Course Outline
Auditing, Assessment and Organisational Governance
- Audit, assessment, review and inspection compared
- Internal audit's role in governance and assurance
The IIA International Standards and Code of Ethics
- IPPF structure and mandatory elements
- Independence, objectivity and ethical conduct
Risk-Based Audit Planning and Scoping
- Assurance mapping and the audit universe
- Engagement objectives, criteria and scope
Audit Programmes, Evidence and Working Papers
- ISO 19011 audit programme management
- Evidence sufficiency, reliability and documentation
Auditing ISO 9001 Quality Management Systems
- Process approach and risk-based thinking
- Nonconformity grading and process performance
Auditing ISO 27001 Information Security Management Systems
- Annex A control areas and risk treatment
- Information security evidence and sampling
Data Acquisition and Preparation for Audit Analytics
- Source systems, extracts and data dictionaries
- Data cleaning, validation and completeness checks
Analytical Procedures, Sampling and Full-Population Testing
- Trend, ratio and reasonableness analysis
- Sampling versus full-population testing
AI and Automation in the Audit Lifecycle
- Automated audit software and workflow tools
- Generative AI for evidence review and drafting
Anomaly Detection and Fraud Indicator Testing
- Rule-based and statistical outlier detection
- Benford's law analysis
- Duplicate, gap and exception testing
Forensic Auditing Fundamentals
- Fraud types and red flag indicators
- Investigation scope and evidence chain
Digital Forensics Tools and Evidence Handling
- Evidence imaging and hash verification
- Timeline and email metadata analysis
Cybersecurity Risk and IT General Controls
- Access, change and operations controls
- Cyber threat landscape for audit planning
Cloud Infrastructure and Data Protection Assessment
- Shared responsibility and cloud configuration review
- Data protection and privacy compliance checks
COSO Enterprise Risk Management
- Five components and ERM principles
- Risk appetite, tolerance and portfolio view
ISO 31000 Risk Management in Practice
- Risk management process and principles
- Risk registers, key risk indicators and treatment plans
Compliance Programmes and AML Prevention
- Compliance framework and control testing
- AML typologies, screening and transaction monitoring
Integrated Audit Simulation and Reporting
- End-to-end audit of a simulated business cycle
- Findings, root cause, reporting and follow-up
Requirements
- Experience in an administrative, financial, compliance or auditing role.
- Working comfort with spreadsheets for basic data handling.
- No programming or statistics background required.
Audience
- Reviewers and supervisors responsible for audit and assessment quality.
- Internal auditors and compliance officers moving into data-driven testing.
- Finance, administrative and operations staff who conduct or receive audits.
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 5800 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (2)
Structured methodologies and practical tools applicable in the daily dynamics of quality management audits. It was an enriching experience.
Mildred M. Colmenares G. - LASER Airlines
Course - Root Cause Analysis (RCA) for Internal Auditors
Machine Translated
Very suitable for supporting work tasks.
Zakie Farhan - BAF
Course - Root Cause Analysis (RCA) for Internal Audit
Machine Translated
