Course Outline
Audit, Evaluation, and Corporate Governance
- Distinguishing between audit, assessment, review, and inspection
- The role of internal audit in governance and assurance
IIA International Standards and Code of Ethics
- Structure of the IPPF and its mandatory components
- Maintaining independence, objectivity, and ethical behavior
Risk-Oriented Audit Planning and Scoping
- Mapping assurance activities and defining the audit universe
- Setting engagement objectives, criteria, and scope
Audit Programs, Evidence, and Working Papers
- Managing audit programs in accordance with ISO 19011
- Ensuring the sufficiency, reliability, and documentation of evidence
Auditing ISO 9001 Quality Management Systems
- Applying the process approach and risk-based thinking
- Grading nonconformities and evaluating process performance
Auditing ISO 27001 Information Security Management Systems
- Reviewing Annex A control areas and risk treatment strategies
- Gathering information security evidence and applying sampling techniques
Data Collection and Preparation for Audit Analytics
- Utilizing source systems, data extracts, and data dictionaries
- Performing data cleaning, validation, and completeness checks
Analytical Methods, Sampling, and Full-Population Testing
- Conducting trend, ratio, and reasonableness analysis
- Comparing sampling methods with full-population testing
AI and Automation in the Audit Process
- Using automated audit software and workflow utilities
- Leveraging generative AI for evidence review and report drafting
Anomaly Detection and Fraud Indicator Testing
- Applying rule-based and statistical outlier detection
- Conducting Benford's law analysis
- Testing for duplicates, gaps, and exceptions
Foundations of Forensic Auditing
- Identifying fraud types and red flag indicators
- Defining investigation scope and maintaining the chain of custody
Digital Forensics Tools and Evidence Management
- Imaging evidence and verifying hashes
- Analyzing timelines and email metadata
Cybersecurity Risks and IT General Controls
- Assessing access, change, and operational controls
- Understanding the cyber threat landscape for planning purposes
Cloud Infrastructure and Data Protection Evaluation
- Reviewing shared responsibility and cloud configurations
- Verifying compliance with data protection and privacy regulations
COSO Enterprise Risk Management
- The five components and principles of ERM
- Defining risk appetite, tolerance, and portfolio perspectives
Applying ISO 31000 Risk Management
- Core risk management processes and principles
- Maintaining risk registers, key risk indicators, and treatment plans
Compliance Frameworks and AML Prevention
- Evaluating compliance frameworks and testing controls
- Understanding AML typologies, screening, and transaction monitoring
Comprehensive Audit Simulation and Reporting
- Executing an end-to-end audit of a simulated business cycle
- Documenting findings, root causes, and follow-up actions
Requirements
- Professional experience in administrative, financial, compliance, or auditing functions.
- Proficiency with spreadsheets for basic data management.
- No prior background in programming or statistics is necessary.
Target Audience
- Reviewers and supervisors accountable for the quality of audit and assessment activities.
- Internal auditors and compliance officers transitioning toward data-driven testing methodologies.
- Finance, administrative, and operational staff who either conduct or are subject to audits.
Testimonials (2)
Fun to talk
Jihan Fadila - BAF
Course - Root Cause Analysis (RCA) for Internal Audit
The trainer was helpful..
