Skip to Content


CCSA, CFSA, CGAP Transition

The IIA is committed to providing a clearly defined, professionally relevant suite of global certifications to support internal auditors as they progress through their careers.

Based on the results of multiple global market studies and recent market demands, the following certifications will be repositioned as follows:

  • With internal control being part of risk management, relevant Certification in Control Self-Assessment® (CCSA®) exam content will be considered for inclusion in the Certification in Risk Management Assurance® (CRMA®) exam through the next CRMA exam update.
  • The Certified Financial Services Auditor® (CFSA®) certification has transitioned to the Financial Services Audit Certificate, an assessment-based certificate program. The Financial Services Audit Certificate is designed to enhance specialized knowledge and showcase expertise in 11 key areas. Learn more.
  • The Certified Government Audit Professional® (CGAP®) certification will transition to an assessment-based certificate program. A timeline of this assessment-based program will be shared when available.

If you currently hold an active CCSA, CFSA, and CGAP certification, your designation will:

Please note there will be no program extensions offered for CGAP/CFSA/CCSA programs.

Additional Information

In-process Candidates


In-process Candidates

If you have applied for and are currently in the process of obtaining your CCSA, CFSA, or CGAP, we encourage you to continue your efforts and obtain your certification within the eligibility window. As indicated above, once you obtain your certification, it will remain valid when you report CPE credits as required each year.

Important Information for In-process Candidates

CCSA Candidates CFSA Candidates CGAP Candidates
Eligibility Requirements and Pricing Eligibility Requirements and Pricing Eligibility Requirements and Pricing
Exam Syllabus and Prep Resources Exam Syllabus and Prep Resources Exam Syllabus and Prep Resources
Exam Information Exam Information Exam Information
CPE Requirements and Reporting CPE Requirements and Reporting CPE Requirements and Reporting

Exam Security

The IIA, the Professional Certifications Board, and Pearson VUE take exam security seriously because the value of your certification depends on it. That’s why IIA Global created an Exam Security Team to enhance processes and procedures and increase investigative measures to protect The IIA’s exam intellectual property (IP).

Unauthorized possession, reproduction, publication, or disclosure of any examination materials, including storing or disclosing examination questions to any person or entity by any means before, during, or after the examination, is prohibited by copyright laws and can result in candidate disqualification or other appropriate censures. Studying from recalled test content is also improper and can lead to severe penalties. If you are aware than an exam has been exposed, do not purchase such materials. Report the incident to The IIA at Additional information can be found on the Exam Security page or within the Certification Handbook.