Course Outline
Auditing, Assessment, and Organizational Governance
- Comparative analysis of audit, assessment, review, and inspection
- The role of internal audit in governance and assurance
IIA International Standards and Code of Ethics
- IPPF framework and mandatory requirements
- Maintaining independence, objectivity, and ethical behavior
Risk-Based Audit Planning and Scoping
- Mapping assurance activities and defining the audit universe
- Defining engagement objectives, criteria, and scope
Audit Programs, Evidence, and Working Papers
- Managing audit programs per ISO 19011
- Ensuring evidence is sufficient, reliable, and properly documented
Auditing ISO 9001 Quality Management Systems
- Applying the process approach and risk-based thinking
- Grading nonconformities and evaluating process performance
Auditing ISO 27001 Information Security Management Systems
- Reviewing Annex A control areas and risk treatment plans
- Collecting information security evidence and applying sampling techniques
Data Acquisition and Preparation for Audit Analytics
- Understanding source systems, data extracts, and data dictionaries
- Performing data cleaning, validation, and completeness verification
Analytical Procedures, Sampling, and Full-Population Testing
- Conducting trend, ratio, and reasonableness analysis
- Comparing sampling methods with full-population testing
AI and Automation in the Audit Lifecycle
- Utilizing automated audit software and workflow utilities
- Leveraging Generative AI for evidence review and documentation drafting
Anomaly Detection and Fraud Indicator Testing
- Detecting outliers using rule-based and statistical methods
- Applying Benford's law for analysis
- Testing for duplicates, gaps, and exceptions
Forensic Auditing Essentials
- Identifying common fraud types and warning signs
- Defining investigation scope and maintaining the chain of custody
Digital Forensics Tools and Evidence Handling
- Creating evidence images and verifying hashes
- Analyzing timelines and email metadata
Cybersecurity Risk and IT General Controls
- Evaluating access, change, and operations controls
- Assessing the cyber threat landscape for audit planning purposes
Cloud Infrastructure and Data Protection Assessment
- Reviewing shared responsibility models and cloud configurations
- Verifying data protection and privacy compliance
COSO Enterprise Risk Management
- Exploring the five components and ERM principles
- Understanding risk appetite, tolerance, and the portfolio perspective
ISO 31000 Risk Management in Practice
- Applying risk management processes and core principles
- Managing risk registers, key risk indicators, and treatment plans
Compliance Programs and AML Prevention
- Establishing compliance frameworks and testing controls
- Addressing AML typologies, screening, and transaction monitoring
Integrated Audit Simulation and Reporting
- Executing an end-to-end audit of a simulated business cycle
- Reporting findings, root causes, and follow-up actions
Requirements
- Background in administrative, financial, compliance, or auditing functions.
- Proficiency in using spreadsheets for basic data management.
- No prior experience in programming or statistics is necessary.
Target Audience
- Reviewers and supervisors accountable for the quality of audit and assessment outcomes.
- Internal auditors and compliance officers transitioning to data-driven testing methods.
- Finance, administrative, and operations personnel who perform or undergo audits.
Testimonials (2)
Fun to talk
Jihan Fadila - BAF
Course - Root Cause Analysis (RCA) for Internal Audit
The trainer was helpful..
