course | Internal audit: From Planning to Execution

The Fundamentals of Internal Auditing

• Purpose and scope of internal audits
• Types of audits: compliance, process, performance
• Auditing standards and ISO 19011 overview
• Principles of auditing
• Roles and responsibilities of internal auditors
• Audit ethics and professional conduct

Auditor Competence and Development

• Competency requirements for auditors
• Skills: communication, analysis, objectivity
• Shadow audits and mentorship
• Professional behavior and impartiality

Audit Planning and Risk-Based Approach

• Understanding audit objectives and scope
• Developing audit programs and schedules
• Risk-based auditing concepts
• Selecting audit criteria and references
• Resource planning
• Preparing audit checklists
• Workshop: designing a sample audit plan

Preparing for the Audit

• Collecting background information
• Reviewing relevant documentation
• Communication with auditees before audits
• Preparing working documents
• Assigning roles within audit teams
• Developing audit sampling strategies

Audit Opening and Conduct

• Opening meetings: objectives and protocols
• Audit communication skills and interview techniques
• Observing processes and collecting objective evidence
• Managing time during audits
• Dealing with resistance and conflicts during audits
• Recording and classifying audit findings

Documenting Audit Findings

• Types of audit findings: conformity, nonconformity, observations
• Writing clear, evidence-based findings
• Linking findings to audit criteria
• Grading nonconformities
• Drafting nonconformity reports
• Avoiding subjectivity in findings
• Workshop: writing audit findings

Audit Reporting

• Structure of audit reports
• Reporting requirements and timeliness
• Presenting findings to management
• Balancing technical detail and executive summaries
• Communicating effectively with stakeholders
• Common pitfalls in audit reporting

Corrective and Preventive Actions

• Corrective vs preventive actions
• Root cause analysis techniques
• Writing corrective action requests (CARs)
• Monitoring action plans and deadlines
• Assessing effectiveness of corrective actions
• Preventive actions for systemic improvement

Audit Follow-up and Closure

• Verification of corrective actions
• Closing nonconformities effectively
• Conducting follow-up audits
• Closing meetings with auditees
• Documenting closure of audit cycles
• Ensuring continual improvement through follow-ups