TL;DR: The IIA’s CIA Challenge Exam is a single-exam route to the Certified Internal Auditor designation, instead of the standard three-part CIA. According to the IIA’s Challenge Exam page, it is open through three eligibility pathways: certified accountants (approved CPA and CA holders, now including 17 additional accounting bodies), qualified CISA holders, and, in a pilot that has now closed to new applications, professionals with 10 or more years of internal audit or related experience. Since June 1, 2026, every pathway sits the same exam: 150 multiple-choice questions in 180 minutes, aligned to the Global Internal Audit Standards. Applications for the accounting and information systems pathways are open year-round, and there are four testing windows a year (February, June, September and November). The IIA’s pages do not state a fee or a passing score, and the passing standard for the updated exam was still being set from the June 2026 window. For CISA holders and CPAs, the route can replace three exams with one. This guide maps who qualifies, what the exam is, and what is still unknown.
If you hold CISA, CPA or CA, the question is not “is there a shortcut?” It is “which lane am I in, and is one hard exam better than three?” The lane map below answers the first part.
Quick Facts
| Item | What we found |
| What it is | A single-exam route to the CIA designation for eligible professionals (IIA) |
| Standard CIA for comparison | Three exam parts covering internal audit fundamentals, engagement and function (IIA) |
| Unified exam effective | June 1, 2026. The same exam for every pathway (IIA) |
| Exam format | 150 multiple-choice questions, 180 minutes (IIA Challenge Exam page) |
| Alignment | The Global Internal Audit Standards (IIA) |
| Testing windows | Four per year: February, June, September, November (IIA) |
| Applications | Accepted year-round for the accounting and information systems pathways (IIA) |
| Pathways | Accounting (approved CPA and CA holders), Information Systems (qualified CISA holders), Professional (10+ years, pilot, closed) |
| New accounting recognition | 17 additional accounting bodies (IIA) |
| Languages | English, French and Spanish are offered now. Simplified Chinese registration opens October 2026 with exams from December 2026, mainland China only (IIA page) |
| Membership | Required for candidates in the UK, Ireland and South Africa (IIA page) |
| Fee | Not stated. The IIA says pricing varies by country and local taxes may apply |
| Passing score | Not stated. The June 2026 window was a data-collection period for setting a passing standard (IIA) |
| Study partner | Becker is the IIA’s exam preparation partner (IIA) |
Everything in this table comes from the IIA’s own pages unless noted. The exam fee, passing score, detailed eligibility requirements and the definition of a “qualified” CISA holder are not stated on the pages we could read, so confirm them with the IIA before you apply.
The Eligibility Lanes
Most coverage of this change lists the news. This guide starts with a map of who can use the route, because eligibility is what decides your options.
| Lane | Who it covers | Status | What the IIA says |
| Accounting | Approved CPA and CA holders, including members of 17 newly recognized accounting bodies | Open, year-round | “Credentialed accountants” can use the route |
| Information systems | Qualified CISA holders | Open, year-round | CISA holders are named as eligible |
| Professional (pilot) | Professionals with 10+ years of internal audit or related experience who do not yet hold the CIA | Closed. Applications ran April 1 to September 30, 2026 | The IIA is still evaluating whether it becomes permanent |
| None of the above | Everyone else | Use the standard CIA | Three exam parts, with education and experience requirements |
Reading the lanes
- CPA and CA: The IIA names approved CPA and CA holders. The list of approved bodies grew by 17. We could not read that list, so check whether your body is on it.
- CISA: The IIA says “qualified CISA holders.” We do not know what “qualified” requires beyond holding the credential. Check the application.
- The pilot: Candidates in the pilot must test in the June, September or November 2026 windows. Applications are closed, so a new applicant cannot join it. The pilot’s future is undecided.
- UK, Ireland and South Africa: Candidates there must be IIA members to apply.
What we could not settle
| Point | Source A | Source B | How we treat it |
| Testing windows | The IIA’s pages list February, June, September and November | A prep provider lists February, June, August and November | We follow the IIA |
| When the CISA lane’s eligibility was defined | The IIA names “qualified CISA holders” | A prep provider says an active CPA, CA or CISA plus the IIA’s work experience requirements | We report that experience requirements may apply and that we cannot see them |
| Whether the exam is easier | The IIA calls it a pathway for “highly qualified professionals” | A prep provider calls difficulty individual | We do not rate difficulty |
What the Exam Is
| Feature | Detail |
| Questions | 150 multiple choice |
| Time | 180 minutes |
| Pathways | One exam for all |
| Standards alignment | Global Internal Audit Standards |
| Level | The IIA says it assesses practical application of internal audit knowledge at an advanced level |
| Windows | February, June, September, November |
| June 2026 | Data-collection window to set the passing standard. Results within eight weeks of the exam date |
What a prep provider reports about the syllabus
Gleim’s analysis (a prep provider, not the IIA) says the new syllabus has five topic sections weighted 20%, 15%, 20%, 25% and 20%, draws mostly from material in CIA Parts 2 and 3, assumes you already know the foundations of Part 1, and replaces basic and proficient knowledge levels with an application-level standard. We could not confirm these figures against an IIA publication, so treat them as reported and check the syllabus on the IIA’s website.
Why this matters for study
If the exam draws mainly on the engagement and function material, then a candidate who has worked in internal audit will recognize it, while a candidate from an external audit or IT background may need to study the Standards and the vocabulary. That is our inference from the reported description, not an IIA statement.
Challenge Exam vs Standard CIA
| Item | Challenge Exam | Standard CIA |
| Number of exams | One | Three parts |
| Who can use it | CPA, CA, qualified CISA, and (pilot, closed) 10+ years’ experience | Anyone meeting education and experience rules |
| Education and experience | Pathway-specific. Detailed requirements not stated on the pages we read | Master’s: 1 year. Bachelor’s: 2 years. Active IAP: 5 years, with 2 within the past 3. No degree: take the IAP exam first |
| Time to complete | One sitting, 180 minutes | Three years from acceptance to complete all parts |
| Fee | Not stated | Application US120memberorUS240 non-member, plus part fees |
| Standards alignment | Global Internal Audit Standards | Not stated on the page we read. The IIA describes the standard CIA as covering fundamentals, engagement and function |
| Passing standard | Being set from the June 2026 window | Not stated on the page we read |
| Languages | English, French, Spanish now | 14 listed, including Arabic, Chinese, German, Japanese, Korean and Spanish, with Vietnamese from August 28, 2026 |
The standard CIA fee math
Our arithmetic, using the IIA’s listed fees.
| Item | Member | Non-member |
| Application | US$120 | US$240 |
| Part 1 | US$310 | US$445 |
| Part 2 | US$280 | US$415 |
| Part 3 | US$280 | US$415 |
| Total | US$990 | US$1,515 |
The member total is 120 + 310 + 280 + 280. The non-member total is 240 + 445 + 415 + 415. The Challenge Exam fee is not published on the pages we read, so we cannot say how much the route saves. The route removes two exams, but that saving depends on a price we do not have. Fees are non-refundable and non-transferable per the IIA’s page, so check before you pay.
Is One Exam Easier Than Three?
Not necessarily, and the IIA does not claim so.
| Factor | What favors the Challenge Exam | What favors the standard CIA |
| Number of sittings | One | Three |
| Study breadth | One syllabus | Three smaller syllabi |
| Question depth | Application-level, advanced practice (IIA description) | Fundamentals, engagement and function across three parts |
| Risk per attempt | One failed attempt costs the whole route’s result for that window | A failed part costs one part |
| Who it suits | Experienced professionals | Early-career candidates building knowledge |
A candidate who passes the standard CIA proves knowledge across three parts, one at a time. A candidate who passes the Challenge Exam proves it in one 180-minute sitting. If you are strong on application but short on time, the single exam may suit you. If you prefer to break the work into pieces, the three-part path may be safer. That is a judgment, not an IIA recommendation.
Timing: Where You Are in the Calendar
Today is October 12, 2026.
| Window | Status |
| February | Next in 2027, subject to the IIA’s schedule |
| June 2026 | Passed. Data-collection window for the passing standard |
| September 2026 | Exact dates not confirmed on the pages we read, so check whether it has passed |
| November 2026 | The next testing window in 2026 |
| Professional pathway pilot applications | Closed September 30, 2026 |
What this means
- If you are already in the pilot: you must test in the June, September or November 2026 windows. The November window is the last remaining one.
- If you are a CPA, CA or CISA holder: applications are open year-round, but we do not know the application-to-exam lead time or the registration deadlines for each window. Check the IIA’s application system before planning a date.
- If the passing standard matters to you: it was being set from the June window. Results for other windows may depend on that process, and we found no published timeline.
Study Plan for a Challenge Exam Candidate
The IIA’s own syllabus is the authority. This plan is ours, for a candidate who has about 12 weeks and an audit or accounting background.
| Weeks | Focus | Output |
| 1 | Download the IIA syllabus. Read the Global Internal Audit Standards overview. Take a baseline practice set | A gap list by syllabus section |
| 2 to 3 | Governance, risk and control vocabulary | Flashcards and a glossary |
| 4 to 6 | Engagement planning, execution and reporting | Worked examples from real engagements |
| 7 to 8 | The internal audit function: strategy, management and quality | A summary of the Standards’ domains |
| 9 | Business knowledge and technology topics, weighted to your gaps | Notes for weak areas |
| 10 | Timed practice: 150 questions in 180 minutes | Score by section |
| 11 | Remediation of the lowest sections | Redo missed questions |
| 12 | Light review and logistics | Exam-day checklist |
If you hold CISA
You already know technology controls and IT audit. Spend more time on the Standards, governance and the management of an audit function. Our guide to CIA vs CISA compares the two careers in depth, and our CISA exam questions can help refresh audit terminology.
If you hold CPA or CA
You know financial reporting and external audit. Spend more time on risk, governance and the internal audit function, and on how internal audit differs from external audit in independence and reporting lines.
Practice Scenarios
These are illustrations, not real people.
Scenario 1: A US CPA with eight years in external audit. She qualifies through the accounting lane. She applies year-round, studies for 12 weeks, and targets the next window. Her risk is the internal audit function material, not the accounting content.
Scenario 2: A CISA holder with six years in IT audit. He is a qualified CISA holder, assuming the IIA’s conditions are met. His risk is financial and operational audit content, so he builds extra time into weeks 4 to 8.
Scenario 3: A professional with 12 years in internal audit and no credentials. The pilot would have fit her, but applications closed September 30, 2026. She should check whether the IIA makes the pathway permanent, and meanwhile consider the standard CIA, using her experience to meet the requirements.
Scenario 4: A chartered accountant from a body that may be newly recognized. The IIA added 17 accounting bodies. He checks the approved list before applying.
Scenario 5: A candidate in the UK with CISA. She must be an IIA member to apply, so she adds the membership fee and lead time to her plan.
An Application Checklist
The IIA’s application system is the authority on steps. This checklist is ours, built from what the IIA’s pages say, and it is meant to stop avoidable delays.
| Step | What to do | Why it matters |
| 1 | Identify your lane: accounting, information systems, or neither | The route is closed to you if you are in neither lane and the pilot is closed |
| 2 | Confirm your credential qualifies: your CPA or CA body is on the approved list, or your CISA is in good standing | The IIA recognizes 17 additional accounting bodies, so the list changed recently |
| 3 | Check country rules | Candidates in the UK, Ireland and South Africa must be IIA members |
| 4 | Gather proof of credential and identity | The standard CIA requires proof of education and a government-issued photo ID, and the Challenge route likely needs comparable proof. We could not confirm the exact documents |
| 5 | Submit the application | Applications are accepted year-round for the accounting and information systems pathways |
| 6 | Wait for approval, then register for a window | The standard CIA opens exam registration only after approval, and the Challenge route may work similarly. We could not confirm |
| 7 | Choose a window and book | February, June, September or November. Check availability early |
| 8 | Prepare with the current syllabus | The updated syllabus is on the IIA’s website |
A note on lead time
We could not find how long approval takes or how far ahead of a window you must apply. If you want the November window, ask the IIA before you assume it is still reachable. If you are planning for February or June 2027, leave a buffer for approval, booking and any membership steps.
Common Mistakes
| Mistake | Why it costs you | What to do instead |
| Assuming the route is open to everyone with experience | The professional pathway was a pilot and closed on September 30, 2026 | Check whether the IIA makes it permanent, and use the standard CIA meanwhile |
| Studying from the old Challenge Exam syllabus | The exam changed on June 1, 2026 and is now aligned to the Global Internal Audit Standards | Use the updated syllabus on the IIA’s website |
| Assuming the fee is lower than the standard route | The IIA does not state a Challenge Exam fee | Wait for the published amount before budgeting |
| Treating “CISA holder” as automatically qualified | The IIA says “qualified,” and we could not read the conditions | Confirm your status in the application |
| Ignoring the membership rule abroad | Candidates in the UK, Ireland and South Africa must be members | Add membership to your plan and budget |
| Booking the exam before understanding the passing standard | The standard was being set from the June 2026 window | Check the IIA’s current guidance on results and scoring |
| Assuming one exam means less study | The exam is described as advanced and application-level | Plan about as many study weeks as you would for the hardest part of the standard CIA |
Where This Fits Among Audit and Risk Credentials
The Challenge Exam is one route to a well-known credential. If you are weighing other options, these guides cover them.
- If you hold CISA and are weighing a risk or governance move, our comparison of CRISC vs CISM lays out the ISACA options.
- If your work is financial crime and fraud, our comparison of CAMS vs CFE and our Certified Fraud Examiner guide cover the neighboring credentials.
- If you are mapping audit and compliance exams across security, our overview of cybersecurity certification exams for audit and compliance is the place to start.
- For practice resources across the catalog, start with our practice tests hub.
We omit salary figures from this post. We did not find a source that isolates CIA holders who took the Challenge route from other audit professionals, and a general average would mislead you.
What We Don’t Know Yet
We would rather list gaps than guess.
- The fee. The IIA’s Challenge Exam page states no amount, only that pricing varies by country and local taxes may apply.
- The passing standard. The June 2026 window was a data-collection period to set it. We found no published standard.
- What “qualified CISA holder” requires. The IIA uses the phrase, and we could not read the detailed conditions.
- The list of 17 newly recognized accounting bodies. We could not read it.
- The detailed experience requirements per pathway. One prep provider mentions work experience requirements, and the IIA pages we read do not detail them.
- Whether the professional pathway becomes permanent. The IIA says it is evaluating the pilot.
- Syllabus weights. A prep provider reports five sections, and we did not verify them against an IIA document.
- Results timing beyond June. The IIA says June candidates receive results within eight weeks. We found no timeline for other windows.
- Application lead times. We do not know how far ahead of a window you must apply.
FAQS
What is the CIA Challenge Exam?
It is a single-exam route to the Certified Internal Auditor designation for eligible professionals, offered by the IIA as an alternative to the standard three-part CIA.
Who is eligible?
The IIA names approved CPA and CA holders (with 17 additional accounting bodies now recognized) and qualified CISA holders. A pilot for professionals with 10 or more years of experience has closed to new applications.
How long and how hard is the exam?
The IIA’s page lists 150 multiple-choice questions in 180 minutes, aligned to the Global Internal Audit Standards. The IIA does not rate difficulty.
What changed on June 1, 2026?
Every pathway now takes the same unified exam, aligned to the Global Internal Audit Standards.
When can I take it?
There are four windows a year: February, June, September and November. Applications for the accounting and information systems pathways are accepted year-round.
How much does it cost?
The IIA’s page does not state a fee. Pricing varies by country, and local taxes may apply.
What is the passing score?
Not stated. The June 2026 window was used to set a reference passing standard for the updated exam.
Is the pilot pathway still open?
No. Applications ran April 1 through September 30, 2026. The IIA is still evaluating whether it becomes permanent.
Do I need to be an IIA member?
Candidates in the UK, Ireland and South Africa must be members to apply, according to the IIA’s page.
Which languages are available?
English, French and Spanish now. Simplified Chinese registration opens October 2026, with exams from December 2026, in mainland China only.
How does the cost compare with the standard CIA?
The standard CIA lists US990formembersandUS1,515 for non-members, including the application fee and three parts. The Challenge Exam fee is not published, so we cannot compare directly.
Where is the official information?
The IIA’s CIA Challenge Exam page carries the eligibility, structure and dates.
