Course Outline
Overview of Auditing, Evaluation, and Organizational Governance
- Distinguishing between audit, assessment, review, and inspection.
- The role of internal audit in governance and assurance.
IIA International Standards and Code of Ethics
- IPPF framework structure and mandatory requirements.
- Maintaining independence, objectivity, and ethical behavior.
Risk-Based Audit Planning and Scope Definition
- Assurance mapping and defining the audit universe.
- Establishing engagement objectives, criteria, and scope.
Audit Programs, Evidence Collection, and Working Papers
- Managing audit programs in accordance with ISO 19011.
- Ensuring evidence sufficiency, reliability, and proper documentation.
Auditing ISO 9001 Quality Management Systems
- Applying the process approach and risk-based thinking.
- Grading nonconformities and evaluating process performance.
Auditing ISO 27001 Information Security Management Systems
- Reviewing Annex A control areas and risk treatment strategies.
- Gathering information security evidence and applying sampling techniques.
Data Acquisition and Preparation for Audit Analytics
- Understanding source systems, data extracts, and data dictionaries.
- Performing data cleaning, validation, and completeness checks.
Analytical Procedures, Sampling, and Full-Population Testing
- Conducting trend, ratio, and reasonableness analysis.
- Comparing sampling methods with full-population testing.
AI and Automation in the Audit Lifecycle
- Utilizing automated audit software and workflow management tools.
- Employing Generative AI for evidence review and report drafting.
Anomaly Detection and Fraud Indicator Testing
- Implementing rule-based and statistical outlier detection.
- Applying Benford's law analysis.
- Testing for duplicates, gaps, and exceptions.
Foundations of Forensic Auditing
- Identifying fraud types and red flag indicators.
- Defining investigation scope and maintaining the evidence chain.
Digital Forensics Tools and Evidence Management
- Executing evidence imaging and hash verification.
- Analyzing timelines and email metadata.
Cybersecurity Risk and IT General Controls
- Evaluating access, change, and operational controls.
- Assessing the cyber threat landscape for audit planning purposes.
Cloud Infrastructure and Data Protection Assessment
- Reviewing shared responsibility models and cloud configurations.
- Performing data protection and privacy compliance checks.
COSO Enterprise Risk Management
- Understanding the five components and ERM principles.
- Defining risk appetite, tolerance, and the portfolio view.
Applying ISO 31000 Risk Management in Practice
- Following the risk management process and core principles.
- Maintaining risk registers, key risk indicators, and treatment plans.
Compliance Programs and AML Prevention
- Testing compliance frameworks and controls.
- Addressing AML typologies, screening, and transaction monitoring.
Integrated Audit Simulation and Reporting
- Conducting an end-to-end audit of a simulated business cycle.
- Documenting findings, root causes, reporting outcomes, and follow-up actions.
Requirements
- Professional experience in administrative, financial, compliance, or auditing functions.
- Proficiency in using spreadsheets for basic data management.
- No prior knowledge of programming or statistics is necessary.
Target Audience
- Reviewers and supervisors accountable for the quality of audits and evaluations.
- Internal auditors and compliance professionals transitioning to data-driven testing methods.
- Finance, administrative, and operations personnel who either conduct or undergo audits.
Testimonials (2)
Fun to talk
Jihan Fadila - BAF
Course - Root Cause Analysis (RCA) for Internal Audit
Speed of response and communication
