program, pass all three parts and complete the experience afterwards, as long as it is complete within the three-year program window, and becomes certified when both are done. That changes the timing question from “when will I be experienced enough?” to “when can I protect a few hundred hours of study, and when does the IIA’s clock start?”
This guide replaces our earlier timing article, which was written to the 2019 syllabus. It covers what the eligibility rules allow before your experience is complete, the timing that works best at each career stage, how to choose the months of the year, which part to take first, how the IIA’s program and registration clocks shape the decision, and when waiting is the right answer. For the requirements themselves, see the CIA requirements guide; for the whole exam, the CIA exam guide.
In this guide
- What the rules allow before your experience is complete
- The right timing at each career stage
- The IIA’s clocks: when to apply, register and book
- Choosing the months of the year
- Timing the application and documents
- Which part to take first
- Testing in a language other than English
- Timing alongside the CPA, CISA and other credentials
- How long the whole journey takes
- Three timing plans, worked
- Timing a retake
- After the last part: certification and CPE
- When waiting is the right answer
- Signals that now is the time
- Questions candidates ask about timing
- Related guides
What the rules allow before your experience is complete
The IIA’s March 2026 candidate handbook sets the education and experience combinations for certification. Experience in internal auditing or an equivalent field counts, and the handbook’s equivalents include quality assurance, risk management, compliance, external audit and internal control. The table shows how much experience each route needs and whether you can sit the exams before you have it.
| Entry route | Experience needed to certify | Can you sit the exams before the experience is complete? |
|---|---|---|
| Master’s degree or equivalent | One year | Yes |
| Bachelor’s degree or equivalent | Two years | Yes |
| Active Internal Audit Practitioner (IAP) designation | Five years, or one to two years with a degree | Yes |
| No degree and no IAP | Five years | No: the experience is the entry requirement, so it comes first |
| College or university student | Depends on the route taken after the IAP | Yes, through the IAP: students sit the IAP exam, which is CIA Part 1, then enter the CIA with a Part 1 waiver |
Two consequences follow. First, a new graduate in an internal audit role can start the exams in the first year of work and be certified the day the second year of experience is complete, rather than beginning to study only then. Second, a candidate without a degree has two routes: wait until five years of experience are in hand, or take the IAP, whose only entry requirement is identification, and enter the CIA through it. Since 28 May 2025 the IAP exam has been CIA Part 1, so an IAP carries that part forward into the CIA program. The guide to the IIA’s credentials sets out the IAP’s waiver deadlines, which depend on when it was awarded.
One limit governs every route. The handbook gives candidates three years from their approval into the program to complete all exit requirements, and the experience is one of them. For a graduate who needs two years of experience, that is rarely a constraint. For an IAP without a degree, who needs five years in total, it means having at least two years of qualifying experience before applying to the CIA, so that the rest can be completed inside the window.
One regional rule affects timing too. Residents of the United Kingdom and Ireland, and of South Africa, must be IIA members to apply for the CIA, so membership has to be in place before the application, not added later for the member price.
The right timing at each career stage
Career stage changes two things: how much the exam’s content overlaps with your daily work, and how much protected time you have. The best moment is where the overlap is high and the time is available. The table sets out the usual answer for each stage, with the reasoning.
| Stage | Best timing | Why | What to watch |
|---|---|---|---|
| Student | Take the IAP while studying | Study habits are strong and the time is there; the IAP exam is CIA Part 1, and an active IAP enters the CIA with a Part 1 waiver | Waiver deadlines depend on the IAP’s award date; plan Parts 2 and 3 for after you start work |
| First two years in internal audit | Start in the first year, Part 1 first | You can sit before the experience is complete; the Standards learned for Part 1 improve your work at once | Busy first-year calendars; book around your department’s peak periods |
| Senior auditor, three to five years | Now, if not already started | Part 2 matches the work you do; the CIA is often expected before promotion to lead or manager roles | Answering from habit; the exam tests the Standards, not your department’s shortcuts |
| Audit manager or chief audit executive | Now, with Part 3 early | Part 3’s function-level content is your job; the credential supports credibility with the committee | Protected time; managers lose study weeks to meetings more than to fieldwork |
| Career switcher from external audit, risk or compliance | At the move, or within the first year | The CIA signals that the switch is deliberate, and your experience may count as equivalent | Part 3 is not accounting any more; plan it as new content |
| CPA or chartered accountant from a recognized body | When you move into internal audit, via the Challenge Exam | One exam of 150 questions replaces three parts | Challenge Exam testing runs in set windows, not year-round |
| IT auditor with an active CISA | When internal audit, not only IT audit, is the career | The CISA is a Challenge Exam route, and the CIA widens the roles open to you | If your work stays purely technical, the CISA may be enough for now |
The most common timing mistake is at the second and third rows: auditors who decide to wait until they are “more experienced” and find that the experience never produces a quieter year. Each year of waiting also costs a year in which the credential could have supported a promotion or a move. If you are in internal audit and intend to stay, the default answer is to start within a year.
For chartered and certified accountants, the CIA Challenge Exam changes the timing calculation. The single exam is 150 questions in 180 minutes, offered in four testing windows a year, in February, June, September and November, with applications accepted year-round since June 2026. That makes the choice of window, and the application well ahead of it, the key timing decision.
The IIA’s clocks: when to apply, register and book
Three clocks govern the program, and each one starts when you take an action, not when you start studying. Knowing which action starts which clock is most of the timing skill.
| Clock | Starts when | Length | If it runs out | When to start it |
|---|---|---|---|---|
| Program eligibility window | The IIA approves your application | Three years | Passed parts are forfeited unless you have bought the one-time 12-month extension, $275, before expiry | When you are ready to begin studying Part 1 |
| Part registration | You register and pay for a part | 180 days, or until the program window closes if sooner | The part fee is forfeited unless you have bought the one-time 75-day extension, $100 | About a third of the way into that part’s study plan |
| Appointment | You book a Pearson VUE test center slot | Fixed date | Changes cost $75 and are allowed only more than 48 hours before; a no-show forfeits the fee | The day you register the part |
The program window is the clock candidates start too early. An application approved in January for a candidate who begins studying in September has already used eight months of a three-year window. For most candidates, three years is ample if the clock starts with the study; it becomes tight when it starts a year before. Apply when the first study block is scheduled, not when the idea first appeals.
Results add a short fourth clock. Since 1 April 2026 no result appears at the test center; the IIA releases official results in its certification system within three weeks, or four to six weeks when a result is flagged for review. A failed part can be retaken 30 days after the attempt, up to eight attempts per part within the program window. The CIA Study Planner dates all of these once you enter your parts and dates.
Choosing the months of the year
The three-part CIA is offered year-round at Pearson VUE test centers, so the months are yours to choose. Choose them around four things: your department’s peak periods, your employer’s budget and review cycles, your personal calendar, and the availability of test center seats near you.
| Consideration | What it usually means | How to use it |
|---|---|---|
| Department peak periods | Year-end support, the heaviest controls-testing months, the annual planning cycle | Put exam dates before peaks, never in the two weeks after one; run maintenance weeks during peaks |
| Employer budget cycle | Reimbursement budgets often run by financial year; some employers pay only after a pass | Confirm the policy before registering; time registrations so the fee falls in a year with budget |
| Performance review cycle | Promotion decisions are often made once a year | A pass before the review cycle counts in that year’s conversation |
| Personal calendar | Holidays, family events, moves | Block them first; plan study around them rather than hoping to study through them |
| Test center availability | Popular dates at popular centers fill weeks ahead | Book the appointment the day you register the part |
For an auditor at a calendar-year company, a common pattern is to study Part 1 from January, sit in the spring, take Part 2 before the summer holidays and Part 3 before the autumn planning cycle, with year-end left clear. For a financial-year company the same logic shifts with the year-end. The study schedule guide works this pattern through week by week, and the study hours guide gives the hours each part needs.
Timing the application and documents
The application is where timing plans lose weeks without anyone noticing. Everything happens in CCMS, the IIA’s certification system, and every document has a lead time outside your control. Start gathering them before you apply, so that the program window starts with a complete file rather than with a request for more information.
| Item | What it needs | Why it takes time | When to start |
|---|---|---|---|
| Proof of education | Degree certificate or official transcript, or an active IAP | Universities issue official transcripts on their own timetable, and degrees earned abroad may need an evaluation or translation | Four to six weeks before you plan to apply |
| Identification | A current government-issued photo ID whose name matches your CCMS profile exactly | A mismatch found on exam day means being turned away; fixing a profile or renewing an ID takes time | Before you apply, and again a week before each exam |
| Experience verification | Confirmation of qualifying experience, signed by someone who can verify it, usually your manager | Managers change jobs; former employers are slow to respond | While the supervisor who can sign is still reachable, even if you submit it after passing |
| Membership, where required or chosen | Active IIA membership before applying | Required in the UK, Ireland and South Africa; elsewhere it decides whether you pay member prices | Before the application, so the member rate applies to it |
The experience verification is worth a special note. Candidates who pass the exams years after leaving the employer where they earned their experience can find the verification harder to obtain than the exams were to pass. If a manager who knows your work is about to move on, ask for the signature now. The requirements guide covers what each document must show and the reasons applications are returned.
Which part to take first
The parts can be taken in any order, and for most candidates Part 1 first is still the right answer. It teaches the structure and vocabulary of the Global Internal Audit Standards, which Parts 2 and 3 assume, and it has the lowest published pass rate of the three, 44 percent against 48 for Part 2 and 56 for Part 3, so it deserves the freshest energy. There are two sensible exceptions. Audit managers who run reporting, follow-up and quality work often take Part 3 second, while that content is closest to their job. And experienced in-charge auditors sometimes take Part 2 first for an early pass, since it tests what they do every week. The 2025 syllabus guide shows what each part covers.
Whatever the order, keep the parts close together. Candidates who spread the three parts over the full three-year window forget what they learned for the first part by the time they sit the third, and pay for it in extra hours. A plan that finishes within a year, with the parts a few months apart, uses the overlap between them.
Testing in a language other than English
The 2025 syllabus reached English-language exams on 28 May 2025 and other languages afterwards, on dates the IIA published language by language. For candidates testing in their own language, the transition date decides which syllabus your materials must cover. The table lists the dates the IIA published, as checked in September 2026.
| Language | 2025 syllabus from |
|---|---|
| English | 28 May 2025 |
| Japanese | 28 July 2025 |
| Thai and Korean | 28 August 2025 |
| Portuguese | 28 September 2025 |
| Spanish and French | 28 October 2025 |
| Polish and German | 28 November 2025 |
| Turkish and Russian | 28 December 2025 |
| Traditional Chinese | 28 January 2026 |
| Arabic and Simplified Chinese | Late 2026; the IIA’s pages give the exact date, and they have not always agreed, so check the CIA page for your language before booking |
A candidate booking an exam in a language that has not yet moved sits the 2019 syllabus and should study from material written for it; one booking after the move needs 2025 material. The awkward case is a candidate whose parts straddle the date, who may need both. If you can test in English and your reading speed allows it, testing in English removes the problem, but add time to your plan for reading scenario stems at exam pace.
Timing alongside the CPA, CISA and other credentials
Many candidates weigh the CIA against another credential, and the timing question becomes one of order. Three rules of thumb cover most cases. If you are partway through the CPA and your career is in public accounting, finish the CPA first; it is the credential your current role needs, and once licensed you may qualify for the Challenge Exam. If you are an IT auditor, the CISA usually comes first for the role you hold, and it too opens the Challenge Exam route. If your work is fraud investigation, the CFE may matter more in the short run, and the CIA follows when your role broadens.
The comparisons on this site work through each pairing in detail: CIA vs CPA, CIA vs CISA, CIA vs CFE and CIA vs CFA. The certification roadmap by career stage puts all of them on one timeline.
How long the whole journey takes
From the first page of study to the certificate, the journey has two tracks that run side by side: the exams, which depend on your study hours, and the experience, which depends on the calendar. Certification arrives when the slower of the two is complete. The table shows the usual pattern, using the study months from this site’s planning matrix at about ten hours a week.
| Profile | Exams, at about ten hours a week | Experience still needed when the exams are done | Which track sets the certification date |
|---|---|---|---|
| First-year auditor with a bachelor’s | Nine to eleven months | Usually a year or more of the two required | Experience |
| Auditor with two to five years and a degree | Seven to nine months | None | Exams |
| Auditor with five or more years | Five to seven months | None | Exams |
| Career switcher from external audit, risk or compliance | Eight to ten months | None, if the experience is accepted as equivalent and verified | Exams, and the verification |
| No degree, entering through the IAP | Part 1 as the IAP exam, then Parts 2 and 3 | Five years in total, all within three years of approval into the CIA program | Usually experience |
| Qualified accountant via the Challenge Exam | One exam, in one of four windows a year | None required from the accounting and CISA routes | The exam window |
The first row is the argument for starting early in one line. For a new auditor, the experience track sets the date whatever happens, so the exams can be completed during it at no cost to the certification date; delaying them only adds months at the end. For everyone else, the exams set the date, and the only way to shorten the journey is to start and to keep the parts close together.
Three timing plans, worked
The principles are easier to apply in examples. The three candidates below are composites of common situations, not real people, and the dates are illustrative.
| Candidate | Situation | Plan | Certified |
|---|---|---|---|
| A first-year staff auditor with a bachelor’s degree | Joined internal audit in September; department peak in the first quarter | Diagnostic and study start in April, after the peak; apply in April; Part 1 in July, Part 2 in October, Part 3 the following February, before the next peak turns busy | The following September, when two years of experience are complete; all three parts are already passed |
| A career switcher from external audit | Three years at an audit firm, now four months into an internal audit role | Waits until the new role settles, then applies; Part 1 first, Part 3 given extra hours because it is new content; parts about three months apart | About nine months after starting, if the external audit experience is accepted as equivalent and verified by the former firm |
| An audit manager who is a CPA | Licensed by a recognized accounting body; ten years in audit, three in internal audit | The Challenge Exam: applies in the spring, chooses the September window, studies over the summer from Challenge-specific material | After the result, within weeks of the September window |
Each plan starts a clock only when the work behind it is ready to begin. The first candidate does not apply in September, when the thought first arises, because the first quarter would have been lost to the peak; the application waits for the study. The second candidate waits a few months, then moves fast. The third avoids the three-part exam entirely. In each case the question was not “am I experienced enough?” but “when can I protect the hours, and which clock should I start?”
Two details in the examples matter more than they look. The first candidate is certified the day the second year of experience is complete, which is only possible because the exams came first; waiting for the experience would have pushed certification out by more than a year. And the second candidate’s plan depends on the former audit firm verifying the experience, which is why the verification belongs on the list of things to arrange early.
Timing a retake
A failed part changes the timeline but rarely the overall plan. The IIA allows a retake 30 days after the attempt, up to eight attempts per part within the program window, and charges the part fee again. The fail report shows your scaled score against the 600 needed, on a scale of 250 to 750, and the domains to improve, and that is what should set the retake date. A near miss usually needs about a month of targeted repair; a wide miss needs a new method and closer to three months. Booking the earliest possible date out of frustration is the most common retake mistake.
If you have another part to take, do not stop everything. Candidates who fail Part 1 often begin the next part’s reading while repairing the failed domains, and sit the retake first. The retake plan sets out 30, 60 and 90-day calendars matched to the size of the miss.
Watch the program window when a retake falls late in it. A part that has to be retaken twice near the end of the three years can run out of window before it runs out of attempts. If the arithmetic is close, request the one-time 12-month program extension, $275, while the window is still open, rather than gambling a passed part on a last attempt.
After the last part: certification and CPE
Passing the third part is not quite the finish line. Certification follows when the IIA has your passed parts, your verified experience and your approved education or IAP, so anything still outstanding, most often the experience verification, should be in hand before the last exam. Once certified, practising CIAs report 40 hours of continuing professional education a year, including two hours of ethics, and renew by 31 December; those not practising report 20. The CIA CPE guide covers the rules and the cheapest ways to meet them.
That gives one last timing consideration. A candidate who expects a very demanding year after certification, a first management role or a relocation, may prefer to finish the exams before it starts, so that the only obligations left in that year are the CPE, which most employers’ training already covers, and the annual renewal.
When waiting is the right answer
Starting early is the default, not a rule. There are circumstances in which waiting a few months is the better plan, and they have one thing in common: a known, temporary obstacle that would take the protected hours away.
- A known peak in the next three months. A system implementation, a regulatory examination, a first year-end in a new role. Start the study after it, and apply to the program then, so the clocks start with the work.
- A move between roles in the next few months. A new job brings a learning curve that competes for the same evenings. Many candidates start the CIA three to six months into a new role, once the work has settled.
- A major life event. A new child, a house move, a family illness. The exam will still be there; a registration that lapses during a hard month will not be refunded.
- A language transition between your parts. If the 2025 syllabus reaches your language between two of your planned exams, it can be simpler to wait and study the new syllabus throughout.
- Uncertainty about the career. If you are not sure internal audit is where you will stay, a year of experience first will tell you, and the CIA’s value is highest to those who stay.
Waiting for a feeling of readiness is not on the list. The readiness that matters is measured, by a diagnostic score and practice results, after study begins; the free practice bank gives a baseline in under an hour.
Signals that now is the time
If most of these are true, start now: apply when your first study block is booked, register Part 1 a third of the way into it, and book the appointment the same day.
| Signal | Why it matters |
|---|---|
| You hold a degree or the IAP, or will within the year | You can sit the exams before your experience is complete |
| You can protect eight to twelve hours a week for the next three months | That finishes a typical part within one registration window with room to spare |
| No known peak or life event in the next three months | The first part is the one most likely to be derailed |
| Your employer’s support is confirmed, or you have budgeted the fees | Reimbursement rules can decide when a registration makes sense |
| You intend to stay in internal audit, risk or a related field | The credential pays back over a career in the profession |
| Your materials are written for the syllabus you will sit | Study from 2025-syllabus sources if you test after your language’s transition date |
Budget is the signal candidates underweight. The IIA’s fees for the application and three parts come to $990 for members and $1,515 for non-members at first attempt, before review materials and any retake; the CIA cost guide builds the full budget, and a membership often pays for itself through the member pricing alone.
Questions candidates ask about timing
Can I take the CIA exam without work experience?
Yes, if you have a degree or hold the IAP; students take the IAP first. You can pass all three parts first and complete the experience afterwards, provided it is complete within three years of your approval into the program; you are certified when both are done. Without a degree or the IAP, the five years of experience come first.
Is it better to take the CIA early or late in a career?
Early, for most people who intend to stay in internal audit. The credential supports promotion at the senior and manager levels, and the Standards learned for Part 1 improve work from the first engagement. Later candidates bring more relevant experience, especially to Part 3, but usually have less protected time.
How long do I have to finish all three parts?
Three years from the IIA’s approval of your application, with a one-time 12-month extension available for $275 if requested before the window expires. Most candidates who start with the study, not before it, finish well inside the window.
Are there set exam dates for the CIA?
Not for the three-part exam, which is available year-round at Pearson VUE test centers, subject to seat availability. The Challenge Exam is different: it runs in four testing windows a year, in February, June, September and November.
Is there a best month to take the CIA exam?
No month is easier than another; the exam is the same year-round. The best month is the one after a quiet stretch at work, with no known peak in the two weeks before it and a test center seat available near you.
Should I take the IAP before the CIA?
If you have no degree, it is usually the faster route into the CIA. If you have a degree, it adds little: the IAP exam is CIA Part 1, so you may as well enter the CIA program directly and take Part 1 there.
Can I take two parts in the same month?
The rules allow it, because each part has its own registration and appointment. It rarely makes sense: preparing two parts at once slows both, and a candidate who is ready for one part a month early gains more by sitting it early than by adding the second. Keep the parts a few months apart and let each one have your full attention.
Should I wait for my employer to pay?
Ask first; many functions pay for the CIA, and some pay only after a pass. If support is coming within a few months, align the application with it. If it is uncertain, member pricing keeps the first-attempt fees at $990, and waiting a year for reimbursement often costs more in delayed progression than the fees themselves.
Can I take the exam online from home?
No. The IIA discontinued online proctoring on 28 May 2025, and every CIA exam is now taken at a Pearson VUE test center, so travel belongs in your plan. The exam day guide covers booking and check-in.
Related guides
- The CIA exam, explained — the whole exam in one place.
- CIA exam requirements — education, experience and documents.
- The CIA Study Planner — your dates and every IIA deadline, planned.
- CIA study hours — the hours behind any timing decision.
- CIA study schedule — the weeks and months, planned around work.
- The CIA Challenge Exam — the single-exam route for qualified accountants and CISAs.
- The IIA’s credentials — the IAP route and its deadlines.
- Certification roadmap by career stage — the CIA alongside the other credentials.
- What the CIA costs — fees, membership and the full budget.
- The internal audit career ladder — where the credential matters most.
- CIA exam dates — every deadline from registration to results.
- How to study for the CIA exam — the practice-first method, the research behind it and a weekly routine.
Leave a Reply