The Institute of Internal Auditors study plan
CIA-2 study plan
A step-by-step CIA-2 study plan: the exact order to study in, how long to spend on each stage, and when to start practice questions. Follow it top to bottom.
The real CIA-2 is 100 questions in 120 minutes, pass mark 600 / 750 (scaled). For the full domain-by-domain breakdown behind each stage, read the CIA-2 study guide.
Your step-by-step plan
Map the blueprint and set a date
Day 1Read the IIA Part 2 test specification and the three domains with their weights, and note that the syllabus aligns to the 2024 Global Internal Audit Standards. Book a provisional exam date now: a fixed date turns open-ended study into a plan and is the biggest predictor of actually sitting the exam.
Own engagement planning (Domain 1)
Weeks 1-2This is the largest domain at half the exam, so spend the most time here. Lock the planning sequence, the inherent-versus-residual and design-versus-operating distinctions, criteria selection, and the audit approaches. Use the recall prompts in this guide: cover the summary, answer from memory, then reveal.
Drill the independence boundary until it is reflex
Week 2Across every domain the exam plants options where internal audit designs a control, owns a process, accepts a risk, or makes a management decision. Practise spotting and rejecting them fast, because getting this instinct automatic converts a large share of otherwise tricky questions into easy marks.
Work fieldwork and evidence (Domain 2)
Weeks 2-3Cover evidence-gathering techniques, the sufficient-relevant-reliable standard and the reliability hierarchy, data analytics and CAATs, continuous monitoring versus auditing, and finding construction. Use scenario questions, not flashcards alone, so you practise judging significance from evidence.
Close with supervision and communication (Domain 3)
Week 3This is the smallest domain but the questions are usually clear marks once the rules are firm: supervisory review before conclusions, interim versus final communication, management action plans, escalation, and follow-up before closure.
Practise on scenarios with every answer explained
Week 4Move to full practice sets and read the explanation for every question, including the ones you got right. The exam tests judgement between plausible audit actions, so understanding why a distractor is premature, oversteps independence, or skips a step is where the marks are.
Sit a timed mock and close weak domains
Week 5Take at least one full timed mock to rehearse pacing and flag-and-return, then use your per-domain accuracy to drill the areas dragging you down. Repeat until every domain clears the pass line with margin on unseen questions.
Ready to start stage one?
Free CIA-2 questions, with every answer explained. No sign-up.
Frequently asked questions
How long does this CIA-2 study plan take?
It is 7 stages, paced by how much time you can give it each week - most candidates work through it in 2 to 6 weeks. Each stage below has a suggested duration; slow down on any stage where the recall checks in the study guide are not landing before moving on.
What order should I study CIA-2 in?
Follow the stages in order below. They are sequenced deliberately: foundational material first, then the domains weighted heaviest on the exam, then timed practice, with review passes built in rather than left to the end.
Do I need practice questions as part of this plan?
Yes. Reading alone does not surface what you have not actually learned. This plan builds in graded practice, and the full 309-question bank is free to use as you work through each stage.
Is this plan enough on its own, or do I need the full study guide too?
This page is the plan: what to do and in what order. The study guide adds the domain-by-domain breakdown, easy-to-confuse traps, and worked examples behind each stage - read it alongside this plan, not instead of it.
Examworthy is not affiliated with or endorsed by The Institute of Internal Auditors. This study plan is original material based on the public exam blueprint. We never reproduce live exam items. CIA-2 and related marks belong to their respective owners.