Failing a CIA part is common enough to be normal and personal enough not to feel it. The IIA’s most recently published pass rates are 44 percent for Part 1, 48 percent for Part 2 and 56 percent for Part 3, which means that on any given sitting, roughly half of the people in the room will receive the same email you did. Many of the chief audit executives you admire failed a part on the way. None of that makes the result feel better on the day it arrives, but it does change the question worth asking. The question is not “am I good enough?” but “what, specifically, cost me the marks, and what will I do differently in the next eight to twelve weeks?”
This guide is the retake playbook. It covers what to do in the first week, how to read the score report and diagnose the failure, the patterns that fail candidates and how each shows up, three retake calendars built for how far you missed by, the study-method changes that research says actually move scores, the rules and fees for registering again, and how to walk back into the test center in a better state than the first time. The rules and fees are the IIA’s as of September 2026. The study-method advice is labelled with its evidence, and everything else is practitioner judgment from people who have been through it.
In this guide
- The first week: what to do before you study anything
- The diagnostic autopsy: reading the score report
- Seven reasons candidates fail, and how each shows up
- The 30, 60 and 90-day retake calendars
- Method changes that actually move scores
- Part-by-part repair notes
- Registering again: the rules, fees and windows
- Walking back in: the second attempt in your head
- Two worked comebacks
- Questions candidates ask after a fail
- Related guides
The first week: what to do before you study anything
Since 1 April 2026 the IIA has used delayed scoring for the three-part CIA exam: nothing appears on screen when you finish, and the official result arrives in your CCMS account within three weeks of the exam date, occasionally longer when a result is flagged for review. Two things follow. First, you usually know the result only a week or so before the 30-day waiting period ends, so the pressure to “get straight back in” is real and mostly misplaced. Second, the exam will already be three weeks behind you, and your memory of what felt hard is fading. Use the first week to capture it and to decide, not to study.
Start with a memory dump, ideally on the day of the exam itself and at the latest the day the result arrives. Write down, for yourself only, the topics that felt unfamiliar, the domains where you guessed, the kinds of questions that took too long, and where you were when the clock started to press. Do not record or share actual questions: every candidate agrees to keep exam content confidential, and the IIA takes that seriously. Topic-level notes such as “a lot of charter and mandate questions I wasn’t sure about” or “three long results-communication scenarios in a row near the end” are what you need, and they are yours to keep.
Then make three decisions before you open a book. Whether you will retake this part next or take a different part first, which depends on your program window and on why you failed. How long your retake calendar will be, which depends on the margin, as the next two sections explain. And what will be different, written as a sentence you can check: “more than 1,500 practice questions with every rationale read”, “two full timed simulations before booking”, “Domain II of the Standards read twice in full”. Candidates who retake with the same method and more hours tend to reproduce the same result with slightly better luck; candidates who retake with a different method tend to pass.
The diagnostic autopsy: reading the score report
Each part is scored on a scale from 250 to 750, and 600 or more is a pass. A passing report shows no number at all. A failing report shows your scaled score and identifies the domains where you need to improve, which makes it the most useful document you own right now. The IIA does not publish how raw scores convert to the scale, and the conversion varies between exam forms, so a scaled score cannot be translated precisely into a number of questions. What it does tell you is roughly how far you were from the line, and that distance is the first input to your plan.
The bands below are a planning heuristic, not an IIA classification. They are useful because the likely causes of a near miss and of a wide miss are different, and so are the fixes.
| Scaled score | What it usually means | Most likely causes | Retake calendar |
|---|---|---|---|
| 560 to 595: a near miss | You know most of the material; a handful of questions decided it | Pacing, misread stems, one weak domain, second-guessing in review, exam-day conditions | 30 to 45 days: targeted repair and timed practice |
| 500 to 555: a clear miss | Real gaps in one or two domains, or a method that produced recognition rather than recall | Too few practice questions, reading instead of retrieving, a neglected small domain, gaps in the Standards’ vocabulary | 60 days: rebuild the weak domains, then full practice |
| Below 500: a wide miss | The preparation did not match the exam | Old-syllabus material, far too few hours, no practice under time, or sitting before being ready because a registration was about to lapse | 90 days or more: restart with a different method and material |
Next, turn the domains flagged in the report into a list of syllabus topics. The 2025 syllabus has 27 topics in Part 1, 17 in Part 2 and 18 in Part 3, each with a verb that signals depth; the syllabus guide lists all 62 with what the exam is really checking. Mark each topic in your weak domains honestly: could you explain it to a colleague, and could you answer a scenario on it without notes? Then compare the list with your memory dump. When the report says “Engagement Results and Monitoring” and your notes say “the escalation and risk-acceptance scenarios felt like guessing”, you have found the repair job for the first three weeks.
Finally, audit your own preparation the way you would audit a process that failed. How many practice questions did you actually answer, and how many rationales did you read for the questions you got right? How many timed simulations did you sit under exam conditions? How many hours did you study in the last three weeks compared with the first three? Did your material say “2025 syllabus” on it? The answers are usually more revealing than the score report, and they are the part of the diagnosis you control.
Seven reasons candidates fail, and how each shows up
Most failed attempts trace to one or two of seven causes. Each leaves a signature in the score report, in the memory dump or in the preparation audit, and each has a specific fix. Find yours before you plan.
| Cause | How it shows up | The fix |
|---|---|---|
| Reading instead of retrieving | The material felt familiar on the day but the right answer would not come; hundreds of pages read, fewer than 1,000 questions answered | Flip the ratio: at least two-thirds of the retake hours on questions and rationales, reading only to repair what the questions expose |
| The Standards’ vocabulary | Weak in Foundations or Ethics on Part 1, or in Quality on Part 3; chose the sensible answer over the required one | Read the relevant domains of the Standards themselves; write a one-line rule per standard in your own words; drill until the required answer is reflexive |
| Pacing | Ran short of time, guessed the last ten or fifteen questions, or skipped the review pass | Timed sets from week one at 72 seconds a question; a halfway checkpoint; a firm rule to flag any question still open at 90 seconds |
| Misreading scenarios | Answered a question that was not asked: the best option instead of the first step, the most likely cause instead of the least likely | Read the last sentence of every stem first; underline the qualifier on the noteboard; practise long scenarios specifically |
| Old-syllabus preparation | Studied from 2019-syllabus material; saw topics you had never met and missed ones you prepared for | Replace the material; confirm “2025 syllabus” in writing; use the syllabus guide as a checklist |
| A neglected small domain | Flagged in a 10 or 15 percent domain such as Fraud Risks, Supervision and Communication, or Quality | Small domains are cheap marks: two focused weeks usually fix them, and they are often the difference in a near miss |
| Exam-day conditions | Knew the material in practice sets but performed below them on the day; slept badly, arrived rushed, panicked early | A full simulation at the same time of day as the booking, a planned route and arrival, and the reappraisal routine described below |
The first cause is by far the most common and the least visible from the inside, because rereading feels like work and produces the pleasant sense of familiarity that candidates mistake for knowledge. If your preparation audit shows more hours reading than answering, you have found your cause even if the score report points somewhere more specific. The common mistakes guide and the ten hardest topics go deeper on the content-specific traps.
The 30, 60 and 90-day retake calendars
The calendars assume eight to twelve hours of study a week, which is what most working candidates sustain, and they start on the day you finish the first-week decisions. They differ in how much time goes to repair before full practice begins. Whichever you choose, book the retake appointment early: registration opens a 180-day window, popular test centers fill weeks ahead, and a booked date is the most effective study motivator there is.
| Week | 30 to 45 days: near miss | 60 days: clear miss | 90 days: wide miss |
|---|---|---|---|
| 1 | Weakest flagged domain: 150 questions in study mode, every rationale read, misses logged by topic | Weakest domain: reread the relevant Standards, then 100 questions with rationales | Replace the material if it was not 2025-syllabus; take a 50-question diagnostic across all domains |
| 2 | Second flagged domain, same method; one 50-question timed set at the end of the week | Weakest domain continued: 150 more questions; a one-line rule per standard for that domain | Largest domain of the part, learned from the Standards and the syllabus topics, with questions after every sitting |
| 3 | Mixed timed sets of 50, three in the week; review every miss the next day | Second weak domain: reread and 150 questions | Largest domain continued; begin the miss log in earnest |
| 4 | Full timed simulation under exam conditions; repair what it exposes | Second weak domain continued; first 50-question timed set | Second domain, learned and drilled |
| 5 | Two timed sets; reread the miss log; light review two days before; sit | Remaining domains: 75 questions each, rationales read | Second domain continued; first timed set |
| 6 | — | Mixed timed sets, three in the week | Remaining domains, drilled at syllabus weight |
| 7 | — | Full timed simulation; repair; second simulation at the end of the week | Remaining domains continued; two timed sets |
| 8 to 9 | — | Miss log reread twice; one light set; rest the day before; sit | Mixed timed sets; first full simulation |
| 10 to 12 | — | — | Repair from the simulation; second and third simulations; miss log; rest; sit |
The 30-day calendar is for genuine near misses only, and only when the cause was pacing, a small domain or exam-day conditions. A candidate who scored 580 because they read the material twice and answered 600 questions should take the 60-day calendar, because the method is the problem and a method takes longer to change than a domain takes to repair. Whatever the length, the CIA Study Planner will lay it out around your actual week: set the exam date, give it your hours, lower your confidence in the flagged domains so they get more of the time, and it builds the day-by-day plan with the practice sets linked.
Method changes that actually move scores
More hours of the same method is the most common retake strategy and the least effective. Learning research is unusually clear about which study techniques work, and the best of them map directly onto how a CIA part should be prepared. In Roediger and Karpicke’s 2006 experiments, students who practised recalling material remembered considerably more a week later than students who used the same time to restudy it, even though the restudy group felt more confident. Cepeda and colleagues’ 2006 review of hundreds of experiments found that spreading practice over time beats massing it. And Dunlosky and colleagues’ 2013 review of ten common study techniques rated practice testing and distributed practice as the two most useful, with rereading and highlighting near the bottom.
| Change | Why it works | How to do it for the CIA |
|---|---|---|
| Questions before reading | Retrieval strengthens memory more than re-exposure, and failed retrieval tells you exactly what to read | Start every topic with ten questions cold; read only what the misses point to; then ten more |
| Read every rationale, including the right answers | A correct guess teaches nothing unless you check why it was right | Treat a right answer you were not sure of as a miss and log it |
| A miss log by topic and reason | Turns scattered errors into patterns you can fix | Log the syllabus topic, the standard it tested, and why you missed it: did not know, misread, changed a right answer, fell for a true-but-irrelevant option, or ran out of time |
| Spacing | Material revisited after a gap is retained far longer than material crammed | Open each week with fifteen minutes of questions from the previous weeks’ topics |
| Interleaving and mixed sets | The exam never tells you which domain a question comes from; mixed practice trains you to identify the problem type | After a domain is repaired, practise it only in mixed sets at syllabus weights |
| Timed simulation | Knowledge under time pressure is a separate skill from knowledge at leisure | At least two full simulations before the retake, at the same time of day as your appointment |
| Explaining out loud | Producing an explanation exposes gaps that recognizing one hides | For every topic in a weak domain, explain it in two minutes to an imaginary new auditor; stop and read when you stall |
The miss log deserves special emphasis, because it is where retakers find their pattern. After two weeks most candidates discover that one reason dominates: for some it is misreading the stem, for others choosing the option that is true but does not answer the question, for others changing a correct first answer during review. Each has a behavioural fix that no amount of content study provides. The study planner keeps a miss log with those five reasons and tells you which one is winning, and the free question bank tracks every question you have missed and can build a set from them on demand.
Part-by-part repair notes
The method changes apply to every part, but each part fails people in its own way, and the first two weeks of a retake should go where that part’s marks are usually lost. The notes below come from the structure of the 2025 syllabus and from the domains that most often appear on failing score reports.
| Part | Where the marks usually go | The first two weeks of the retake | Free resources on this site |
|---|---|---|---|
| Part 1: Internal Audit Fundamentals | Foundations (35%) and Ethics and Professionalism (20%): the mandate, the charter, independence, objectivity and the exact requirements of Domain II; candidates pick the reasonable answer instead of the required one | Read Domains I, II and III of the Standards themselves; write a one-line rule for each of the 22 standards in Domains II and III; answer every Foundations and Ethics question you can find, with rationales | The Domain II guide, the Domain III guide and the Part 1 study guide |
| Part 2: Internal Audit Engagement | Engagement Planning (50%): the order of the planning steps, criteria, and planning for IT, privacy and continuity risks; then evidence quality and the elements of a finding | Learn Standards 13.1 to 13.6 in sequence and why each comes before the next; practise planning scenarios until the sequence is automatic; then evidence and sampling questions | The Domain V guide, the planning memo template and the Part 2 study guide |
| Part 3: Internal Audit Function | Engagement Results and Monitoring (45%): who decides, what is communicated to whom, risk acceptance and escalation; then Quality, especially nonconformance and the external assessment | Work the results-and-monitoring topics as a chain: communication, recommendations or action plans, closing, residual risk, risk acceptance, follow-up, escalation; practise every chief audit executive scenario you can find | The life of a finding, risk acceptance, the QAIP playbook and the Part 3 study guide |
One pattern cuts across all three parts. Working auditors fail questions where their own function does something differently from the Standards, because experience makes the familiar answer feel right. If you are an experienced auditor retaking a part, add a short exercise to the first week: list five things your function does that the Standards describe differently, and check each against the relevant standard. That list is usually a map of your missed questions, and once it is on paper the exam’s preferred answers stop feeling counterintuitive.
Registering again: the rules, fees and windows
The mechanics of a retake are straightforward once you know the rules, and several of them change the plan. The figures below are the IIA’s North American fees and rules as published in September 2026; institutes elsewhere may price differently.
| Rule | Detail | What it means for your plan |
|---|---|---|
| Waiting period | The earliest retake appointment is 30 days after your last attempt at that part | With results taking up to three weeks, the wait has usually almost passed by the time you know |
| Attempts | Up to eight attempts per part within your program eligibility window | Plenty for anyone who changes method; not a reason to sit before you are ready |
| Retake fee | The full part fee again: $310 for Part 1 and $280 for Parts 2 and 3 for members; $445 and $415 for non-members | There is no discounted retake; check whether your employer’s reimbursement covers a second attempt |
| Registration | A new registration opens a 180-day window to schedule and sit; a one-time 75-day registration extension costs $100 | Register when you can see your calendar finishing inside the window |
| Rescheduling | Changes up to 48 hours before the appointment cost $75; a no-show forfeits the registration fee | Book, then move only if you must, and never inside 48 hours |
| Program window | Three years from program approval to pass all parts; a one-time 12-month extension costs $275 and must be bought before the window closes | If the window is tight, consider which part to take next, not only when |
| Results | Official results within three weeks of the exam date; flagged results can take four to six weeks | Plan the next part’s start date around the result, not the exam |
Whether to retake the same part next or move on depends on the window and on the cause. Candidates who failed Part 1 usually do best retaking it next, because Parts 2 and 3 assume its vocabulary and the Standards knowledge is fresh. Candidates who failed Part 2 or Part 3 by a wide margin sometimes benefit from sitting the other part first, particularly when the cause was old-syllabus preparation or a heavy work season, and returning with the new method already proven. Either is fine inside a comfortable window; inside a tight one, the retake usually comes first. The registration section of the CIA guide covers the process step by step, and the cost guide itemizes every fee.
Walking back in: the second attempt in your head
The second attempt is psychologically different from the first. You know what the room looks like and how long 150 minutes feels, which helps, and you know what failing feels like, which does not. Two findings from test-anxiety research are directly useful. In a 2010 study by Jamieson and colleagues, students told before a practice graduate-admissions exam that the physical arousal of test anxiety can improve performance scored higher on the quantitative section than students who were not; the racing heart did not change, but its meaning did. And in Ramirez and Beilock’s 2011 studies, students who spent ten minutes writing about their worries immediately before a high-stakes exam performed better than those who did not, with the largest benefit for the most anxious students.
Turn that into a routine you rehearse during the simulations, not something you try for the first time at the test center. The night before, stop studying by early evening and prepare the logistics: confirmation email, route, identification that matches your CCMS name exactly. On the morning, ten minutes of writing about what you are worried about, then put it away. At the center, when the adrenaline arrives, name it as readiness rather than danger. In the room, use the noteboard to write your pacing checkpoints before question one, and follow the flag-and-move rule you practised. On the review pass, change an answer only when you can name the fact you misread the first time.
Pacing card for the noteboard, Part 1: question 32 by minute 38; question 65 by minute 75; question 100 by minute 118; last question by minute 140; ten minutes to review flags. Parts 2 and 3: question 26 by minute 30; question 52 by minute 60; question 80 by minute 94; last question by minute 110; ten minutes to review flags.
And talk about it. Candidates who tell their manager or a colleague that they are retaking tend to get time and encouragement they did not expect; many managers failed a part themselves. The study schedule guide has practical advice on protecting study time at work, and the exam-day section of the CIA guide covers the test center itself.
Two worked comebacks
The two cases below are illustrative composites, not individuals, built from the patterns this guide describes.
Candidate A: Part 1, scaled score 575. A senior auditor with four years’ experience, A studied about 110 hours from a current review course and answered around 900 questions. The report flagged Foundations and Ethics and Professionalism. A’s memory dump said “charter and mandate questions where two answers both seemed right” and “ran short of time, guessed about eight at the end”. The diagnosis was two causes: the Standards’ vocabulary and pacing. A chose the 45-day calendar: two weeks reading Domains I, II and III of the Standards themselves and writing a one-line rule for every standard in Domains II and III, 300 questions in those two domains with every rationale read, then two weeks of mixed timed sets with a halfway checkpoint written on the noteboard, and two full simulations at the same time of day as the appointment. The miss log showed that half of A’s errors were choosing the option a sensible manager would choose over the one the Standards require. A passed with no score shown, which on a CIA report is the only score that matters.
Candidate B: Part 3, scaled score 480. B, a compliance manager moving into internal audit, had studied from a second-hand review book bought in 2023 and taken the exam in late 2025. The preparation audit found the cause in five minutes: the book was written for the 2019 Part 3, business acumen, information security, IT and financial management, and B had met almost none of the 2025 content. The report flagged Engagement Results and Monitoring and Quality. B took the 90-day calendar, bought a 2025-syllabus course, and started with Results and Monitoring because it is 45 percent of the paper: recommendations and action plans, risk acceptance, follow-up and escalation, learned from the life-of-a-finding guide and the risk acceptance guide alongside the course. B passed on the second attempt with a method that looked nothing like the first.
The difference between the two is the point of this guide. A needed repair and practice; B needed a new start. Neither needed simply more of what had already failed.
Questions candidates ask after a fail
Will I see the same questions again?
Do not plan on it. Each sitting draws from a large pool of questions assembled into different forms, and the domains are what repeat, not the questions. Candidates who try to remember and prepare for specific questions from their first attempt are preparing for the wrong exam, and recording questions breaches the confidentiality agreement every candidate accepts.
How soon can I retake?
The earliest appointment is 30 days after your last attempt at that part. Because results take up to three weeks, most candidates can register as soon as the result arrives; whether they should sit a month later depends on the margin and the cause.
Do I pay the full fee again?
Yes. A retake costs the full part fee: $310 for Part 1 and $280 for Parts 2 and 3 for IIA members in North America, $445 and $415 for non-members. Membership often pays for itself if you were not a member the first time.
Does a failed attempt show anywhere?
Your certificate and digital badge record that you are certified, not how many attempts it took. Employers who verify the credential see its status. The only people who know about a failed part are the ones you tell.
Should I switch review courses?
Only if the course was the cause: an old-syllabus edition, a question bank too small to practise from, or rationales that do not explain the wrong options. Switching courses to escape a method problem changes nothing; switching methods inside the same course usually changes everything. Several providers offer discounts to candidates switching from another course. The review materials section of the CIA guide lists what to compare.
What if my program window is about to close?
You can buy a one-time 12-month extension for $275, but it must be bought before the window closes; if it lapses, you re-enter the program and lose the parts you passed. Check the date in CCMS today, and build your retake calendar backwards from it.
Is it worth continuing after two or three fails?
Usually, yes, provided the method changes between attempts. A pattern of three fails with the same method and the same material says more about the method than about the candidate; a pattern of steadily rising scores says the next attempt is likely to be the one. If the scores are not moving, stop and do the preparation audit honestly before registering again, and consider sitting a different part first to prove the new method on fresh material.
Should I tell my manager?
In most functions it helps. Managers who sponsor the certification want it to succeed, many of them failed a part themselves, and a manager who knows you are retaking can protect study time around busy periods. It also matters practically if your employer reimburses exam fees: ask whether a second attempt is covered before you pay, because policies differ on exactly that point.
Related guides
- The CIA exam, explained — scoring, registration, exam day and every rule in one place.
- The CIA Study Planner — a day-by-day retake plan around your calendar, with a miss log.
- Free CIA practice questions — 156 questions, study and timed modes, and a retry set built from your misses.
- The 2025 CIA exam syllabus — all 62 topics and what the exam is really checking.
- How hard is the CIA exam? — pass rates and why each part fails people.
- Common CIA exam mistakes — the errors that recur.
- The ten hardest CIA topics — and how to master them.
- CIA study hours — how long each part takes to prepare.
- What the CIA costs — every fee, including retakes and extensions.
- Domain II: ethics and professionalism — the most common Part 1 repair job.
Leave a Reply