Course Outline
Auditing, Assessment, and Organizational Governance
- Distinctions between audit, assessment, review, and inspection
- The role of internal audit in governance and assurance
IIA International Standards and Code of Ethics
- Structure of the IPPF and mandatory requirements
- Principles of independence, objectivity, and ethical behavior
Strategic Audit Planning and Scope Definition
- Mapping assurance needs and defining the audit universe
- Setting engagement objectives, criteria, and scope
Audit Programs, Evidence, and Documentation
- Managing audit programmes in line with ISO 19011
- Ensuring evidence sufficiency, reliability, and proper documentation
Auditing ISO 9001 Quality Management Systems
- Applying the process approach and risk-based thinking
- Grading nonconformities and evaluating process performance
Auditing ISO 27001 Information Security Management Systems
- Reviewing Annex A control areas and risk treatment
- Gathering information security evidence and sampling strategies
Data Acquisition and Preparation for Audit Analytics
- Understanding source systems, data extracts, and dictionaries
- Techniques for data cleaning, validation, and completeness checks
Analytical Procedures, Sampling, and Full-Population Testing
- Conducting trend, ratio, and reasonableness analyses
- Comparing sampling methods with full-population testing
Integrating AI and Automation into the Audit Lifecycle
- Utilising automated audit software and workflow tools
- Applying generative AI for evidence review and drafting
Identifying Anomalies and Testing for Fraud Indicators
- Using rule-based and statistical methods for outlier detection
- Applying Benford's law analysis
- Performing duplicate, gap, and exception testing
Foundations of Forensic Auditing
- Identifying fraud types and red flag indicators
- Defining investigation scope and maintaining the chain of evidence
Digital Forensic Tools and Evidence Management
- Imaging evidence and verifying hashes
- Analysing timelines and email metadata
Cybersecurity Risk and IT General Controls
- Reviewing access, change, and operations controls
- Incorporating the cyber threat landscape into audit planning
Assessing Cloud Infrastructure and Data Protection
- Evaluating shared responsibility models and cloud configurations
- Checking compliance with data protection and privacy regulations
COSO Enterprise Risk Management (ERM)
- Exploring the five components and ERM principles
- Defining risk appetite, tolerance, and the portfolio view
Practical Application of ISO 31000 Risk Management
- Understanding the risk management process and principles
- Developing risk registers, key risk indicators, and treatment plans
Compliance Programmes and AML Prevention
- Establishing compliance frameworks and testing controls
- Addressing AML typologies, screening, and transaction monitoring
Integrated Audit Simulation and Reporting
- Conducting an end-to-end audit of a simulated business cycle
- Documenting findings, root causes, reporting, and follow-up actions
Requirements
- Professional experience in administration, finance, compliance, or auditing.
- Familiarity with spreadsheet software for basic data manipulation.
- No prior background in programming or statistics is necessary.
Target Audience
- Reviewers and supervisors charged with maintaining audit and assessment quality.
- Internal auditors and compliance officers transitioning towards data-driven testing methods.
- Finance, administrative, and operations staff involved in conducting or receiving audits.
Testimonials (3)
Fun to talk
Jihan Fadila - BAF
Course - Root Cause Analysis (RCA) for Internal Audit
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
Speed of response and communication
