The Institute of Internal Auditors presents all things internal audit. In this episode, Christina Bruin talks to Rick Walkie and Andre Vichi about the major updates to the certified internal Auditor exam and the internal auditor practitioner program. They discuss the motivations behind the changes, how the updated global internal audit standards influence the exam and what candidates and hiring managers can expect.
The conversation also highlights the importance of aligning certification with real world internal audit practices and the future of the profession. I wanna welcome you both Rick and Andre today. Thank you so much for joining us. Um, given your roles on the EDC, I know there are a lot of, um, insights you can share about what's coming with our certification programs. So, uh, let's jump into it. It's good to be here, Christina, I can't wait for 'em to roll this out on May 28th, 2025.
Hey guys, thank you for having me. Andre, let's start with you. Can you give us an overview of the key changes being made to the certified internal auditor program? I think we have two main changes here. The first one that I would like to highlight is that we stop testing topics like information technology, information security, business account and accounting, things outside the internal audit scope. And we want to bring context to what the internal auditors practice want.
Uh, uh, you have in real life inside of the tests. And the second main change is that now the CIA is bringing the, uh, changes that we implemented with the global internal audit standards. What Prompted these changes? Why, why are they happening now? We usually review the CIA exam and the content and the syllabus on usually a five year rotational basis. So that five years came up, um, a couple of years ago.
So we began the process of revising the CIA exam and what perfect timing we get to, uh, revise the CIA exam. At the same time, the Institute of Internal Auditors has updated and upgraded their global internal audit standards. You know, over the last five years there's been a lot of change in evolution in internal audit and the CIA needed to catch up as well. So we needed to catch up with those technological changes and the greater expectations that our stakeholders hold us to.
Um, we're starting to see more and more that human skills are becoming important to internal auditors and we're trying to create a syllabus and create questions that can emphasize those human skills in the revised exam. I really think that the changed certified internal audit exam is gonna be better for everybody wanting to take it. It really is gonna provide a real gauge of the competency of the people that are taking the exam, and it really does.
I think with our changes, it really will measure better the competency of the, uh, of the internal auditor. How did the global internal audit standards influence the changes in the exam specifically? So the new standards really offer more guidance for the chief audit executives related to their strategic planning to managing by quality function.
The updated exam also helps and gives the individual internal auditor more guidance related to the, um, planning and performance of their internal audit. The global internal audit standards really for the exam, have given us a great platform to further enhance our candidates abilities and competencies. And why is it important for the new exam to align with the standards? So the new standards really, I think, set the profession up for success into the future.
Competent internal auditors have to understand what it takes, the operator world class internal audit function and aligning the exam with those new standards provides that candidate a way to demonstrate their understanding of internal audit operations, all of those things that are gonna make internal auditors successful in the future. Can you talk a little bit about how the topical requirements will be tested on the updated exam and, and when they'll be tested?
The most recent topical requirement that was, uh, released earlier this year was the cybersecurity topical requirement. So those will all be tested within the, um, within parts two and three as they relate to managing the internal audit function as they relate to planning for and performing audit engagements. So cybersecurity and the topical requirements will be tested within those contexts and within the context of internal audit.
So you probably won't be seeing topical requirements on the exam until about six months after the effective date of the topical requirement. So adding an example, mentioning cybersecurity, the topical requirement was issued in February 25, so it becomes effective in February 26th and it'll be included in the task in August 26th, six months after it's effective, right? Yes. And there are other topical requirements coming, so they'll follow the same cadence then?
Yes. Yes, they will. Right now, I believe it's third party management is out there for comment. So as soon as they finalize the topical requirement for third party risk management, they'll um, they'll get that issued and that will follow the cadence that Andre just described. And we have the details of those on our website as well, the timing and release of every, um, every topical requirement coming out and when it'll impact the exam.
So. Fabulous. Alright, Andre, so the next question's for you. So what should our CIA exam candidates be aware of when they're preparing for the updated exams?
There is one important thing that I would like to mention regarding part three in the old part three, uh, based on the 2019 CX exam syllabus, it has been eliminated and we replace it it with a new part three, the topics from the 2019 syllabus have been integrated into questions related to internal audit engagement, and these will be placed in the part two and in internal audit function. And these are going to be placed in the new part three?
Yeah, I think the, uh, I think the, the candidates need to remember that the parts of the exam are not gonna, it's still a three part exam. It's, it's, the exam is gonna be improved, I believe, with adding these topics into the part two and part three, the performance of the, of the engagements and, um, the managing of the internal audit function. So the structure all remains the same. It's just, uh, the information and how it'll be tested within the examination.
That's, that's gonna be just a, a little bit different. How can candidates prepare for their updated these updated exams in, in light of the changes? Oh, the candidates have, uh, several options. Uh, let's say it depends on how individuals feel better studying, let's put on this way. So some do very well just studying the topics for themselves and using the reference materials provided, uh, in by the i i a in the CIA syllabus landing page.
Other candidates may have more formal instructors study plans where they need a teacher to mention something and which are provided by several vendors. And I would like to highlight that the i a is doing a new agreement with the Becker as a vendor now, and also the candidates may have, uh, local shops and affiliates that, uh, can sponsor trainings programs in their areas. Why is the updated CIA exam considered an improvement? Well, I personally prefer this new version.
I'm with Andre. I prefer the new version. Really? Yeah. I think it's matched more with which a new auditor wants to, needs to learn for developing very well the profession and also match with the expectations from the main stakeholders.
So one of the improvements that we already comment a few times, but maybe it's very important to came back to this, is that for the first time, uh, topics like information technology, business equipment, accounting topics are being tested in the context of the internal audit. It means that the questions that were designate to test the candidates proficient are now located inside the context of internal audit planning, internal audit performing and internal audit engagement management.
So better than testing the, these topics at a deep, uh, irrelevant level sometimes. Now we test then in the context of internal audit, That's a great change. I'm sure that our candidates will be excited about that as well. I love it. Yeah, we're pretty, we're pretty excited about rolling this out. I am, I'm really hopeful that when we roll this out, the candidates really see that the, the work that we've put into this and really appreciate what we've tried to do to advance the profession.
I really do think that as we get to the new exam, it may be a little bit different, a little bit tough for the, for the candidates right off the bat, but I think as they begin to take the test and they look back at it, they'll understand where we were coming from. And if they've never taken the the prior exam, they really don't know. They really won't be able to tell what the improvements are.
But trust us on this one, this exam, I believe is, is truly an over what we had been providing to the candidates in the past. Rick, I'm 100% with you. So that's a great segue. So how are these, Rick, how would you say these updates to the exam improved the internal audit profession? How, how will these changes help auditors stay more relevant and effective in their roles?
Well, first off, I think the, uh, with bringing the topics out of the old part three and into the parts two and three that we have now in the current exam, um, really enhance the candidate's ability to understand where those topics fit within their internal audit function. How their internal audit function should be utilizing those particular skills as well as understanding in an internal audit context what they should be expecting from, um, the entities under review.
So I think again, it really aligns to the global internal audit standards. I think the standards really provide internal audits with the guidance necessary to develop world class internal audit functions. And that's what we're trying to test within the new exam is the competency of these folks, the candidates abilities to manage their internal audit function and plan and perform internal audit engagements at a higher level.
There's also some changes coming to one of our other credentials, and that's the internal audit practitioner, the IAP. So, um, Rick, can you give, uh, a brief overview of some of the key changes to that program? This is another one that I'm really excited about. Christina, um, with the IAP exam changes now, um, one of the biggest changes is that it's a permanent designation.
And so along with that though, you know, you get the, you get the, uh, you get that benefit with, um, with having it be in a permanent designation. You also have that requirement of those 20 CPEs each year. So with the IEP, you will, you now get a permanent designation and you'll have an obligation to complete 20 hours of CPE per year to maintain your designation. Another big change is that, uh, the exam for the IAP is part one of the CIA exam.
And along with that, once you pass that part one to earn your CIAP designation, you also have credit for part one for the CIA exam. So that means then you only need, once you've got your IAP, you only need to get parts two and three passed before you earn your CIA certification. That's a big change from the past. In the past we had a separate IAP exam and none, no part of that IAP exam applied to your ultimate certification. So that's a huge improvement on this designation.
The other thing that, that I'm excited about is that the new IAP really does give our student members that opportunity to sit for part one of the CIA and create that pathway for them to, to go on and earn their certifications and really launch their careers into internal audit and encourage these folks to jump into a career of internal audit. That's great. So students can sit for the exam. There's no work experience needed, No work experience, experience needed.
Students can sit for the exam and earn their IAP, so they get a credential to start with. I can't think of a better way to get into internal audit. Christina, That sounds wonderful. That sounds doable. It's Absolutely doable. What would you say prompted, uh, the changes to the IAP program? I think the institute and the Certifications board saw a need for our profession to have a way to earn a meaningful credential.
I feel like the way that we've structured the IAP, uh, really does accomplish that goal. We wanted the IAP to encourage people to further invest in themselves through earning the CIA certification. So we put, um, we put a lot of incentive into the IAP program for individuals to earn their IEP to get their credential and then to continue on and earn that CIA certification.
Again, they can take the IAP exam while still in school, retain that credit for part one, go on, take the CIA and everyone ultimately earned their, uh, their CIA certification. Andre, do you have anything else you'd like to share about the new CIA exam or the IAP program? Yeah, both are the result of a very serious job from the I I a and from valid very talent, people from all over the world joining together to make a better certification for the internal audit profession.
So it's very great to, uh, have such work delivering very good CIA new testing, and I would like to thank everyone connected in this process. The candidates view see for themselves that it's a huge difference in the way the CIA exam is performing. Now, on, I would echo Andre's comments. I think that everyone needs to look at this as a win across the board.
We heard a lot of, in a lot of feedback about how the CIA exam and particularly part three, wasn't relevant to proving competence in the profession of internal audit. And so we truly did listen to what our stakeholders had told us about in the exam and what they felt like was missing, where we've missed the mark.
And the, i i a has been really supportive with the Exam development committee and the Professional Certifications Board in making this shift in the internal audit exam, the certified internal Auditor exam. And so I gotta thank the I I A for that. I gotta thank the stakeholders who were honest with us and gave us the feedback that we needed to prompt the changes that we've made. Thank you. And likewise, likewise, Rick and Andre, of course.
Um, none of this would be possible without our dedicated volunteers such as yourselves.
So we thank you for your input and I, I'm glad you mentioned the PCB and the EDC, the, the Certifications Board and the Exam Development committee because, um, that representative group, that Global Group has been so instrumental and so critical to the change, um, and is a group of very talented professionals from around the world, such as, you know, because you get to work with them, um, I get to observe them. So we appreciate, we appreciate all the hearts.
So, um, is there any place we can direct people to find more information about these changes? Where can where can they go? Rick? Do you, can you provide some information? Well, of course they can go to the iia.org and uh, click on certifications and all the information they need is right there. Thank you for joining us today. It's been really wonderful conversation and, um, I appreciate your time today. Thank you. Thank you, Christina. Thank you.
Hey, audit pros. Ready to supercharge your skills and connect with the best in the field? You absolutely need to check out the I'S 2025 International Conference happening July 14th through the 16th in Toronto. And virtually this is your chance to dive into emerging risks, cutting edge tech, and global best practices that will elevate your internal audit game. Don't get left behind and register now@theia.org. If you like this podcast, please subscribe and rate us.
You can subscribe wherever you get your podcasts. You can also catch other episodes on YouTube or@theiiaa.org. That's THE iia.org.