In today's public sector landscape, governments are under increasing pressure to deliver more effective, transparent and accountable services. This shift has led to the evolution of a New Service Model — one that emphasizes citizen outcomes, data-driven decision-making and continuous performance improvement. Auditors, traditionally focused on compliance and financial stewardship, are now expected to play a pivotal role in evaluating and enhancing government performance. This requires a shift in mindset, skills, and tools — from static audits of expenditures to dynamic assessments of results and impacts.

In a world increasingly driven by digital technologies, the reliability, security, and integrity of IT systems are critical to organizational success. Information Technology (IT) auditing is a specialized field that ensures that these systems are well-governed, secure, and effectively support business objectives. IT auditors assess the controls, policies, and procedures that protect information assets and ensure data availability, confidentiality, and integrity. As cyber threats rise and compliance requirements tighten, organizations are relying more on skilled IT auditors to identify vulnerabilities, assess risks and recommend improvements.

In today’s competitive and fast-changing business environment, organizations must continuously evaluate and improve their internal processes to enhance efficiency, reduce costs, and deliver better value to customers. Business Process Analysis and Improvement is a systematic approach that enables organizations to understand how their operations work and identify opportunities for optimization. Effective business process management (BPM) helps organizations to eliminate bottlenecks, streamline workflows, improve quality, and align processes with strategic goals. This training program equips participants with the skills and tools to critically analyze existing business processes and implement impactful improvements

In today’s data-driven world, reliable data is the foundation of sound decision-making, effective policy formulation, and transparent reporting. However, data reliability can be compromised by errors, biases, inconsistencies, or poor collection methods. Assessing data reliability is essential to ensure data integrity and build trust in the information used across organizations. This training program focuses on equipping participants with the knowledge and skills needed to critically assess the reliability of data from various sources and contexts. Participants will learn methodologies, standards, and practical tools to evaluate data quality, identify risks, and recommend improvements.

Internal audit plays a crucial role in enhancing organizational governance, risk management, and control processes. A key element that determines the value of internal audit is its ability to effectively assess risks — identifying, analyzing, and prioritizing them so that audit efforts focus on the most significant areas. In an increasingly complex business environment, internal auditors must adopt a risk-based approach to deliver insights that truly add value to the organization. This training equips auditors with the knowledge and practical skills to conduct risk assessments that align audit plans with organizational objectives and stakeholder expectations.

Performance information is critical for monitoring government programs, evaluating organizational success, and supporting evidence-based decision-making. However, for performance information to be useful, it must be both relevant to the objectives being measured and reliable in terms of accuracy, consistency, and credibility. Auditors, evaluators, and performance managers must be equipped to critically assess performance data to ensure it tells the right story—and tells it truthfully. This course builds foundational and practical knowledge for assessing performance information across public or private sector programs.

As organizations increasingly rely on custom-built software and digital solutions, application security becomes a critical concern. Vulnerabilities introduced during the software development lifecycle (SDLC) can expose systems to breaches, data loss, and reputational damage. Security is no longer just an IT issue—it’s a core business risk. Assessing the security posture of your application development shop is essential to prevent vulnerabilities, ensure compliance, and build resilient, secure software systems.

In a world marked by economic uncertainty, regulatory changes, and rapid innovation, effective risk management is essential for organizational success and sustainability. However, having a risk management framework in place is not enough—organizations must regularly assess the effectiveness of their risk management processes to ensure they are identifying, evaluating, and responding to risks appropriately. This training is designed to provide participants with the knowledge and tools to conduct a thorough and structured assessment of their organization's risk management process, ensuring alignment with best practices, such as ISO 31000, COSO ERM, and other risk governance standards

In an era of increasing data breaches, cyber threats, and privacy regulations, organizations are under more pressure than ever to ensure the protection of Personally Identifiable Information (PII). PII, which includes names, ID numbers, contact details, and other data that can identify an individual, is a critical asset that must be secured. Organizations must not only protect PII from unauthorized access or misuse but also demonstrate compliance with data protection regulations such as GDPR, CCPA, POPIA, and others. Regularly assessing how PII is collected, stored, processed, and shared is essential to identifying risks and strengthening data privacy practices.

The Audit Committee plays a pivotal role in ensuring strong governance, risk management, and oversight of internal controls within an organization. As the regulatory environment grows more complex and stakeholder expectations rise, audit committees are expected to provide more rigorous and informed oversight than ever before. This training program is designed to strengthen the capabilities of audit committee members by equipping them with the knowledge, tools, and insights needed to fulfill their responsibilities effectively and confidently.

The role of an Audit Manager has evolved far beyond managing audit schedules. Today, Audit Managers are expected to lead strategic risk-focused audits, leverage technology, ensure audit quality, guide audit teams, and communicate effectively with senior stakeholders. To succeed, they must apply a blend of leadership, technical expertise, and modern audit tools to deliver value-driven assurance and advisory services.

An effective audit report is a critical tool for communicating audit findings, conclusions, and recommendations to stakeholders. It bridges the gap between audit evidence and decision-making, enabling management, boards, and regulators to understand risks and take appropriate action. Writing clear, concise and impactful audit reports requires not only technical knowledge but also strong communication skills and understanding of the audience. This training empowers auditors and audit managers with proven techniques and frameworks for producing high-quality audit reports that drive improvement.

Audit reports are essential communication tools that influence decision-making, risk management, and organizational improvement. However, many audit reports suffer from poor design, lack of clarity, and delays in delivery, limiting their impact.

Contracts form the foundation of business relationships and obligations. However, poorly managed contracts can lead to financial loss, operational risks, and legal disputes. Auditing contracts effectively uncovers risks, ensures compliance, and drives value by verifying that contracts are executed as intended and payments are justified.

Derivatives such as options, futures, swaps and forwards are complex financial instruments widely used for hedging, speculation, and risk management. Auditing derivative strategies demands specialized knowledge of financial markets, instruments, accounting standards, and risk management frameworks.

Investment activities are critical components of an organization’s financial strategy, encompassing a range of assets such as equities, bonds, real estate, and alternative investments. Auditing these activities ensures that investments are made in accordance with policies, risks are managed appropriately, and financial reporting is accurate.

I.T. applications are the backbone of modern business operations, supporting critical processes and data flows. Auditing I.T. applications ensures that these systems are secure, reliable, and aligned with business objectives. This requires specialized knowledge of software development, security, data integrity, and controls

I.T. outsourcing has become a strategic approach for organizations to optimize costs, access specialized skills, and enhance operational flexibility. However, outsourcing also introduces significant risks related to service quality, data security, compliance and vendor management. Auditing I.T. outsourcing engagements requires auditors to understand contractual agreements, service level agreements (SLAs), risk management practices, and controls over outsourced services. This training empowers auditors to assess outsourcing arrangements effectively, ensuring value delivery and risk mitigation.

J.D. Edwards (JDE) is a widely used Enterprise Resource Planning (ERP) system that integrates various business processes such as finance, procurement, manufacturing, and supply chain. Auditing JDE requires specialized understanding of its modules, configurations, and controls to ensure data integrity, system security, and compliance with organizational policies.

Oracle Applications, part of Oracle’s suite of enterprise software, encompass a wide range of modules such as Financials, Supply Chain Management, Human Capital Management, and Customer Relationship Management. Auditing Oracle Applications requires understanding of the system architecture, configurations, business processes, and embedded controls to ensure data integrity, compliance, and operational efficiency.

PeopleSoft, now part of Oracle, is a comprehensive ERP solution used widely for managing finance, human resources, supply chain, and other critical business functions. Auditing PeopleSoft requires a deep understanding of its architecture, modules, and embedded controls to ensure accurate data processing, secure access, and compliance with organizational and regulatory requirements

Performance Management Systems (PMS) are critical tools organizations use to measure, monitor, and improve the effectiveness and efficiency of their operations, projects, and personnel. These systems collect and report performance data tied to strategic goals, key performance indicators (KPIs), and organizational objectives. Auditing a PMS involves verifying the accuracy, reliability, relevance, and completeness of performance information, as well as assessing the adequacy of controls surrounding data collection, processing, reporting, and use.

As organizations migrate their systems, data, and services to the cloud, new risks, compliance challenges, and control considerations emerge. Unlike traditional IT environments, cloud computing introduces shared responsibilities, virtualization, dynamic scaling, and third-party service dependencies — all of which demand a new audit mindset and skillset. Auditing the cloud requires understanding different cloud models (IaaS, PaaS, SaaS), deployment types (public, private, hybrid), and cloud provider responsibilities. This course empowers auditors to assess cloud-specific risks, control frameworks, data protection strategies, and compliance obligations.

Corporate governance and enterprise risk management (ERM) are essential pillars for ensuring organizational accountability, sustainability, and resilience. While governance defines the structure and oversight mechanisms of an organization, ERM provides a systematic approach to identifying and managing risks aligned with strategic objectives. Internal and external auditors play a critical role in assessing and enhancing both governance and ERM processes. They provide independent assurance that systems are in place to ensure compliance, accountability, risk mitigation, and performance enhancement.

The Auditor-in-Charge (AIC) plays a critical leadership role in internal audit engagements—responsible not only for planning and executing audits, but also for team coordination, client communication, risk assessment, and ensuring the timely delivery of quality results. As audits grow in complexity, today’s AICs must go beyond traditional auditing to master a blend of technical, project management, and people leadership skills. This training is designed to empower current and aspiring AICs with practical tools, techniques, and frameworks to lead audits efficiently and effectively.

New auditors entering the internal or external audit profession must quickly learn foundational tools, techniques, and concepts to perform audit work effectively and ethically. As part of the first line of assurance, beginning auditors are expected to understand the audit process, gather and evaluate evidence, document their work properly, and contribute meaningfully to audit teams.

In a dynamic business and regulatory environment, internal auditors must go beyond basic compliance and control reviews to deliver insights that drive organizational improvement and strategic assurance. Applying best practices in internal auditing ensures that audit functions add value, foster trust, and maintain professional standards while staying aligned with organizational priorities.

As audit environments become increasingly data-driven, auditors must leverage technology to enhance efficiency, coverage, and effectiveness. Computer-Assisted Audit Techniques (CAATs) empower auditors to analyze large volumes of data, test controls, detect anomalies, and perform complex audit procedures that are not possible manually.

Control Self-Assessment (CSA) is a powerful methodology that allows management and staff to assess the effectiveness of their internal controls and risk management processes. CSA not only enhances ownership and accountability but also improves risk awareness across the organization.

Cloud computing is now integral to modern business operations, offering agility, scalability, and cost-efficiency. However, it also introduces unique risks and control challenges that traditional audit approaches may not fully address. Auditors must understand the shared responsibility model, data residency risks, vendor control limitations, and other cloud-specific security and compliance issues.

Effective communication is critical to the success of internal and external audit professionals. Auditors must convey complex and sensitive information with clarity, diplomacy, and credibility—whether they’re interviewing stakeholders, documenting evidence, presenting findings, or writing audit reports. Strong communication skills enhance audit quality, promote collaboration, and support the overall credibility of the audit function.

As audit environments become increasingly data-driven, auditors must leverage technology to enhance efficiency, coverage, and effectiveness. Computer-Assisted Audit Techniques (CAATs) empower auditors to analyze large volumes of data, test controls, detect anomalies, and perform complex audit procedures that are not possible manually.

Construction projects—whether public infrastructure, commercial developments, or capital asset upgrades—are inherently high-risk due to their complexity, cost, and long timelines. Auditing construction activities requires a targeted approach that goes beyond traditional financial or compliance audits. Auditors must understand project management, procurement, contracts, change orders, quality assurance, and regulatory frameworks to provide effective oversight.

In addition to assurance activities, modern internal auditors are increasingly expected to provide consulting services that add value and improve organizational processes. These services are advisory in nature, objective, and intended to support management without compromising the auditor’s independence. To perform effectively in this consulting capacity, auditors must develop a different set of skills, activities, and attitudes—including communication, collaboration, problem-solving, facilitation, and the ability to balance advisory roles with objectivity and professionalism.

Traditional auditing, often performed periodically, is no longer sufficient in fast-paced, data-rich, and technology-driven environments. Continuous auditing provides a proactive, real-time approach to assurance, enabling internal auditors to monitor risks, controls, and transactions on an ongoing basis. With the increasing availability of automation, data analytics, and AI, organizations now expect internal audit functions to deliver insights more frequently and with greater relevance.

Control Self-Assessment (CSA) is a collaborative audit technique that empowers process owners to assess the adequacy and effectiveness of internal controls within their areas of responsibility. By involving staff directly in the evaluation of controls and risks, CSA promotes ownership, strengthens the control environment, and supports better risk management.

Control Self-Assessment (CSA) is a collaborative technique that depends heavily on effective facilitation. The success of a CSA session lies not just in the content, but in the facilitator’s ability to guide discussions, manage group dynamics, and foster a safe environment where participants can evaluate and discuss risks and controls honestly and productively.

Corporate Governance refers to the framework of rules, relationships, systems, and processes within and by which authority is exercised and controlled in corporations. Effective governance ensures accountability, fairness, and transparency in a company’s relationship with stakeholders. Internal Audit plays a crucial role in supporting strong governance by evaluating governance processes, advising the board, and providing independent assurance on the effectiveness of governance-related activities.

Corporate Social Responsibility (CSR) encompasses a company’s efforts to operate in an ethical and sustainable manner by considering its impact on society, the environment, and the economy. Increasingly, stakeholders—including investors, customers, regulators, and employees—are holding organizations accountable not just for financial performance, but for their role in driving positive social and environmental outcomes.

Corruption including bribery, embezzlement, kickbacks, and misuse of power—is one of the most serious threats to organizational integrity, public trust, and financial stability. It distorts decision-making, increases costs, and exposes organizations to legal, reputational, and operational risks. Internal Audit is uniquely positioned to support anti-corruption efforts by identifying vulnerabilities, evaluating internal controls, detecting red flags, and promoting a culture of transparency and accountability. To be effective, internal auditors need specialized knowledge of corruption schemes, risk indicators, and practical mitigation strategies.

The COSO 2013 Internal Control–Integrated Framework is a globally recognized model for designing, implementing, and evaluating internal controls. It builds upon the original 1992 version and enhances guidance to help organizations adapt to changing environments, improve performance, and better respond to risks.

Internal auditors often face complex, ambiguous, or systemic challenges that require more than technical expertise. From resolving control breakdowns to identifying process inefficiencies or designing audit programs for new risks, auditors need strong creative problem-solving skills to develop practical and innovative solutions. Creative problem-solving is not just for designers or entrepreneurs — it’s a critical thinking process that enables auditors to question assumptions, generate new ideas, and evaluate alternatives. When combined with auditing rigor, it becomes a powerful tool for uncovering root causes, recommending impactful solutions, and influencing change.

In an increasingly complex, high-stakes, and fast-changing business environment, professionals especially auditors, risk managers, and internal advisors must possess two vital competencies: critical thinking and negotiation skills.

In today’s complex business and risk environment, internal auditors must move beyond checklist auditing and adopt a more analytical, adaptive, and insightful mindset. Critical thinking is essential for identifying root causes, assessing controls, evaluating risks, and delivering high-impact recommendations.

In today’s data-driven business environment, leaders and managers must be able to monitor performance, assess risk, and drive improvement through timely, meaningful insights. Dashboards are essential tools that translate data into visual, actionable intelligence—enabling departments to make informed decisions, improve accountability, and align with strategic goals.

Fraud is increasingly sophisticated, often concealed within vast amounts of transactional and operational data. Traditional audit methods may not detect subtle anomalies or patterns indicative of fraud. Data analysis and data mining provide powerful tools to uncover hidden trends, outliers, and relationships that point to fraudulent activity.

As organizations become increasingly data-driven, internal auditors must evolve beyond manual sampling and traditional audit techniques. Data analysis equips auditors with powerful tools to examine full datasets, uncover hidden risks, identify control weaknesses, and provide stronger assurance.

Fraud, whether internal or external poses a serious threat to organizational integrity, reputation, and financial stability. Organizations of all sizes and industries face increasing risks of fraud from employees, vendors, cybercriminals, and colluding parties.

In an increasingly complex risk environment, fraud remains one of the most persistent and costly threats to organizations globally. Regulatory bodies, stakeholders, and the public expect organizations to implement robust frameworks to prevent, detect, and respond to fraud effectively.

Audit professionals are expected to not only perform high-quality work but also to communicate their findings clearly, concisely, and professionally. Poorly written audit reports, workpapers, or emails can undermine the credibility of the audit function, confuse stakeholders, and delay corrective actions.

In today’s volatile and complex business environment, organizations face a wide range of risks—financial, operational, strategic, technological, regulatory, and reputational. Managing these risks in silos is no longer sufficient. Enterprise Risk Management (ERM) offers a comprehensive, integrated, and proactive approach to identifying and addressing risks across the organization.

As organizations become increasingly reliant on technology, the importance of robust I.T. security management continues to grow. From protecting sensitive data and digital assets to ensuring system integrity and compliance with cybersecurity regulations, evaluating I.T. security is now a critical function for internal auditors, risk professionals, and security managers.

Organizational ethics form the foundation of trust, reputation, and sustainable success. In today’s business environment, stakeholders including employees, customers, regulators, investors expect companies to operate with transparency, integrity, and accountability. Evaluating organisational ethics is essential to ensure ethical standards are not only established but embedded in culture, policies, and decision-making.

Financial auditing is a core function within internal auditing, ensuring the accuracy, completeness, and reliability of financial information. It helps organizations detect errors, prevent fraud, and improve financial controls and compliance. Internal auditors play a critical role by providing independent assurance on the financial reporting processes and identifying risks affecting financial integrity.

Financial statement fraud is a serious threat that can lead to significant financial loss, reputational damage, and regulatory penalties for organizations. Internal auditors play a crucial role in detecting, preventing, and investigating such fraud to safeguard organizational integrity and protect stakeholders' interests.

Fraud auditing requires the ability to detect anomalies and irregularities within large volumes of data efficiently and accurately. ACL (Audit Command Language) is a powerful data analytics software widely used by auditors to analyze transactional data, identify patterns, and uncover potential fraud risks. Leveraging ACL enhances the effectiveness and efficiency of fraud audits by automating data analysis and improving fraud detection capabilities.

Fraud continues to pose significant risks to organizations worldwide, threatening financial health, reputation, and regulatory compliance. Chief Audit Executives (CAEs) and management hold key responsibilities in establishing a strong control environment that deters fraud and promotes ethical behavior.

Government auditors play a critical role in safeguarding public resources by ensuring transparency, accountability, and integrity in government operations. Fraud in the public sector can severely undermine public trust, lead to significant financial losses, and hamper effective governance.

Internal auditors serve as a key defense line in detecting and preventing fraud within organizations. Their unique position allows them to identify vulnerabilities, assess controls, and investigate irregularities that may indicate fraudulent activity. Understanding fraud detection techniques and investigation processes is crucial for internal auditors to protect organizational assets and maintain stakeholder confidence.

Fraud investigations are complex and require a methodical approach combined with the right tools and techniques to uncover truth, gather evidence, and support corrective actions. Investigators must be skilled in planning, evidence collection, interviewing, data analysis, and legal considerations to effectively resolve fraud cases.

Auditing in the public sector is essential to ensure accountability, transparency, and proper use of public resources. Public sector auditors must adhere to specific standards and processes while addressing unique challenges such as compliance with laws, budgetary constraints, and public interest.

Health benefits administration is a critical function within organizations, managing employee health plans, claims processing, compliance with regulations, and cost controls. Auditing health benefits administration ensures that processes are efficient, compliant, and safeguarding organizational resources against errors, fraud, and inefficiencies.

Today’s organizations rely heavily on technology to drive business innovation, efficiency, and competitive advantage. As IT environments become more complex, they introduce a variety of risks—from cybersecurity threats and data privacy issues to system reliability, regulatory compliance, and technology change management.

Information Technology General Controls (ITGCs) form the foundation of an organization’s IT environment. These controls ensure the integrity, confidentiality, and availability of systems and data. Effective ITGCs support financial reporting accuracy, data reliability, and cybersecurity. As such, reviewing ITGCs is a critical internal audit function, especially for organizations that rely heavily on IT for core operations and compliance obligations.

The Human Resources (HR) function plays a critical role in supporting organizational strategy, maintaining compliance with labor laws, managing workforce performance, and safeguarding sensitive employee data. Despite its strategic importance, HR functions are often under-audited. Conducting an audit of HR processes helps ensure operational efficiency, regulatory compliance, and risk mitigation.

With businesses increasingly operating across borders, internal auditors are more frequently encountering financial reporting prepared under different accounting frameworks—primarily International Financial Reporting Standards (IFRS) and Generally Accepted Accounting Principles (GAAP) (typically referring to U.S. GAAP). While both aim to present a true and fair view of financial performance, key differences in recognition, measurement, and disclosure can affect risk assessments, internal controls, and audit procedures.

The transition from local accounting standards (such as U.S. GAAP or national GAAPs) to International Financial Reporting Standards (IFRS) represents a significant undertaking for any organization. It affects not only financial reporting, but also internal controls, systems, policies, performance metrics, and governance.

As organizations accelerate digital transformation and face rapidly evolving risks, innovation is no longer optional for internal audit functions—it is a strategic imperative. Traditional audit approaches may no longer be sufficient to provide timely, forward-looking assurance. Modern internal audit departments must innovate to remain relevant, agile, and value-adding.

IT-enabled projects such as ERP implementations, cloud migrations, system upgrades, or digital transformation initiatives are critical to organizational success but also carry significant risks, including budget overruns, scope creep, system failures, data breaches, and regulatory non-compliance. An Integrated Audit approach that combines IT, operational, financial, and compliance perspectives is essential to provide comprehensive oversight.

Fraud continues to be a major threat to organizations of all sizes, across both public and private sectors. From asset misappropriation and procurement fraud to financial statement fraud and cybercrime, the impact can be severe—financially, reputationally, and operationally.

In today’s digital landscape, the effectiveness of internal control, risk management, and governance heavily relies on the integrity and security of information technology systems. As technology continues to evolve, internal auditors must be equipped to assess IT environments, understand IT risks, and evaluate controls effectively.

As business processes become increasingly reliant on information technology, operational auditors must be equipped to understand and evaluate IT risks and controls—even if they are not IT specialists. From procurement systems and inventory platforms to HR management and cloud services, technology is embedded in nearly every operational process.

In an era of digital transformation, cybersecurity threats, cloud computing, and complex automated systems, internal audit managers must go beyond traditional audit oversight. Even without being IT specialists, they are expected to understand IT risks, ensure appropriate coverage of IT audits, and guide their teams in assessing IT controls effectively.

In today’s fast-evolving digital environment, internal auditors must move beyond foundational IT auditing skills to address emerging technologies, sophisticated cyber threats, complex system integrations, and data-driven operations. While introductory knowledge of IT general controls and application controls provides a baseline, modern audit professionals require advanced techniques to assess resilience, automation, cloud platforms, cybersecurity, and data analytics.

In today’s fast-paced and complex business environment, auditors are not just expected to identify risks and evaluate controls, they’re also called upon to lead audit teams, influence stakeholders, drive change, and champion integrity. Whether you're a senior auditor, team lead, or aspiring to take on a management role, strong leadership skills are essential to succeed and add strategic value.

The auditing profession is evolving rapidly in response to increasing demands for efficiency, risk-based focus, and added value. Lean Six Sigma (LSS) provides a structured, data-driven methodology that helps audit professionals identify inefficiencies, reduce process variation, and enhance audit quality. This course equips auditors with Lean Six Sigma tools and techniques to improve the end-to-end audit lifecycle — from planning and fieldwork to reporting and follow-up.

The fieldwork phase of an internal audit is often the most time-consuming, complex, and error-prone part of the audit cycle. It includes walkthroughs, control testing, interviews, documentation review, and evidence evaluation. While critical to audit success, fieldwork is also vulnerable to inefficiencies—such as rework, inconsistencies in test execution, and time delays.

Effective internal audit planning sets the foundation for high-impact audits. However, many audit plans suffer from unclear scope, poorly aligned objectives, inefficient risk assessments, and repetitive manual processes. Integrating Lean Six Sigma tools into the audit planning phase ensures a more strategic, efficient and value-driven approach.

Internal audits are inherently projects—they have a defined scope, objectives, timeline, resources, deliverables, and stakeholders. However, many audit teams approach audits more as repeatable routines than as structured projects, leading to delays, resource inefficiencies, unclear objectives, and scope creep.

Managing an internal audit function requires more than technical auditing skills. It demands leadership, strategic thinking, resource planning, risk alignment, and quality assurance. Whether managing a full internal audit department or leading individual engagements, audit managers must ensure audit activities deliver assurance, insight, and foresight, while staying compliant with professional standards and adding measurable value to the organization.

Procurement and sourcing are critical business functions that directly impact an organization's cost efficiency, compliance, operational continuity, and reputation. Yet, these functions are often exposed to risks such as fraud, vendor favoritism, weak contract oversight, and non-compliance with procurement policies.

In today’s globally interconnected environment, supply chain performance is crucial to organizational success. Disruptions, inefficiencies, and weak controls in the supply chain can lead to financial losses, regulatory breaches, customer dissatisfaction, and reputational damage.

Traditional operational auditing focuses on evaluating processes, risks, and controls. However, the true impact of an audit lies in its ability to influence meaningful change. Auditors are uniquely positioned to guide management toward improvements—but success depends not only on technical findings, but also on communication, collaboration, and strategic thinking.

In the public sector, success is measured not only by adherence to rules but by the results delivered to citizens. Performance-based auditing (also known as value-for-money auditing) is a powerful approach that evaluates whether government programs and services are being delivered economically, efficiently, and effectively (the 3Es).

A Quality Assessment (QA) is a structured evaluation of an internal audit activity’s conformance with the IIA Standards, Code of Ethics, and overall efficiency, effectiveness, and value delivery. Whether required for compliance or pursued for continuous improvement, performing an effective QA provides critical insights into how internal audit can better support the organization.

Clear, accurate, and accessible process documentation is the foundation for effective operations, quality assurance, compliance, risk management, training, and process improvement. Yet, many organizations struggle with inconsistent, outdated, or overly complex documentation that hinders rather than helps.

In today’s fast-paced, results-driven environment, the ability to plan and execute projects effectively is essential. Whether leading large strategic initiatives or managing smaller operational projects, professionals need practical project management techniques to stay on schedule, control scope, manage risks, and deliver value.

Purchasing and procurement processes are particularly vulnerable to fraud, collusion, and abuse, often due to the complexity of vendor relationships, manual oversight gaps, or weak internal controls. Fraud in purchasing not only causes financial losses but also damages reputations and erodes trust.

In an increasingly complex risk environment, traditional audit approaches are no longer sufficient. Stakeholders expect internal audit to go beyond compliance and control checks—to anticipate and respond to strategic and operational risks that impact organizational objectives.

The U.S. Securities and Exchange Commission (SEC) mandates detailed and transparent disclosures in proxy statements, particularly related to executive compensation, corporate governance, ESG (environmental, social, and governance) practices, and shareholder rights. With growing stakeholder scrutiny and regulatory pressure, ensuring the accuracy, completeness, and strategic alignment of these disclosures is a business-critical function.

With the explosive growth of mobile devices and apps in both enterprise and consumer environments, securing mobile assets has become a critical priority. Mobile platforms face a range of security threats including data leakage, unauthorized access, device theft, malware, and insecure application design.

Operating a small or one-person internal audit function presents unique challenges—limited staff, constrained budgets, broad responsibilities, and high expectations. Yet, with the right tools, prioritization, and risk-focused mindset, even the smallest audit functions can be highly impactful.

Internal auditors are often required to test large volumes of data to form conclusions about controls, compliance, or transactions. Without efficient sampling, audits can become time-consuming, costly, or less reliable.

Internal controls are often misunderstood as bureaucratic burdens that exist solely to satisfy compliance. But well-designed, risk-aligned controls are essential to business performance, operational efficiency, and organizational resilience

As financial reporting continues to become more digital, XBRL (eXtensible Business Reporting Language) has emerged as the standard for structured data submission to regulators such as the SEC in the U.S. and ESMA in Europe. For internal auditors, this shift introduces new risks, controls, and assurance responsibilities.

SAP ERP systems support critical business operations—from finance and procurement to inventory and HR. Due to their complexity and integration across departments, these systems pose unique technical and control risks.

Internal and external audits often involve complex, multi-stakeholder engagements with strict timelines and resource constraints. Applying project management techniques to auditing helps ensure audits are well-planned, executed on time, and deliver value to stakeholders.

SAP implementations and process changes involve significant investment, transformation, and risk. Organizations depend on these projects to enhance operations—but without proper oversight, they can lead to cost overruns, control failures, or business disruption.

The Sarbanes-Oxley Act (SOX) of 2002 transformed the landscape of financial reporting and corporate governance. Compliance with SOX has become a cornerstone for publicly traded companies, aiming to ensure accuracy in financial disclosures and strengthen internal controls over financial reporting (ICFR).

The Sarbanes-Oxley Act (SOX) places significant emphasis on the reliability of financial reporting, which is heavily dependent on effective Information Technology (IT) controls. IT General Controls (ITGCs) and application controls ensure the integrity, confidentiality, and availability of financial data processed and stored in IT systems.

In today’s fast-paced business environment, organizations must adopt reliable, secure, and efficient payroll systems to maintain compliance, ensure employee satisfaction, and reduce administrative overhead. This training course provides participants with a complete understanding of how to manage payroll electronically—from system setup to processing, compliance, and reporting.

Artificial Intelligence (AI) is transforming industries and business processes at an unprecedented pace. As organizations increasingly adopt AI technologies, internal auditors and assurance professionals must understand how to effectively audit AI systems to ensure accuracy, fairness, transparency, and compliance.

As organizations automate and digitize business processes, effective control over who has access to what and how risks are managed across processes becomes essential. SAP GRC Access Control and Process Control provide powerful tools to manage these risks—but their complexity also creates audit and assurance challenges.

Effective auditing is a cornerstone of sound governance, risk management, and organizational transparency. This course, “Performing Audit Processes: An Introduction,” equips participants with the foundational knowledge and practical skills needed to carry out internal and external audit engagements efficiently and professionally.

Artificial Intelligence (AI) is rapidly reshaping the audit profession by providing new tools that enhance risk assessment, data analysis, and audit quality. This CPE course offers auditors practical insights into leveraging AI technologies to improve audit efficiency, accuracy and coverage.

The rapid adoption of Artificial Intelligence (AI) technologies requires audit professionals to develop advanced skills in assessing AI systems’ risks, controls, and governance frameworks. The ISACA Advanced in AI Audit (AAIA) certification is designed for auditors, IT professionals, and risk managers aiming to demonstrate expertise in auditing AI-driven environments.

The Certified Internal Auditor (CIA) designation is the only globally recognized certification for internal auditors, awarded by the Institute of Internal Auditors (IIA). Part 1 of the CIA exam, titled “Essentials of Internal Auditing,” tests foundational knowledge critical to the internal audit profession

Part 2 of the Certified Internal Auditor (CIA) exam, titled “Practice of Internal Auditing,” focuses on the application of internal audit standards, performance of engagements, and communication of results. This part builds on the foundational knowledge from Part 1 and is designed to develop practical internal auditing skills.

Part 3 of the Certified Internal Auditor (CIA) exam focuses on the knowledge internal auditors need to understand business operations and apply a wide range of concepts in risk management, information technology, financial management, and organizational behaviour.

Effective auditing is a cornerstone of sound governance, risk management, and organizational transparency. This course, “Performing Audit Processes: An Introduction,” equips participants with the foundational knowledge and practical skills needed to carry out internal and external audit engagements efficiently and professionally.

As organizations strive for real-time risk management and continuous assurance, automation and Artificial Intelligence (AI) have become key enablers of modern auditing. This course equips auditors and assurance professionals with the knowledge and practical skills to implement automated auditing and monitoring systems using AI technologies.

As Artificial Intelligence (AI) systems become more integral to organizational decision-making, ensuring these systems operate responsibly, ethically, and transparently is critical. This course focuses on auditing AI systems through the lens of Responsible AI Frameworks, empowering auditors and assurance professionals to assess AI implementations against principles of fairness, accountability, transparency, and ethical compliance.