Course Outline
Auditing, Evaluation & Organizational Governance
- Distinguishing between audit, assessment, review, and inspection
- The role of internal audit within governance and assurance
IIA International Standards & Code of Ethics
- The IPPF structure and its mandatory components
- Maintaining independence, objectivity, and ethical behavior
Risk-Based Audit Planning & Scoping
- Mapping assurance requirements and defining the audit universe
- Setting engagement objectives, criteria, and scope
Audit Programmes, Evidence & Working Papers
- Managing audit programmes under ISO 19011
- Ensuring evidence sufficiency, reliability, and proper documentation
Auditing ISO 9001 Quality Management Systems
- Applying the process approach and risk-based thinking
- Grading nonconformities and assessing process performance
Auditing ISO 27001 Information Security Management Systems
- Reviewing Annex A control areas and risk treatment strategies
- Evaluating information security evidence and sampling techniques
Data Acquisition & Preparation for Audit Analytics
- Working with source systems, data extracts, and data dictionaries
- Performing data cleaning, validation, and completeness checks
Analytical Procedures, Sampling & Full-Population Testing
- Conducting trend, ratio, and reasonableness analyses
- Comparing sampling methods with full-population testing
AI & Automation in the Audit Lifecycle
- Utilizing automated audit software and workflow management tools
- Leveraging generative AI for evidence review and report drafting
Anomaly Detection & Fraud Indicator Testing
- Implementing rule-based and statistical outlier detection
- Applying Benford's law analysis
- Testing for duplicates, gaps, and exceptions
Forensic Auditing Fundamentals
- Identifying fraud types and red flag indicators
- Defining investigation scope and maintaining the chain of evidence
Digital Forensics Tools & Evidence Handling
- Creating evidence images and verifying hashes
- Analyzing timelines and email metadata
Cybersecurity Risk & IT General Controls
- Reviewing access, change, and operations controls
- Assessing the cyber threat landscape for audit planning
Cloud Infrastructure & Data Protection Assessment
- Evaluating shared responsibility models and cloud configurations
- Checking data protection and privacy compliance
COSO Enterprise Risk Management
- Understanding the five components and ERM principles
- Defining risk appetite, tolerance, and portfolio views
ISO 31000 Risk Management in Practice
- Applying the risk management process and core principles
- Maintaining risk registers, key risk indicators, and treatment plans
Compliance Programmes & AML Prevention
- Testing compliance frameworks and controls
- Addressing AML typologies, screening, and transaction monitoring
Integrated Audit Simulation & Reporting
- Conducting an end-to-end audit of a simulated business cycle
- Documenting findings, root causes, reporting, and follow-up actions
Requirements
- Professional experience in administrative, financial, compliance, or auditing functions.
- Proficiency in using spreadsheets for basic data manipulation.
- No prior background in programming or statistics is necessary.
Target Audience
- Reviewers and supervisors accountable for the quality of audit and evaluation processes.
- Internal auditors and compliance officers transitioning toward data-driven testing methods.
- Finance, administrative, and operations personnel who either conduct or receive audits.
Testimonials (2)
Fun to talk
Jihan Fadila - BAF
Course - Root Cause Analysis (RCA) for Internal Audit
The trainer was helpful..
