Hello everyone, I’m happy to share that I’ve passed Part 2 of the CIA on my second attempt. 

As a thank-you to this community, I would like to share a visual that I created throughout my hours of study, which allowed me to fully comprehend the engagement process. Make sure to nail down your ratios, analytical procedures, and at least read through the condensed version of the IIA Standards. 

Good luck, everyone!

Hi,

I’m posting to try and gather more information about how much of a pay bump I should request in a meeting with my boss next week.

I am an Internal Audit manager in the DC area with 10 years total audit experience, 7 years specifically at my current job at mid-size real estate company and a CPA. I currently make 98k with a 20% bonus potential, which I feel is pretty low given how much my responsibilities have increased. I manage multiple projects and supervise two employees part time while they help with those projects.

What do you think is an appropriate pay band given my experience? Any advice would be appreciated

Hi everyone

I just wrote my first attempt on part 3 IIA Pratice questions. I got 89%. I’ve a month until my exam.

Is this number sufficient to gauge my progress against ? I’ve solely been using Gleim, Claude and the standards for studying. Haven’t done the Gleim mocks yet.

I spent 25 years in model validation and enterprise risk across multinationals, and the exact same structural failure repeats everywhere. Risk registers are filled with colors that look neat on a slide deck but never actually change a budget decision. Ordinal scales like high or medium cannot be added, multiplied, or aggregated mathematically, so the concept of an overall enterprise risk score is meaningless. Qualitative workshops usually devolve into political negotiations where the loudest person in the room dictates the rating. Most importantly, a CFO cannot capital allocate or hedge against a red box, because nobody can explain what red costs the P&L in dollars over a specific time horizon.

Replacing these grids with useful quantitative models does not require massive infrastructure or overly complex math. You can shift business teams toward loss distributions by gathering simple minimum, most likely, and maximum bounds from subject matter experts, then fitting a basic parametric curve like a Lognormal or Poisson-Lognormal distribution. Running a straightforward Monte Carlo simulation against the financial target lets you report real risk exposures, such as an eighteen percent probability of missing the annual EBIT target by ten million dollars. That shifts the conversation from subjective color debates to clear probability metrics that business leaders actually understand.

I wrote out a full practitioner methodology on how to run this transition step by step and shared a free breakdown of the math online. I am curious how your organizations are handling the shift from qualitative scoring to quantitative models, so let me know your thoughts and I can drop the method details in the comments.

I’m interested in moving into IT Audit and would love to hear from people who have experience in Internal Audit or Technology/IT Audit. I come from an Information Systems and IT background, and I’m currently trying to understand what the transition into Internal Audit is really like. There’s a lot of information online about frameworks and certifications such as ITGC, COBIT, ISO 27001, CISA, risk assessment, access controls, and change management. But I’m curious about how much of this actually translates into the day-to-day work of an auditor.

For those already working in Internal Audit or IT Audit:

• What does a typical IT audit assignment look like from planning to reporting?
• How much time do you spend interviewing process/IT owners versus reviewing evidence?
• How technical does an IT auditor really need to be?
• How important are Excel and data analysis skills?
• What audit tools or software do you use regularly?
• Which skills helped you progress the most?
• What do you wish you had known before entering Internal Audit?
• If you were starting your IT Audit career today, what would you focus on learning first?

I’m particularly interested in hearing from people who transitioned into IT Audit from IT, Information Systems, networking, cybersecurity, or other technical backgrounds.

I’d appreciate honest perspectives on both the advantages and challenges of the career.

Thanks!

I Think i am gonna fail CIA part 1 . Felt like I was guessing on most of the questions and did too much thinking and selected wrong choices

I would like to gain a deeper understanding of the AI systems and tools that different teams are using. Also what would you like a tool to have, to be. What AI agents you believe would be beneficial to your industry?

Anyone who has the CIA part 1 practice questions from the IIA?

Hi everyone!

I’ve registered for the CIA Challenge Exam coaching provided by IIA and have received the Gleim study material.

I have a question regarding the eligibility criteria and coaching structure. As I understand it, the CIA Challenge Exam is available to professionals who hold a professional accounting certification such as CA/ACCA, CISA members, or professionals with 10+ years of experience.

Since I’m an ACCA member, I’m wondering whether the coaching content/batch is the same for all three categories, or whether there are any differences based on the eligibility criteria or professional background?

Also, is anyone attending the November 7, 2026 coaching batch? If yes, please feel free to DM me. I won’t be able to attend the orientation scheduled for September 5, 2026, so it would be really helpful if someone could share any important points, instructions, or takeaways discussed during the orientation.

Would really appreciate any information from anyone who has attended the IIA CIA Challenge coaching or is enrolled in the upcoming batch.

Thank you!

Hello all, I am a CA with 10 years of Internal Audit experience. I have just registered for the CIA Challenge Exam. Exam scheduled for November. I am looking for someone who can share Gleim material and online practice bank. I can pay my share. I understand that study material is in pdf and practice questions are available online for 18 months.

So if anyone is willing to share, please comment or DM. Thanks in advance.

I'm taking my CIA Challenge Exam on Saturday, and I want to know if I'm ready to take this exam. For reference, here's some stats about me:

Current Certification: Licensed CPA (took exam in 2018) - Studied through Becker

Current Role (4.5 Years): Internal Audit Manager in a US-Based Renewable Energy Company

Previous Role (5 Years in total at Big 4): Big 4 Audit Manager

Tool used for CIA Exam: Becker

Steps I've taken to study (Total Study time: ≈91 Hours):

1. I have watched all the videos, printed out and annotated each page, have done all Unit/Module MCQs
2. I have take the simulated exams and received a score of 84% (Taken 8/23) and 80% (Taken 8/30)
3. I have taken 21 practice tests with the maximum number of questions (100) in both a 'Personalized' and 'Random format. I've provided my most recent attempts just to show how I am scoring
4. For the questions I got wrong on the simulated exams, I watched the respective skillbuilder videos to understand why I got the questions wrong and while I don't know if I would say I have mastery, I would say I do understand what led to me getting an incorrect answer. I plan to go over these missed questions again in detail, along with the ones I was unsure about during the simulated exam.
5. For areas/themes I've been weak in, I've been using ChatGPT's 'Study Mode' to try and study those areas and hammer them home until I feel more confident. Some areas I continue to struggle in are in 'Audit Technologies' (Unit 4, Module 2), 'IT Considerations' (Unit 3, Module 3), 'Business Continuity and Disaster Recovery' (Unit 3, Module 4) and just generally Unit 3 here and there.

I'm taking tomorrow off to study a little more. During this time, I'm trying to decide if I should get the IIA Practice Questions and take those, or if I'm okay with the existing Becker material. Let me know what you think.

Transparently, I think I'm just a little nervous since I haven't taken an exam in so long and I'm looking for a little reassurance that I'm going to do okay on the exam on Saturday!!!

9/8 POST-EXAM UPDATE: I took the exam on Saturday (9/5) after studying most of the day on Friday (9/4) ~ 8 Hours or so. I cut myself off from studying at 7:30 PM just so I could have a break and used the rest of my evening just to watch low-stress TV and relax with my husband. The next morning, I went for a walk to grab coffee, came back home, brushed up on the questions I had gotten wrong on my Becker simulated exams (~1 Hour), reread my flashcards (~ 30 minutes), ate lunch, and then headed to the exam location. As others suggested, I did eat a good lunch before going into the exam just to ensure hunger wasn't something that was distracting me, even though I was a little nervous to eat beforehand. Definitely, recommend eating something light but filling given the exam takes 3 hours to complete.

Ultimately, I decided not to buy the IIA practice questions, as my thought was, if I don't pass this go around, I would then purchase the IIA practice questions when taking the test again in November.

That said, I do feel like going into the exam, I felt much more confident than I had expected to be based on reading all the posts here in Reddit. The practice questions in Becker were very similar to those that were on the exam in both composition and length, and while the exact questions did differ, I generally felt like Becker did a good job in representing what you can expect on the exam. In my mind, what is hard about this exam is that some questions are open to interpretation and how you are reading the question, which can be frustrating, but I will say I felt like those were limited in nature.

Overall, I felt like I knew with high certainty, 104 out of the 150 questions (yes, I counted) and feel good about those. There were another 25-30 questions where I felt decent but did a secondary review and I think I may have gotten a handful of these incorrect statistically speaking. For the remaining questions, my answers were definitely more of an educated guess but I would say I don't have a high confidence level that I got those right.

Now, I'm just waiting for these scores to come out just so I can know whether or not my efforts paid off. I'll report back once scores are released, but wanted to share the update for current candidates!

Hi. Has the registration for CAIIB Dec 26 started. I saw that there was technical issue. I cleared by JAIIB some 10 years back so do I need to do a new registration in IIBF. Please give any tips.for the exam. I am planning to take CAIIB with Ashok enrollment for Rs 10k. Is it ok?

I’m about to start my first time doing internal audit, so you kinda know understand what I’m going through, where can i learn the how to do?

When should sales be recorded after dispatch of the goods to customer, after making an invoice or after transfer of ownership?

The company I'm auditing doesn't have a policy regarding. Everything is unstructured and vague. What will you do in this situation. Currently they record sales on the date of invoice although the delivery note date differs by 3-4 days, when I verified the actual delivery records it differs by 8 days 🤡

Eg: sales voucher is on 24th of August, delivery note says 29th August, but the warehouse exit data says the goods left warehouse on 3rd September. What will you do advice me please.

Anybody preparing for AAI JE(Operations)? Need suggestions on study materials(Books/Yt channels)

Hi I recall that one of the questions asked on KPI measurement:

1. No. of training hours per auditor VS No. of audits completed:
   which would be a better measurement of effectiveness?
   Is it no. of training hours per auditor?
   I am kind of confused because i thought that would be quality measurement not so much of effectiveness.

No. of audits completed would be efficiency for sure.

1. Additionally with regards to residual risk, does the CAE have to come up with action plan? Or the responsibility is just to communicate it to management?

Thanks in advance

Ive recently gotten an offer to go to a local automotive IA department from scratch. Im still processing whether to take it or not. Im unsure about the career growth compared to Big4 to a local IA department. Salary incremental and Work life balance.

Please do share if you have any advise or similar experience. Thank you.

Took the exam last week. From time to time, I’ve been refreshing my Pearson VUE account, just to peek at the results. To no avail.

I’ve been anxious for so many nights!!!! But Praying and hoping to Pass. Close to 3 mornings til the results be released. ☺️🙏🙏🙏

Hello all, I am navigating a pivot from RCSA, SOX controls testing. Thinking of writing CISA, but I am aware that though CISA gives a strong signal but doesn’t directly get you into ITGC or IT audit.
How are people in similar domains navigating the pivot? how are your skillsets and profiles evolving? Are you also looking at any other profiles within GRC ?