Course Outline
Auditing, Assessment, and Organizational Governance
- Comparing audit, assessment, review, and inspection processes
- The role of internal audit in governance and assurance
IIA International Standards and Code of Ethics
- Structure of the IPPF and its mandatory components
- Maintaining independence, objectivity, and ethical behavior
Planning and Scoping Risk-Based Audits
- Mapping assurance needs and defining the audit universe
- Setting engagement objectives, criteria, and scope
Audit Programs, Evidence, and Documentation
- Managing audit programs per ISO 19011
- Ensuring evidence sufficiency, reliability, and proper documentation
Auditing ISO 9001 Quality Management Systems
- Applying the process approach and risk-based thinking
- Grading nonconformities and assessing process performance
Auditing ISO 27001 Information Security Management Systems
- Reviewing Annex A control areas and risk treatment
- Gathering information security evidence and sampling methods
Acquiring and Preparing Data for Audit Analytics
- Understanding source systems, extracts, and data dictionaries
- Data cleaning, validation, and completeness verification
Analytical Techniques, Sampling, and Full-Population Testing
- Conducting trend, ratio, and reasonableness analyses
- Comparing sampling methods with full-population testing
Integrating AI and Automation into the Audit Lifecycle
- Utilizing automated audit software and workflow utilities
- Leveraging generative AI for evidence review and draft creation
Detecting Anomalies and Testing Fraud Indicators
- Applying rule-based and statistical outlier detection
- Performing Benford's law analysis
- Testing for duplicates, gaps, and exceptions
Basics of Forensic Auditing
- Identifying fraud types and red flag indicators
- Defining investigation scope and maintaining evidence chains
Digital Forensics Tools and Evidence Management
- Creating evidence images and verifying hashes
- Analyzing timelines and email metadata
Cybersecurity Risks and IT General Controls
- Evaluating access, change, and operational controls
- Understanding the cyber threat landscape for audit planning
Assessing Cloud Infrastructure and Data Protection
- Reviewing shared responsibility models and cloud configurations
- Checking data protection and privacy compliance
COSO Enterprise Risk Management
- Exploring the five components and ERM principles
- Understanding risk appetite, tolerance, and portfolio perspectives
Practical Application of ISO 31000 Risk Management
- Implementing risk management processes and principles
- Managing risk registers, key risk indicators, and treatment plans
Compliance Programs and AML Prevention
- Testing compliance frameworks and controls
- Analyzing AML typologies, screening, and transaction monitoring
Comprehensive Audit Simulation and Reporting
- Performing an end-to-end audit of a simulated business cycle
- Addressing findings, root causes, reporting, and follow-up
Requirements
- Practical experience in administrative, financial, compliance, or auditing roles.
- Proficiency in using spreadsheets for basic data management.
- No prior knowledge of programming or statistics is necessary.
Target Audience
- Reviewers and supervisors tasked with ensuring the quality of audits and assessments.
- Internal auditors and compliance professionals transitioning to data-driven testing methodologies.
- Finance, administration, and operations teams involved in conducting or undergoing audits.
Testimonials (2)
The trainer was helpful..
Attila - Lifial
Course - Compliance and the Management of Compliance Risk
Speed of response and communication
