Course Outline
Auditing, Assessment, and Organisational Governance
- Distinguishing between audit, assessment, review, and inspection
- The role of internal audit in governance and assurance
IIA International Standards and Code of Ethics
- Structure of the IPPF and its mandatory components
- Maintaining independence, objectivity, and ethical behaviour
Risk-Based Audit Planning and Scoping
- Assurance mapping and defining the audit universe
- Setting engagement objectives, criteria, and scope
Audit Programmes, Evidence, and Working Papers
- Managing audit programmes per ISO 19011
- Ensuring evidence sufficiency, reliability, and proper documentation
Auditing ISO 9001 Quality Management Systems
- Applying the process approach and risk-based thinking
- Grading nonconformities and assessing process performance
Auditing ISO 27001 Information Security Management Systems
- Addressing Annex A control areas and risk treatment
- Gathering information security evidence and sampling
Data Acquisition and Preparation for Audit Analytics
- Understanding source systems, extracts, and data dictionaries
- Performing data cleaning, validation, and completeness checks
Analytical Procedures, Sampling, and Full-Population Testing
- Conducting trend, ratio, and reasonableness analyses
- Comparing sampling techniques with full-population testing
AI and Automation in the Audit Lifecycle
- Utilising automated audit software and workflow tools
- Leveraging Generative AI for evidence review and drafting
Anomaly Detection and Fraud Indicator Testing
- Identifying outliers using rule-based and statistical methods
- Applying Benford's law analysis
- Testing for duplicates, gaps, and exceptions
Forensic Auditing Fundamentals
- Recognising types of fraud and red flag indicators
- Defining investigation scope and maintaining the evidence chain
Digital Forensics Tools and Evidence Handling
- Creating evidence images and verifying hashes
- Analysing timelines and email metadata
Cybersecurity Risk and IT General Controls
- Reviewing access, change, and operations controls
- Assessing the cyber threat landscape for audit planning
Cloud Infrastructure and Data Protection Assessment
- Evaluating shared responsibility models and cloud configurations
- Checking data protection and privacy compliance
COSO Enterprise Risk Management
- Understanding the five components and ERM principles
- Defining risk appetite, tolerance, and portfolio perspectives
ISO 31000 Risk Management in Practice
- Applying the risk management process and its principles
- Maintaining risk registers, key risk indicators, and treatment plans
Compliance Programmes and AML Prevention
- Implementing compliance frameworks and testing controls
- Monitoring AML typologies, screening, and transactions
Integrated Audit Simulation and Reporting
- Conducting an end-to-end audit of a simulated business cycle
- Reporting findings, root causes, and follow-up actions
Requirements
- Professional experience in administrative, financial, compliance, or auditing functions.
- Familiarity with spreadsheets for basic data management tasks.
- No prior background in programming or statistics is necessary.
Target Audience
- Reviewers and supervisors accountable for audit and assessment quality.
- Internal auditors and compliance officers transitioning to data-driven testing methodologies.
- Finance, administrative, and operations personnel who either conduct or undergo audits.
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 5200 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (3)
Fun to talk
Jihan Fadila - BAF
Course - Root Cause Analysis (RCA) for Internal Audit
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
Speed of response and communication
