I Pass the CIA Exam!
Shares

IIA Certifications: CIA, CRMA, and IAP

Most accountants have heard of the CIA certification, but you may not know that the IIA offers specialty certifications, too.

Certified Internal Auditor (CIA) Certification

The IIA’s CIA certificate is the general designation for internal auditors and is the most globally recognized. We primarily cover the Certified Internal Auditor exam on this site. To learn more about the CIA, start with Is the CIA Certification Worth It? Internal Audit Benefits of the CIA Certificate?

The CIA exam itself is a three-part exam. You can check out how the CIA exam difficultly compares to other credential exams in this article.

Specialty IIA Certifications – A Brief History

The IIA offers several specialty certifications in the auditing field. In the past, these certifications had single-part examinations, and some could be tackled after passing only one or more sections of the CIA exam as a prerequisite. However, the IIA has made a lot of changes to these certifications in the last few years.

As of 2025, the IIA only offers two additional internal auditor certifications: the CRMA and the Internal Audit Practitioner. Although the IIA lists several specialty certifications on its website, some of those certifications (like the CGAP, CFSA, and CCSA) have been discontinued. Others, like the CRMA certification, saw some major changes recently.

So please read the following information carefully if you’re thinking about pursuing one of these certificates to boost your career.

Current Specialty IIA Certifications

Overall, here’s what you need to know about the IIA’s other current certifications.

CRMA ®

The Certification in Risk Management Assurance (CRMA) is a globally recognized designation introduced in 2013. It demonstrates that candidates can identify key risk management and governance processes in their organizations. Plus, CRMA certificate holders know how to present that information to audit committees and management.

However, the CRMA program changed in mid-2021, and again in 2025. To read about the current exam and its requirements, click here.

Who is the CRMA for?

Overall, the CRMA is most useful for internal auditors wishing to branch out into risk management. In other words, is a complementary certification to the CIA rather than a replacement for it. The CRMA pass rate is about the same as the CIA exam Part 1 pass rate, so it is not an easy test.

What are the CRMA educational requirements?

In the past, you had to pass Part 1 of the CIA exam before you could sit for the CRMA exam. Then, for a time, you had to have the whole CIA designation. That meant you had to meet all the CIA exam requirements to take the CRMA. However, this is no longer the case. Now, there is no educational requirement. However, there are experience requirements based on your level of education.

What are the CRMA experience requirements?

To receive the CRMA designation, you must have a certain amount of work experience in the auditing field. However, you can take the exam either before or after you meet these requirements. Thus, they aren’t prerequisites for sitting for the test. How much work you need depends on your education level.

  • Master’s degree or equivalent: 1 year
  • Bachelor’s degree or equivalent: 2 years
  • Active IA practitioner designation holder: 5 years
  • High school diploma, associate’s degree, or equivalent: 5 years

For the last two categories, two out of the required five years of experience must be within the past two years.

How much does the CRMA certification cost?

As of 2025, here’s how much you’ll pay to take the CRMA exam, not counting exam study materials.

  IIA Member IIA Non-Member
Application fee $100 $220
Exam fee $465 $610

 

If you take the exam online instead of in a testing center, you’ll also pay a $115 “convenience” fee.

What is on the CRMA exam?

Overall, you’ll be tested on the following topics:

  1. Internal audit roles and responsibilities (20%)
  2. Risk management governance (25%)
  3. Risk management assurance (55%)

Take a look at the official IIA CRMA exam syllabus to see the key learning competencies you’ll be tested on in each topic. As of 2025 syllabus is located here.

How do I study for the CRMA exam?

As with all accounting exams, I do not recommend you try to take the test without using dedicated study materials. For now, only one CRMA study guide from the IIA Research Foundation is available. My CRMA review materials and study guide article also lists where you can get supplementary materials.

How do I maintain my CRMA certification?

To maintain your status as an active CRMA, you’ll need to complete a certain number of continuing professional education (CPE) hours each year. The requirement is likely 20 hours, as with the CIA and IAP, but the IIA CPE page is currently vague about the exact number of hours required. You’ll also need to pay an annual fee of $20 for IIA members and $120 for non-members.

Internal Audit Practitioner

The IIA has a path for professionals new to auditing, too. It demonstrates that holders have a foundational knowledge of the Global Internal Audit Standards. Once candidates have successfully met all requirements, they are eligible to enter the CIA program.

Who is the Internal Audit Practitioner designation for?

The Internal Audit Practitioner (IAP) designation is for students, beginning auditors, rotational auditors, and any other professionals who plan to later pursue the CIA. In fact, the exam for the IAP designation is the CIA Part 1 exam. Once a candidate passes this exam, they only have to pass Parts 2 and 3 to get the CIA credential.

So what is the point of an Internal Audit Practitioner designation if it’s a stepping stone to the CIA? Essentially, it gives you an officially-recognized credential even if you only pass Part 1 of the CIA exam. Even if you never take or pass Parts 2 and 3, you’re still an Internal Audit Practitioner.

What are the Internal Audit Practitioner requirements?

There are no education or experience requirements to enter the Internal Audit Practitioner program. You simply need a government-issued ID and application. Once you register, you’ll have two years to study the materials and pass the exam. Additionally, you do not need to be an IIA member, but if you are, you’ll pay lower fees.

How much does the IAP certification cost?

For the IAP, you’ll need to pay one fee for your application and another to take the exam. The amount of the fee will depend on your IIA member and student status.

  Student IIA Member IIA Non-Member
Application fee $65 $120 $240
Exam fee $245 $310 $445

As with the CRMA, taking the exam online will add an additional $115 “convenience” fee. Note that this does not take into account any study materials you may need to purchase.

What is on the Internal Audit Practitioner exam?

As stated, the IAP exam now aligns with the content of the revised 2025 CIA Part 1 exam syllabus on internal audit fundamentals. For English test takers, this change will begin on May 28, 2025. Those taking the test in other languages will see the switch from the 2019 syllabus to the 2025 syllabus happen later in the year. For Chinese and Arabic speakers, it won’t happen until 2026. Check the IIA’s IAP 2025 FAQ page for exact dates.

Based on the 2025 syllabus, you’ll be tested in the following four domains.

  1. Foundations of Internal Auditing (35%)
  2. Ethics and Professionalism (20%)
  3. Governance, Risk Management, and Control (30%)
  4. Fraud Risks (15%)

Overall, just like CIA Part 1, the IAP exam consists of 100 multiple choice questions taken over a two-hour period. You’ll have a choice of going to a testing center or taking it online at home.

How do I study for the Internal Audit Practitioner exam?

When you enroll in the program, you’ll receive 100 self-study practice questions. However, you should not rely only on these to study. Instead, you should act as though you are preparing to take the CIA Part 1 exam. This means choosing the best CIA exam prep course for your needs. If you’re certain you want only the IAP certification, you could buy review materials only for Part 1. However, if you want to eventually complete the CIA certification, you’ll typically save money by purchasing all three parts at once.

Fortunately, you can follow the steps in my guide on How to Pass the CIA Exam Part 1 on the First Try to do the same for your IAP exam!

How do I maintain my Internal Audit Practitioner certification?

In the past, the IAP credential expired after three years. However, as of May 28, 2025, it is now a permanent certification. That means you’ll need to earn 20 hours of continuing professional education each year and, beginning in 2026, complete an annual certification renewal to remain active. Currently, you don’t need to pay a fee to renew.

Although the credential doesn’t expire, be aware that the waiver for completing Part 1 of the CIA exam does expire after a maximum of four years. If you receive the IAP designation after May 27, 2025, you have four years to enroll in the CIA program. However, if you received it before that date, you have until May 31, 2026 to enroll. If the deadline passes, you are still an IAP. But you will need to take the CIA Part 1 exam again to become a CIA.

Past Specialty IIA Certifications

Unfortunately, the IIA no longer offers the following certifications. We list them here for informational purposes. If you currently hold one of these titles, it will remain valid and the IIA will continue to support you through training. However, there will be no program extensions. For more information on these former credentials, see the IIA’s certification transition page.

CGAP ®

CGAP stands for Certified Government Auditing Professional. It was a designation for auditors working in the public sector at the federal, state, or local levels, as well as in governmental agencies. However, the IIA stopped allowing new candidates into the CGAP program in late 2018.

CFSA ®

CFSA stands for Certified Financial Services Auditor. It was for internal audit professionals working in banks, insurance companies, and financial services.

As with CGAP, the IIA hasn’t accepted new candidates since 2018. Instead, this title has now been transitioned into the Financial Services for Internal Auditors certificate, which is an “on-demand learning package.” There are no prerequisites—you simply pay for the course, study the online modules at your own pace, and take an online exam. If you pass, you receive a PDF certificate and a digital badge. However, it’s more of a continuing professional education course than a credential.

CCSA ®

CCSA stands for Certification in Control Self-Assessment. It is the certification for control self-assessment practitioners. It demonstrates a candidate’s knowledge of important CSA fundamentals, processes, and related topics such as risk, controls, and business objectives.

Like the CGAP and CFSA, the CCSA program is closed to new candidates. According to the IIA, the CCSA exam content is now included in the CRMA exam update.

QIAL

The QIAL, or Qualification in Internal Audit Leadership, was the top credential for internal audit executives. The QIAL certification was discontinued in 2022.

Do I Need a Specialty IIA Certification?

Depending on your time commitment and career aspiration, a specialty IIA certificate may or may not benefit you. For most people who are interested in general internal audits, the CIA certification is sufficient, in my opinion. However, if you don’t mind taking one extra exam to get additional recognition in risk management, it could be beneficial in the longer term to go after the CRMA.

Also, if you don’t qualify for the CIA program yet, you can start with the Internal Audit Practitioner designation. It could be a good way to get your career started on the right foot, and it’s a smaller commitment. You’ll check the CIA exam Part 1 off your list and get an official certification on the way.

Although these certifications aren’t right for every career, here are some real-world benefits you might see.

  • Improved career mobility
  • Enhanced professional credibility
  • Broadened skill set
  • Better personal confidence

See How You Can Get Certified!

Overall, our main focus on this website is the CIA certification. However, given the demand from readers, we have started to cover the CRMA certification as well. We hope to add information to the other IIA certifications in the near future.

More Questions?

If you are interested in the CIA certification, please sign up for my mini-course, which is completely free. You can learn more about this mini e-course here.

For Your Reference

Here are the links to the current official IIA certifications:

  • CRMA (Certification in Risk Management Assurance)
  • IAP (Internal Auditor Practitioner)

 

About the Author Stephanie

I am the author of How to Pass The CPA Exam (published by Wiley) and the publisher of this and several accounting professional exam prep sites.

follow me on:

Leave a Comment:

14 comments
Add Your Reply