Audit bootcamps to ignite your team's potential.

Better, Faster, Cheaper: Streamlining Your Int. Audit

An effective audit will produce the desired or intended result. It is built on a broad and deep assessment of an area, process, or system. It “begins with the end in mind” and creates a meaningful plan an auditor or audit team will follow. An efficient audit is one where we work productively with minimum wasted effort or expense. Audit leadership sets in motion themes and expectations based on risk assessment and communication with stakeholders inside and outside internal audit.

DevOps, DevSecOps, and Audit

This course covers tools used to automate historically manual tasks like code quality checks, execution of test scripts, deployments, and the impact on traditional controls, such as Separation of Duties. It also covers the human-centric aspects of the process and the related risks that should be considered.

This course examines the DevSecOps methodology, how and where auditors can find their footing, best practices that need to be at the forefront of business leaders’ minds, and the key shifts in mindset that must occur for a seamless transition from manual transactions to automated process flows.

NIST Cybersecurity Framework

NIST is the de-facto standard for security, compliance, and privacy in the US. One must comply with NIST standards if/when doing business with the US federal government, managing critical infrastructure, or maintaining personally identifiable information (PII).

NIST provides the Cybersecurity Framework (CSF) and Risk Management Framework (RMF) to guide organizations in securing their infrastructure, systems, and data. In this course, participants will apply the NIST Cybersecurity and Risk Management Frameworks to better protect their infrastructure, detect possible cyber incidents, and appropriately respond and recover should they occur. We teach participants how to become well-versed in the NIST CSF and RMF, how to implement them, and ways to effectively manage CSF and RMF processes for optimal security, privacy, and compliance.

Fraud Detection and Prevention: Key Internal Controls

This course provides techniques to prevent and mitigate fraud within core business systems. After defining fraud and establishing the universal scope of the problem fraud presents to organizations worldwide, participants will explore the major schemes used to defraud organizations and individuals. In addition, understanding the psychology and motivations of fraudsters will help participants understand and develop strategies for prevention and detection.

This course covers how to create fraud risk statements, assess fraud risk, and create the right internal controls for your organization. By understanding the fraud risk universe facing organizations and the natural vulnerabilities that exist in their internal controls, participants will be better able to design fraud prevention, detection, and deterrence controls. There is also coverage of fraud analysis and investigations.

Auditing the Enterprise Risk Management (ERM) Process

This course provides an overview of the Enterprise Risk Management (ERM) process and all the underlying elements of ERM, including risk appetite, governance, and roles and responsibilities. The course includes the attributes that make an ERM process effective, such as addressing black swans, using risk-driven metrics, and linking ERM with the organization’s strategy. Most of the course will involve methods for auditing the ERM process by assessing the process according to the COSO framework, comprising five components and twenty principles. The course also includes ISO 31000, a summary of key highlights, and a comparison of the commonalities and differences between the ISO risk management framework and the COSO risk management framework. The course also covers the application of concepts using examples, case studies, exercises, and ERM reporting to various stakeholders.

Introduction to Information Security

This course is designed to give those new to information security auditing a basic understanding of information security key concepts, players, and components. Participants will learn how the information security function aligns with the organization's business and strategic objectives. Additionally, the course will highlight methods to provide assurance in the information security space and the critical importance of communication. This course will provide the foundational knowledge auditors need to perform information security governance audits and perform basic assessments of information security operations.