CIA Part 1 - Internal Audit Fundamentals
Standards, ethics, governance, risk, control, and fraud fundamentals. 125 questions in 150 minutes.
Start studying
Start your CIA Part 1 - Internal Audit Fundamentals practice
MiloPrep will cover Part 1 - Internal Audit Fundamentals with adaptive practice mapped to the published content areas.
Who should prioritise Part 1 - Internal Audit Fundamentals
Fits you if
- Internal auditors, risk and controls staff, and governance professionals who want the globally recognised internal audit certification.
Skip if
- Candidates who need a CPA licence for external attest, or who want a corporate FP&A programme such as CMA rather than assurance work.
Format at a glance
Standards, ethics, governance, risk, control, and fraud fundamentals. 125 questions in 150 minutes. Standards, ethics, governance, risk, control, and fraud fundamentals. 125 questions in 150 minutes.
Question format
Multiple choice
Duration
150 min
Single sitting
Questions
125
Sessions
1
CIA Part 1 - Internal Audit Fundamentals topic weights
Published weight ranges or scored-question allocations from the awarding body. Use them to budget study time - larger areas deserve calendar priority.
Part 1 - Internal Audit Fundamentals
| Topic | Weight |
|---|---|
| Foundations of Internal Auditing | 35% |
| Ethics and Professionalism | 20% |
| Governance, Risk Management, and Control | 30% |
| Fraud Risks | 15% |
Sample Part 1 - Internal Audit Fundamentals study sequence
Select a stage to see its purpose. This is not an official timetable. Repeat or shorten stages according to your baseline, work calendar, and timed practice results.
Foundations of Internal Auditing
Weight 35%. Memorising Standard numbers without practising scenario questions that ask which Standard or principle applies.
Keep your primary course aligned with the current syllabus, then use practice evidence to decide whether this stage needs more repetition.
Where CIA practice should focus
Three high-leverage drills. If practice time is short, start here.
Standards application stems
Ask which Standard or principle governs the scenario. Number recall without application underperforms.
Engagement planning decisions
Practise objectives, scope, and resource choices before fieldwork technique drills.
Results monitoring and quality
Part 3 puts heavy weight on engagement results and monitoring. Build scenarios around follow-up and QAIP.
Navigate this exam
Part 1 - Internal Audit Fundamentals learn articles(15)
Full CIA learn index →- Foundations of Internal AuditingFoundations of Internal Auditing has a published allocation of 35% in Part 1 - Internal Audit Fundamentals: treat it as a decision rule plus timed practice, not vocabulary alone. Standards, ethics, governance, risk, control, and fraud fundamentals. 125 questions in 150 minutes.
- Ethics and ProfessionalismEthics and Professionalism has a published allocation of 20% in Part 1 - Internal Audit Fundamentals: treat it as a decision rule plus timed practice, not vocabulary alone. Standards, ethics, governance, risk, control, and fraud fundamentals. 125 questions in 150 minutes.
- Governance, Risk Management, and ControlGovernance, Risk Management, and Control has a published allocation of 30% in Part 1 - Internal Audit Fundamentals: treat it as a decision rule plus timed practice, not vocabulary alone. Standards, ethics, governance, risk, control, and fraud fundamentals. 125 questions in 150 minutes.
- Fraud RisksFraud Risks has a published allocation of 15% in Part 1 - Internal Audit Fundamentals: treat it as a decision rule plus timed practice, not vocabulary alone. Standards, ethics, governance, risk, control, and fraud fundamentals. 125 questions in 150 minutes.
- IIA Standards Scenario MappingPart 1 fundamentals: map a scenario to the applicable Standard or principle — not memorised numbers alone.
- Independence and Objectivity ThreatsEthics-and-professionalism stems that ask which safeguard applies when independence is threatened.
- Governance Roles and Assurance LinesBoard, management, and internal audit roles inside Part 1 governance weight.
- ERM and Control Framework IntegrationHow risk and control frameworks interact in Part 1 scenario questions.
- Fraud Risk Indicators and ResponsesFraud-risk domain drills — indicators, responsibilities, and escalation paths.
- Assurance vs Consulting Engagement TypesEngagement-type distinctions that change objectivity and scope answers on Part 1.
- Code of Ethics Application CasesIntegrity, objectivity, confidentiality, and competency applied to messy workplace facts.
- Control Types Preventive vs DetectiveClassify controls correctly before recommending testing or reliance approaches.
- Organizational Independence StructuresReporting lines that protect or impair organisational independence — a Part 1 frequent miss.
- Risk Appetite vs Risk Tolerance LanguagePrecise governance language that Part 1 stems use to distinguish appetite, tolerance, and capacity.
- Foundations Practice Mixed SetsMixed Standards/ethics/governance sets that mirror Part 1’s 125-question pace.
How to read a CIA engagement-planning stem
Setup
A Part 2 question describes a new system implementation, management’s requested advisory scope, and a residual assurance need. Choices differ on how to set objectives.
How to read it
Separate advisory from assurance before you pick procedures. The keyed answer usually follows from the engagement’s purpose and risk focus, not from a favourite audit technique.
Takeaway
CIA Part 2 rewards planning logic. Procedures come after purpose.
Troubleshooting common CIA study problems
If your mocks are stuck, match the symptom and change the next week. do not just do more of the same questions.
Using 2019 part names and failing new mocks
Likely cause
Content reshuffle under the 2025 syllabus.
Next step
Print the 2025 domain map and re-file every note under the new part titles.
Part 2 fieldwork feels fine but scores lag
Likely cause
Under-studying Engagement Planning’s 50% weight.
Next step
Make planning scenarios half of every Part 2 study block.
Part 3 feels unfamiliar
Likely cause
Still studying old business-acumen topics as if they were Part 3.
Next step
Switch to function operations, quality, and results monitoring drills.
Part 1 - Internal Audit Fundamentals study-week checklist
- List published weights for Part 1 - Internal Audit Fundamentals
- Drill Multiple choice under partial timing
- Attack failure mode: Memorising Standard numbers without practising scenario questions that ask which Standard or princip
- Run one block near 150 minutes
- Log misses and retest within 72 hours
If using 2019 part names and failing new mocks, Print the 2025 domain map and re-file every note under the new part titles.
Get the CIA practice library
Sign up for MiloPrep for adaptive CIA drills in the app.
- Mapped practice across every CIA sitting
- Weak-area targeting instead of random question dumps
- One expanding study system across professional exams
Create your account to start practicing.
Part 1 - Internal Audit Fundamentals FAQs
- How many parts is the CIA exam?
- Three parts under the 2025 syllabus: Internal Audit Fundamentals, Internal Audit Engagement, and Internal Audit Function.
- How long is each CIA part?
- Part 1 is 125 questions in 150 minutes. Parts 2 and 3 are 100 questions in 120 minutes each.
- Did the CIA syllabus change in 2025?
- Yes. Part titles and domain weights were revised. Confirm the active IIA syllabus PDF before you study from older outlines.
- Does MiloPrep cover all three CIA parts?
- Yes. The all-access subscription includes practice for all three parts.
Next steps
Part 1 - Internal Audit Fundamentals practice
Blueprint explorer and sample questions for Part 1 - Internal Audit Fundamentals.
Open practiceCIA exam hub
Full CIA overview, parts, and study sequence.
Open hubHow to study
A practical study approach for CIA candidates.
Read guide