CIA Part 1 Syllabus 2026: Domains, Weights, and Question Types

CIA Part 1 Syllabus 2026

The CIA Part 1 syllabus covers Internal Audit Fundamentals across four domains: Foundations of Internal Auditing (35%), Independence and Objectivity (20%), Proficiency and Due Professional Care (30%), and Quality Assurance and Improvement Programme (15%). This 2.5-hour exam tests 125 multiple-choice questions aligned to the 2024 Global Internal Audit Standards (GIAS).

What Is CIA Part 1?

CIA Part 1, officially titled Internal Audit Fundamentals, is the first of three exams required to earn the Certified Internal Auditor (CIA) designation. It establishes foundational knowledge of internal audit principles, governance, risk management, and the professional standards that guide internal audit practice worldwide.

Part 1 is often considered the broadest of the three CIA exams. While CIA Part 2 focuses on practice and Part 3 covers business knowledge, Part 1 tests your understanding of why internal auditing exists and the standards framework underpinning the profession. The exam is administered by the Institute of Internal Auditors (IIA) through Pearson VUE test centres globally.

CIA Part 1 Exam Structure: Format, Duration and Scoring

The CIA Part 1 exam contains 125 multiple-choice questions to be completed in 2.5 hours (150 minutes). The exam is computer-based and available year-round at Pearson VUE centres. Understanding the format helps you plan time management and study strategy effectively.

CIA Part 1 Syllabus Domains and Weights

The CIA Part 1 syllabus is divided into four domains, each carrying a specific weight that determines how many questions appear from that topic. The 2025 syllabus restructured the exam from three domains to four, aligning content with the new Global Internal Audit Standards (GIAS) issued by the IIA.

Domain 1: Foundations of Internal Auditing (35%)

Domain 1 carries the highest weight at 35%, translating to approximately 44 questions. It covers the purpose, authority, and responsibility of the internal audit function, including alignment with the Global Internal Audit Standards (GIAS) and the IIA’s Mission and Code of Ethics.

Key topics include:

• Purpose and mission of internal auditing as defined by the IIA
• The COSO Internal Control Framework and its five components
• Enterprise Risk Management (ERM) concepts and frameworks
• Governance principles and the role of internal audit in governance
• IIA Code of Ethics: integrity, objectivity, confidentiality, and competency
• Mandatory and Recommended Guidance under the IPPF/GIAS
• Risk appetite versus risk tolerance
• Three Lines Model (formerly Three Lines of Defence)

Domain 2: Independence and Objectivity (20%)

Domain 2 accounts for 20% of the exam (approximately 25 questions) and focuses on how the internal audit function maintains its independence at the organisational level and how individual auditors preserve their objectivity.

Key topics include:

• Organisational independence: reporting lines, board oversight, and functional reporting to the audit committee
• Individual objectivity: avoiding conflicts of interest and bias
• Impairments to independence and objectivity – identification and mitigation
• Safeguards including rotation policies, disclosure requirements, and scope limitations
• The Chief Audit Executive’s (CAE) role in protecting independence
• Dual reporting relationships and their significance

Domain 3: Proficiency and Due Professional Care (30%)

Domain 3 is the second-largest domain at 30% (approximately 38 questions). It tests whether candidates understand the competencies required of internal auditors and the standard of care expected in performing audit engagements.

Key topics include:

• Knowledge, skills, and competencies required of internal auditors
• Continuing professional development (CPD) requirements
• Due professional care in planning and performing engagements
• Exercising professional scepticism and professional judgement
• Competency in fraud awareness – recognising red flags, not necessarily investigating
• Use of technology and data analytics in auditing
• Supervision and review processes for audit work

Domain 4: Quality Assurance and Improvement Programme (15%)

Domain 4 carries 15% of the exam weight (approximately 19 questions). It covers the requirements for internal and external quality assessments of the internal audit activity, and how audit functions drive continuous improvement.

Key topics include:

• Internal assessments: ongoing monitoring and periodic self-assessments
• External assessments: independent validation at least every five years
• Reporting results to the board and senior management
• Conformance with the GIAS and use of “conforms with the Global Internal Audit Standards” statement
• Continuous improvement of the internal audit activity
• Key performance indicators (KPIs) for internal audit effectiveness

What Changed in the CIA Part 1 Syllabus (2025 vs 2019)?

The IIA released a substantially revised CIA Part 1 syllabus effective January 2025, replacing the 2019 version. The most significant change is the restructuring from three domains to four, driven by the adoption of the new Global Internal Audit Standards (GIAS) which replaced the legacy International Professional Practices Framework (IPPF).

How to Prepare for CIA Part 1

Passing CIA Part 1 requires a structured approach due to its broad syllabus and historically low pass rate of around 40–45%. Here is a recommended preparation framework:

Most candidates report needing 150–200 hours of dedicated study for Part 1, spread over 2–4 months depending on prior audit experience.

Related CIA Resources

Continue building your CIA knowledge with these related guides from Eduyush:

• CIA Certification 2026: Complete Guide – Pillar overview of the entire CIA programme
• CIA Part 2 Syllabus: Practice of Internal Auditing
• CIA Eligibility Requirements
• CIA Exam Fees Breakdown
• CIA Exam Pass Rates
• COSO Framework Explained
  
• Best CIA Review Courses

Frequently Asked Questions about CIA Part 1