Risk-Based Internal Auditing Training

The programme

Programme overview

Risk-based internal auditing demands sharper focus. Audits can no longer rely on compliance sampling alone — they must anticipate what could derail objectives, intervene early, and deliver actionable insight. This practical course builds the tools, techniques, and frameworks you need, grounded in real-world audit challenges.

You’ll work through the full risk-based audit cycle: from identifying and prioritising risks to focused fieldwork and reporting that drives corrective action. Learning is applied through case studies, role-plays, and a capstone audit exercise. If you want your audit reports to shape strategy, strengthen accountability, and increase confidence at every level, this programme shows you how.

Who should attend

Who is this programme for?

• Internal Auditors
• Audit Team Leaders
• Non-Profit Auditors
• Public Sector Auditors
• Compliance Officers
• Risk & Assurance Practitioners
• Chief Audit Executives (CAEs)
• Corporate Risk Managers
• External Auditors Transitioning to Internal Audit
• Consultants in Audit Transformation

Learning outcomes

What you will learn

• Explain the principles and purpose of risk-based auditing, grounded in the IIA's current 2024 Global Internal Audit Standards
• Identify and assess key organisational risks
• Build audit plans aligned to risk exposure and appetite
• Evaluate the design and operating effectiveness of controls
• Prioritise audit focus for maximum organisational impact
• Communicate risk-centred findings with clarity and influence
• Align audit recommendations to strategic objectives
• Support continuous improvement in risk management

Explore the programme

Detailed programme outline

• Contrasting traditional vs. risk-based approaches
• Drivers for a risk-focused methodology
• Objectives of risk-based internal audit, grounded in the IIA's 2024 Global Internal Audit Standards — the current framework of 5 domains, 15 principles, and 52 standards that replaced the fragmented 2017 IPPF
• The auditor's evolving role
• Closing gaps between compliance and strategy
• Key risk types: strategic, operational, compliance, reputational
• How organisations define, measure, and aggregate risk
• Reading and interpreting risk registers
• Working with risk owners and business leaders
• Spotting disconnects between perceived and actual risk
• Techniques to surface high-risk areas
• Scoring with likelihood and impact
• Stakeholder interviews and surveys that add signal
• Heat maps and matrices for prioritisation
• Setting scope and depth fit-for-risk
• Building a responsive, risk-led audit plan
• Aligning scope to organisational risk priorities and appetite
• Resourcing based on exposure and materiality
• Flexible scheduling that adapts to change
• Using risk data to justify audit focus
• Testing control design and operating effectiveness
• Identifying gaps in risk response and resilience
• Gathering evidence that supports risk insight
• Adapting procedures as new risks emerge
• Staying anchored to audit objectives
• Writing reports that focus on risk and action
• Structuring messages for executive impact
• Using visuals to convey urgency and priority
• Translating technical issues into decision-ready language
• Follow-up that drives implementation and improvement
• Connecting audit work to board-level risk oversight
• Collaborating with compliance, finance, legal, and operations
• Escalating emerging risks and instances of non-compliance
• Supporting policy updates and control redesign
• Reinforcing accountability without blame
• Leveraging audit management systems effectively
• Applying data analytics for trend spotting and anomaly detection
• Dashboards for near real-time risk tracking
• Automating repetitive audit tests
• Collaborating via platforms such as Power BI or Tableau
• Coaching teams in risk-first thinking
• Embedding risk into everyday audit decisions
• Strengthening critical thinking and ethical judgement
• Learning from audit missteps and near-misses
• Tracking and communicating audit value, not just activity

Learning approach

How you will learn

Our diverse instructional approaches ensure effective learning:

– Lectures & Presentations: Engage with expert-driven, stimulating content.– Course Material: Access well-crafted supporting resources.– Group Work: Collaborate on discussions and case studies for practical insights.– Workshops & Role-Play: Participate in immersive, scenario-based activities.– Practical Application: Focus on applying theoretical knowledge in real situations.– Post-Training Support: Receive extensive support after training for skill implementation.

Discuss your requirements

Dates, duration & arrangements

Contact Ratomac to confirm dates, duration, delivery format, entry requirements and any applicable assessment or certification before booking.