Course Outline
Auditing, Evaluation, and Organisational Governance
- Comparison of audit, assessment, review, and inspection processes
- The role of internal audit in governance and assurance
IIA International Standards and Code of Ethics
- IPPF framework and mandatory components
- Independence, objectivity, and ethical behaviour
Risk-Based Audit Planning and Scope Definition
- Assurance mapping and the audit universe
- Defining engagement objectives, criteria, and scope
Audit Programmes, Evidence, and Working Papers
- ISO 19011 audit programme management
- Evidence adequacy, reliability, and documentation practices
Auditing ISO 9001 Quality Management Systems
- Process approach and risk-based thinking
- Grading nonconformities and assessing process performance
Auditing ISO 27001 Information Security Management Systems
- Annex A control areas and risk treatment strategies
- Information security evidence and sampling techniques
Data Acquisition and Preparation for Audit Analytics
- Source systems, data extracts, and dictionaries
- Data cleansing, validation, and integrity checks
Analytical Procedures, Sampling, and Full-Population Testing
- Trend, ratio, and plausibility analysis
- Sampling methods versus full-population testing
AI and Automation in the Audit Lifecycle
- Automated audit software and workflow utilities
- Generative AI for reviewing evidence and drafting reports
Anomaly Detection and Fraud Indicator Testing
- Rule-based and statistical outlier identification
- Application of Benford's law analysis
- Testing for duplicates, gaps, and exceptions
Foundations of Forensic Auditing
- Types of fraud and red flag indicators
- Scope of investigation and chain of custody
Digital Forensics Tools and Evidence Management
- Evidence imaging and hash verification
- Timeline reconstruction and email metadata analysis
Cybersecurity Risk and IT General Controls
- Access, change, and operational controls
- Cyber threat landscape considerations for audit planning
Cloud Infrastructure and Data Protection Assessment
- Shared responsibility models and cloud configuration reviews
- Data protection and privacy compliance verification
COSO Enterprise Risk Management
- Five components and ERM principles
- Risk appetite, tolerance levels, and portfolio perspective
ISO 31000 Risk Management in Practice
- Risk management processes and guiding principles
- Maintaining risk registers, key risk indicators, and treatment plans
Compliance Programmes and AML Prevention
- Compliance frameworks and control testing
- AML typologies, screening, and transaction monitoring
Integrated Audit Simulation and Reporting
- End-to-end audit of a simulated business cycle
- Documenting findings, root cause analysis, reporting, and follow-up actions
Requirements
- Practical experience in administrative, financial, compliance, or auditing roles.
- Proficiency in using spreadsheets for basic data management.
- No prior background in programming or statistics is necessary.
Target Audience
- Reviewers and supervisors responsible for ensuring audit and assessment quality.
- Internal auditors and compliance officers transitioning towards data-driven testing.
- Finance, administrative, and operations staff involved in conducting or receiving audits.
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 6400 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (3)
Fun to talk
Jihan Fadila - BAF
Course - Root Cause Analysis (RCA) for Internal Audit
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
Speed of response and communication
