Course Outline
Auditing, Assessment, and Organizational Governance
- Distinguishing between auditing, assessment, review, and inspection
- The role of internal audit in governance and assurance
IIA International Standards and Code of Ethics
- Structure of the IPPF and its mandatory components
- Maintaining independence, objectivity, and ethical behavior
Risk-Based Audit Planning and Scoping
- Assurance mapping and defining the audit universe
- Setting engagement objectives, criteria, and scope
Audit Programs, Evidence, and Working Papers
- Managing audit programs under ISO 19011
- Ensuring evidence sufficiency, reliability, and proper documentation
Auditing ISO 9001 Quality Management Systems
- Process approach and risk-based thinking
- Grading nonconformities and assessing process performance
Auditing ISO 27001 Information Security Management Systems
- Annex A control areas and risk treatment
- Information security evidence collection and sampling
Data Acquisition and Preparation for Audit Analytics
- Source systems, data extracts, and data dictionaries
- Data cleaning, validation, and completeness verification
Analytical Procedures, Sampling, and Full-Population Testing
- Trend, ratio, and reasonableness analysis
- Comparing sampling methods with full-population testing
AI and Automation in the Audit Lifecycle
- Utilizing automated audit software and workflow tools
- Employing generative AI for evidence review and draft generation
Anomaly Detection and Fraud Indicator Testing
- Rule-based and statistical outlier detection
- Applying Benford's law analysis
- Testing for duplicates, gaps, and exceptions
Forensic Auditing Fundamentals
- Identifying fraud types and red flag indicators
- Defining investigation scope and maintaining the chain of evidence
Digital Forensics Tools and Evidence Handling
- Evidence imaging and hash verification
- Analysis of timelines and email metadata
Cybersecurity Risk and IT General Controls
- Access, change, and operations controls
- Understanding the cyber threat landscape for audit planning
Cloud Infrastructure and Data Protection Assessment
- Shared responsibility models and cloud configuration reviews
- Compliance checks for data protection and privacy
COSO Enterprise Risk Management
- The five components and ERM principles
- Risk appetite, tolerance levels, and portfolio views
ISO 31000 Risk Management in Practice
- Risk management processes and principles
- Maintaining risk registers, key risk indicators, and treatment plans
Compliance Programs and AML Prevention
- Compliance frameworks and control testing
- AML typologies, screening, and transaction monitoring
Integrated Audit Simulation and Reporting
- Conducting an end-to-end audit of a simulated business cycle
- Documenting findings, root causes, reporting, and follow-up actions
Requirements
- Experience in an administrative, financial, compliance, or auditing role.
- Basic proficiency with spreadsheets for data handling.
- No prior programming or statistics background is necessary.
Target Audience
- Reviewers and supervisors responsible for maintaining audit and assessment quality.
- Internal auditors and compliance officers transitioning to data-driven testing methods.
- Finance, administrative, and operations staff involved in conducting or receiving audits.
Testimonials (2)
Fun to talk
Jihan Fadila - BAF
Course - Root Cause Analysis (RCA) for Internal Audit
The trainer was helpful..
