CIA Work Experience Requirement 2026: Rules & Proof

CIA Work Experience Requirement

The CIA work experience requirement is the IIA rule that every candidate must complete verified internal audit or equivalent experience before the Certified Internal Auditor designation is awarded. Years required range from 12 to 60 months depending on education level, and the experience must be signed off by a qualifying verifier inside CCMS.

Table of contents

• What counts as CIA work experience
• Years required by education level
• Qualifying roles and sectors
• Who can verify the experience
• How to submit experience in CCMS
• Verification timeline and post-approval steps
• Special cases: CPA, Challenge Exam, and IAP
• Common rejection reasons
• FAQ

What counts as CIA work experience

Qualifying experience covers internal auditing, external auditing, quality assurance, compliance, internal control, risk management, and other audit or control-adjacent roles, as set out in the CIA eligibility pillar. The work must show professional judgement, not purely clerical tasks. The IIA accepts full-time and part-time roles, with part-time months prorated against a standard 35-hour week.

A trainee named Priya moving from finance reconciliations into a risk-control self-assessment project is a clear example of experience that begins to count. Routine voucher entry by the same trainee, by contrast, does not, which is why the CIA course overview stresses control-oriented duties.

Years required by education level

The CIA work experience requirement scales inversely with education. Candidates mapping their timeline often cross-check it against the CIA exam structure so study and experience windows line up. The table below shows the 2026 rule set.

Qualifying roles and sectors

The IIA accepts experience from any sector, including public, private, government, and not-for-profit, and Eduyush's Internal Audit Practitioner route often serves candidates without a degree. What matters is function, not industry. Roles centred on control testing, audit planning, fieldwork, reporting, or governance reviews are accepted.

• Internal audit (staff, senior, manager, head of audit)
• External audit for a public accounting firm
• Quality assurance and QAIP roles
• Risk management and enterprise risk assessment
• Compliance testing and SOX control work
• Information systems audit and IT general controls, often compared in the CIA vs CISA comparison

Who can verify the experience

Only specific people can sign off the CIA work experience, and the CIA application process guide sets out how verifier details feed into CCMS. Verifiers must know the candidate's work directly and should not be a relative. The IIA expects verifiers to stand behind the content, dates, and hours reported.

• A current or former supervisor
• An active CIA holder familiar with the work
• A peer holding a recognised professional credential (CPA, CA, ACCA, CISA, CMA)
• A university professor for supervised academic audit work, where permitted

A CFO verifying a staff auditor's 26 months of SOX testing is a typical pattern; a cousin at another firm is not.

How to submit experience in CCMS

Candidates submit the CIA work experience requirement through the IIA Candidate Certification Management System (CCMS). The process follows the same sequence covered in the CIA exam registration walkthrough, recording employer details, dates, hours, and a verifier contact.

1. Sign in to CCMS and open the active CIA application.
2. Select the Experience tab and click Add Experience.
3. Enter employer, job title, start and end dates, and total hours.
4. Describe duties in audit, assurance, control, or risk language.
5. Add the verifier's full name, title, organisation, and email.
6. Submit the record so CCMS emails the verifier a secure confirmation link.

Verification timeline and post-approval steps

Verification usually completes within five to ten business days after the verifier responds. Candidates may sit exam Parts while experience is under review, and Eduyush tutors often sequence this against the three-part CIA exam structure to avoid idle waiting periods. The IIA grants up to seven years from application approval to complete the programme.

After approval, CCMS updates the candidate record and the IIA issues the CIA certificate and digital badge. Continuing Professional Education then applies from the calendar year after certification.

Special cases: CPA, Challenge Exam, and IAP

Some candidates follow non-standard routes, and the CIA Challenge Exam page documents the April 2026 window for senior internal auditors. Active CPA, CA, and ACCA members are treated as bachelor-equivalent, which caps the experience requirement at 24 months. Internal Audit Practitioner holders commonly stack five years of experience before upgrading to full CIA status through the IAP upgrade pathway.

Common rejection reasons

Applications are usually delayed, not denied, but rejections do happen, and the CIA eligibility checklist helps candidates catch issues before submission. Most problems trace back to vague role descriptions, non-independent verifiers, or mismatched dates between CCMS and the verifier response.

• Duties written in generic finance language without audit or control terms
• Verifier is a relative or reports to the candidate
• Total hours do not reconcile with the stated employment period
• Verifier email bounces or the confirmation link expires unused
• Part-time hours claimed as full-time

FAQ

Do candidates need work experience before taking the CIA exam?

No. Candidates may sit and pass all three CIA exam parts before completing the experience, and the CIA application process guide explains how CCMS holds the record until experience is verified. The credential is awarded once both exams and experience are on file, within seven years of application approval.

Does an internal audit internship count toward the CIA requirement?

Paid internships in internal audit, external audit, or risk functions usually count if hours and duties are documented and signed off by a qualifying supervisor. Unpaid or short shadowing placements are commonly excluded. Eduyush's CIA course overview shows how to map internship duties to IIA language.

Can a CPA or ACCA holder reduce the CIA work experience requirement?

Active CPA, CA, and ACCA members are treated as bachelor-equivalent for CIA eligibility, which sets the requirement at 24 months of qualifying work. The underlying audit, control, or risk duties still need to be verified inside CCMS, using the steps laid out in the CIA eligibility pillar.

Who qualifies as a verifier for CIA experience?

A current or former supervisor, an active CIA, or a peer holding a recognised credential such as CPA, CA, ACCA, CISA, or CMA may verify the work. The verifier must know the candidate's duties directly and should not be a relative or a direct report of the candidate.

How long does CIA experience verification take?

Most verifications close within five to ten business days after the verifier opens the CCMS confirmation email. Delays commonly trace to spam-filtered emails, expired links, or duty descriptions that need clarification. Candidates using the CIA registration walkthrough often pre-brief their verifier to cut turnaround time.

What happens if the verifier leaves the company?

The IIA accepts a former supervisor as a verifier, so a departed manager can still confirm the experience. Candidates should use the verifier's personal or new work email in CCMS. A second qualifying professional, such as an active CIA peer, can step in where the original supervisor is unreachable.

Does the CIA Challenge Exam skip the work experience rule?

The April 2026 route documented in the CIA Challenge Exam page shortens the testing path for senior internal auditors but still requires verified work experience inside CCMS. Candidates submit employer details and a qualifying verifier in the same way. Years required follow the standard education-based scale.

Source: The Institute of Internal Auditors, CIA eligibility and experience rules (verified May 2026).