Audit & Internal Controls Course

Lesson 1 • Core Internal Control Concepts

Introduces control objectives, categories, and the relationship between risk and control. Provides the conceptual lens used throughout the course.

Lesson 2 • Purpose and Scope of Auditing

Defines auditing, its objectives, and its role in organisational governance. Establishes why audits exist and how they create accountability.

Lesson 3 • Governance, Risk, and Compliance Overview

Maps the GRC ecosystem and shows how audit fits within it. You connect audit activity to broader organisational risk management.

Lesson 4 • Professional Standards and Ethics

Covers globally recognised auditing standards and the ethical principles auditors must uphold. Grounds all subsequent practice in professional conduct.

Lesson 1 • Risk Assessment Methodologies

Applies qualitative and quantitative techniques to evaluate risk likelihood and impact. Builds the analytical foundation for prioritising audit areas.

Lesson 2 • Engagement-Level Planning

Focuses on scoping individual audits, setting objectives, and defining success criteria. Prepares you for fieldwork execution.

Lesson 3 • Understanding Organisational Risk

Examines inherent, residual, and control risk across business processes. Connects risk identification to audit scope decisions.

Lesson 4 • Developing the Audit Universe

Constructs a comprehensive inventory of auditable entities and processes. Demonstrates how the universe drives annual audit scheduling.

Lesson 1 • IT Control Frameworks

Introduces frameworks governing information technology controls and governance. Bridges general IT controls to financial and operational audit work.

Lesson 2 • COSO Integrated Framework

Examines the five components and seventeen principles of the COSO model. You apply each component to real business scenarios.

Lesson 3 • Control Design vs. Operating Effectiveness

Distinguishes between a well-designed control and one that operates effectively. Teaches you to test both dimensions during fieldwork.

Lesson 4 • COSO Enterprise Risk Management

Extends COSO to enterprise-wide risk management strategy and performance. Connects ERM concepts to audit planning and control evaluation.

Lesson 1 • Sampling Methods in Auditing

Applies statistical and non-statistical sampling to control testing and substantive procedures. Teaches sample size determination and result projection.

Lesson 2 • Types and Quality of Audit Evidence

Classifies evidence by type, source, and reliability. Establishes criteria for sufficiency and appropriateness used throughout fieldwork.

Lesson 3 • Workpaper Retention and Security

Addresses retention schedules, access controls, and confidentiality of audit files. Prepares you to manage records in compliance with professional standards.

Lesson 4 • Evidence-Gathering Techniques

Covers interviews, observation, inspection, and recalculation as primary fieldwork methods. Connects each technique to specific control testing scenarios.

Lesson 1 • Identifying and Evaluating Exceptions

Establishes criteria for recognising control failures and evaluating their significance. Guides you from exception identification to root cause analysis.

Lesson 2 • Substantive Testing Procedures

Applies analytical procedures and detailed tests to verify account balances and transactions. Distinguishes substantive from control testing purposes.

Lesson 3 • Fraud Indicators During Fieldwork

Identifies red flags and anomalies that suggest fraudulent activity within tested areas. Connects fraud awareness to escalation protocols.

Lesson 4 • Concluding Fieldwork and Wrap-Up

Covers procedures for closing fieldwork, summarising findings, and preparing for reporting. Ensures completeness before the audit moves to reporting phase.

Lesson 1 • Presenting Results to Stakeholders

Prepares you to deliver findings verbally to management and audit committees. Covers meeting facilitation, objection handling, and consensus building.

Lesson 2 • Rating and Prioritising Findings

Applies risk-based rating scales to classify finding severity. Helps you communicate urgency and guide management prioritisation.

Lesson 3 • Anatomy of an Audit Report

Breaks down the standard components of a formal audit report. Establishes structure and tone expectations for all subsequent report writing.

Lesson 4 • Writing Effective Audit Findings

Applies the condition-criteria-cause-effect model to draft precise findings. Teaches you to write findings that are factual, concise, and persuasive.

Lesson 1 • Management's Monitoring Responsibilities

Defines management's role in ongoing and periodic monitoring of internal controls. Distinguishes management monitoring from internal audit oversight.

Lesson 2 • Measuring Audit Function Effectiveness

Applies key performance indicators to evaluate the internal audit function's impact. Connects metrics to quality assurance and improvement programmes.

Lesson 3 • Continuous Auditing Concepts

Introduces automated, real-time audit monitoring as a complement to periodic engagements. Explains the technology and process requirements for implementation.

Lesson 4 • Designing Continuous Control Monitors

Guides you through building automated control tests that run on a recurring basis. Covers alert design, threshold setting, and exception workflows.

Lesson 1 • Positioning Audit as a Strategic Partner

Elevates audit's role from compliance checker to trusted adviser within the organisation. Covers relationship management with senior leadership and the board.

Lesson 2 • Auditing Emerging Risk Areas

Applies audit methodology to cybersecurity, third-party risk, and ESG-related controls. Prepares you to address risks that traditional frameworks may underserve.

Lesson 3 • Agile and Iterative Audit Approaches

Adapts agile project management principles to audit engagements for faster delivery. Contrasts agile methods with traditional waterfall audit approaches.

Lesson 4 • Building and Leading the Audit Team

Addresses talent acquisition, competency development, and team performance management. Equips future audit leaders to build high-performing audit functions.