A 12-Week Study Plan for the CIA Part 1 Exam

How to use this schedule

The plan assumes you can protect about eight hours each week. That produces roughly 96 planned hours, but it is an illustrative schedule, not an IIA requirement or published average. If you have less time or are new to internal auditing, extend the calendar. If you already work in internal audit, use your diagnostic to reduce familiar content while preserving practice across every domain.

Use the 2025 syllabus and the 2024 Global Internal Audit Standards as the frame. The four domains are Foundations of Internal Auditing 35%, Ethics and Professionalism 20%, Governance, Risk Management and Control 30%, and Fraud Risks 15%. Keep an error log with topic, reason for error, and next action. Review guessed correct answers too.

Week 1: baseline and terminology

Read the current syllabus and complete a short diagnostic across all four domains. Do not convert the practice result into an official pass prediction. Tag each miss as knowledge, outdated framework, role confusion, misreading, or unsupported conclusion. Create a calendar with repeatable study sessions and one flexible block for work interruptions.

Review the purpose and mandate of internal auditing, assurance and advisory services, and the relationship among the board, chief audit executive, management, and internal audit. Write a short explanation of who owns operations and controls. This distinction supports questions throughout the exam.

Weeks 2 and 3: Foundations

Week 2: study the current Global Internal Audit Standards structure, the function’s purpose, mandate, charter, and governance. Understand how board oversight, reporting access, resources, and scope authority support independence. Map terms from old materials to the current 2025 syllabus.

Week 3: focus on engagement types, assurance and advisory work, quality, and the chief audit executive’s responsibilities. Practice scenarios about scope restriction, insufficient resources, and reporting lines. End the week with a mixed set and explain why each answer fits the auditor’s role.

Weeks 4 and 5: Ethics and Professionalism

Week 4: review integrity, objectivity, competence, due professional care, and confidentiality. For each concept, write one example of a threat and a practical response. Distinguish an individual auditor’s objectivity from the function’s independence.

Week 5: practice conflicts, prior responsibility, pressure to alter findings, information handling, and competence limits. Decide whether disclosure, reassignment, supervision, clarification, or escalation fits each scenario. Use timed question sets and review the strongest distractor, not just the correct choice.

Weeks 6 and 7: Governance, Risk Management, and Control

Week 6: build a three-column model of governance, risk management, and control. Governance directs and oversees; risk management identifies and responds to uncertainty; controls implement or monitor responses. Practice identifying whether a scenario describes unclear accountability, incomplete risk assessment, poor control design, or an operating failure.

Week 7: study preventive, detective, and corrective controls, control objectives, evidence of operation, and the relationship between risk and control. Work scenarios on access, approval, segregation of duties, reconciliation, and monitoring. Keep management ownership distinct: internal audit evaluates controls and communicates results but does not operate the process.

Week 8: Fraud Risks

Review intentional deception, common fraud exposures, pressure and opportunity indicators, management override, and relevant controls. Distinguish an error from a possible fraud pattern and a red flag from proof. Practice preserving evidence, documenting facts, consulting appropriate specialists, and using authorized channels.

Complete a set of fraud questions and label every wrong answer by cause. Avoid assuming the auditor must personally conduct a forensic investigation. Understand management’s responsibility to prevent and detect fraud and internal audit’s role in assessing relevant risk and controls.

Weeks 9 and 10: integrated scenarios

Week 9: combine domains. A blocked audit scope can affect independence; a prior role can affect objectivity; a weak approval control can create fraud exposure. Solve mixed cases that require identifying the right issue before selecting an action.

Week 10: complete longer timed sets and revisit the two weakest domains from your error log. Explain why distractors are too passive, too aggressive, assigned to the wrong role, or unsupported by facts. Use fresh questions rather than repeating answer patterns you already remember.

Week 11: full-length timed practice

Complete a representative 125-question session within the 150-minute limit if your materials support it. Use pacing checkpoints, flag only genuinely uncertain items, and practice returning to flagged questions. The average is about 72 seconds per question, but a scenario may need more and a definition item less.

After the session, review every missed and guessed answer. Identify when errors occurred: early knowledge gaps, mid-session rushing, or late fatigue. Add targeted study rather than simply trying to move faster. Do not interpret a commercial raw percentage as the official 600 scaled passing score.

Week 12: repair and readiness

Use the first part of the final week to repair remaining gaps and complete one mixed timed set. Review current domain weights, role distinctions, ethics principles, and fraud response. Avoid introducing an entirely new broad course in the last few days.

Confirm the exam appointment, identification, travel, and test-center instructions. The IIA currently issues official results within three weeks after the exam, so plan work and credential announcements accordingly. The exam pass is only one part of the CIA pathway; track education, experience, and remaining exam parts separately.

Adjustments for different candidates

If you are new to internal auditing, use the first two weeks to build vocabulary and understand assurance, governance, risk, and control before moving quickly into scenarios. Consider extending the plan to 16 weeks if your baseline shows gaps in several domains.

If you are an experienced auditor, do not skip Foundations or Standards review. Your organization’s practice may differ from the current Global Internal Audit Standards, and your strongest area can still contain exam distinctions. Spend less time on familiar procedures and more on framework changes, ethics, fraud, and scenario judgment.

If you can study only four hours weekly, a 12-week plan yields 48 planned hours. That may be too compressed if the diagnostic shows broad gaps. Extend the timeline rather than treating the same weeks as sufficient by default.

A weekly review routine

At the end of each week, record hours completed, objectives covered, practice completed, and the two most frequent errors. Write one sentence explaining a rule, such as: “A scope restriction affecting the whole function is an independence issue; a prior responsibility may impair one auditor’s objectivity.”

This review helps you keep earlier material active and decide what to study next. A calendar is only useful when the learning objectives are being met. If practice repeatedly shows the same problem, change the method: retrieve concepts from memory, compare paired scenarios, or ask a qualified colleague to challenge your explanation.

Using the schedule when work becomes busy

Internal audit work often intensifies during planning, fieldwork, or reporting cycles. If a week becomes crowded, preserve two short study sessions for retrieval and move a longer practice block instead of abandoning the entire plan. Missing one session is manageable; losing contact with the material for several weeks makes later review harder.

Use the weekly review to decide whether you are on pace. Compare planned hours with completed hours, but also check whether you can explain the objective and solve fresh scenarios. If your week was only reading, add practice next week. If you answered quickly but guessed, slow down and justify each response.

If two consecutive weeks fall far below the planned hours, recalculate the date. For example, a candidate planning eight hours weekly but completing four has roughly half the intended study capacity. Extend the preparation window early rather than trying to recover by doubling every session in the final month.

Pacing the final 150-minute session

Use a checkpoint after each 25-question block to see whether your pace is close to the overall average. Do not force every question into 72 seconds: some are simpler, while layered scenarios take longer. If the interface lets you flag and move on, return after answering items you can resolve efficiently.

During the final review, focus on the question requirement and the evidence in the stem. Avoid changing a reasoned answer only because another option sounds more formal. Change it when you identify a specific fact or rule you overlooked.

When your diagnostic changes the plan

If the diagnostic shows that Foundations is your strongest domain but Fraud Risks and Governance/Risk/Control are weak, do not follow the week allocation mechanically. Keep a short maintenance session for Foundations and move more practice time to the two gaps. The published weights are an initial guide, while your error patterns show where study effort can improve.

If you understand concepts but often select a response that is too aggressive or assigns audit an operational role, focus on decision scenarios rather than adding more vocabulary drills. If you miss questions because you have never seen the current Standards terminology, dedicate time to the relevant standard and then test it through questions. The best plan changes in response to evidence.

A short note on breaks and recovery

Schedule a lighter review day after a full timed session. Rest supports attention and gives you time to review errors carefully. Do not treat the number of hours as the goal by itself; the goal is durable recall and sound scenario decisions.