Course Outline
Auditing, Assessment, and Organisational Governance
- Comparison of audit, assessment, review, and inspection concepts
- The role of internal audit in governance and assurance
IIA International Standards and Code of Ethics
- Structure of the IPPF and its mandatory components
- Principles of independence, objectivity, and ethical conduct
Risk-Based Audit Planning and Scope Definition
- Assurance mapping and defining the audit universe
- Establishing engagement objectives, criteria, and scope
Audit Programmes, Evidence, and Working Papers
- Managing audit programmes per ISO 19011
- Sufficiency, reliability, and documentation of evidence
Auditing ISO 9001 Quality Management Systems
- Process approach and risk-based thinking
- Grading nonconformities and evaluating process performance
Auditing ISO 27001 Information Security Management Systems
- Control areas in Annex A and risk treatment strategies
- Gathering information security evidence and sampling methods
Data Acquisition and Preparation for Audit Analytics
- Source systems, data extracts, and data dictionaries
- Techniques for data cleaning, validation, and completeness verification
Analytical Procedures, Sampling, and Full-Population Testing
- Trend, ratio, and reasonableness analysis
- Comparing sampling techniques with full-population testing
AI and Automation in the Audit Lifecycle
- Utilising automated audit software and workflow tools
- Leveraging generative AI for evidence review and report drafting
Anomaly Detection and Fraud Indicator Testing
- Detecting outliers using rule-based and statistical methods
- Applying Benford's law analysis
- Testing for duplicates, gaps, and exceptions
Forensic Auditing Fundamentals
- Types of fraud and identifying red flag indicators
- Defining investigation scope and maintaining the chain of evidence
Digital Forensics Tools and Evidence Handling
- Evidence imaging and hash verification
- Analyzing timeline and email metadata
Cybersecurity Risk and IT General Controls
- Controls for access, change management, and operations
- Incorporating the cyber threat landscape into audit planning
Cloud Infrastructure and Data Protection Assessment
- Reviewing shared responsibility and cloud configurations
- Checking compliance with data protection and privacy regulations
COSO Enterprise Risk Management
- The five components and ERM principles
- Managing risk appetite, tolerance, and portfolio perspectives
ISO 31000 Risk Management in Practice
- Risk management processes and foundational principles
- Utilising risk registers, key risk indicators, and treatment plans
Compliance Programmes and AML Prevention
- Compliance frameworks and control testing
- AML typologies, screening, and transaction monitoring
Integrated Audit Simulation and Reporting
- Conducting an end-to-end audit of a simulated business cycle
- Documenting findings, root causes, reporting, and follow-up actions
Requirements
- Professional experience in administrative, financial, compliance, or auditing roles.
- Basic proficiency in using spreadsheets for data management.
- No prior background in programming or statistics is necessary.
Target Audience
- Reviewers and supervisors accountable for the quality of audit and assessment activities.
- Internal auditors and compliance professionals transitioning towards data-driven testing methodologies.
- Finance, administrative, and operational staff involved in conducting or receiving audits.
Testimonials (3)
Fun to talk
Jihan Fadila - BAF
Course - Root Cause Analysis (RCA) for Internal Audit
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
Speed of response and communication
