Risk-Based Internal Auditing
A practical professional programme focused on risk-based internal auditing, designed to strengthen financial capability, analytical judgement and organisational performance.
- Type
- Specialist
- Level
- Advanced
- Duration
- 5 days
- Delivery
- In person, Live online, In-house
- Languages
- English, Arabic
Risk-Based Internal Auditing develops the capability to focus internal audit resources on the risks that matter most to organisational objectives.
The programme examines risk assessment, audit universe design, risk-based planning, engagement scoping and the evaluation of controls in relation to significant risks.
Participants learn how to move beyond routine control checking and design audit work that provides assurance over the management of material organisational risks.
Objectives
Understand the principles of risk-based internal auditing.
Link audit priorities to organisational risks and objectives.
Develop risk-based audit plans and engagement scopes.
Evaluate controls in relation to significant risks.
Strengthen the strategic value of internal audit assurance.
Learning outcomes
Assess organisational risks for audit-planning purposes.
Prioritise auditable areas using risk-based criteria.
Develop risk-focused engagement objectives and scope.
Evaluate whether controls address significant risks appropriately.
Communicate assurance conclusions in relation to risk exposure.
Who it is for
Internal auditors.
Senior and supervisory audit professionals.
Risk and assurance professionals.
Audit managers.
Professionals responsible for internal audit planning.
Programme modules
1. Risk-Based Auditing Foundations
Risk-based audit philosophy
Organisational objectives and risk
Assurance priorities
Traditional versus risk-based auditing
2. Understanding Organisational Risk
Risk identification
Risk assessment
Risk appetite
Residual risk
3. Risk-Based Audit Planning
Audit universe
Risk prioritisation
Audit frequency
Annual and multi-year plans
4. Risk-Based Engagement Scoping
Engagement objectives
Key risks
Critical controls
Scope boundaries
5. Evaluating Risk and Control
Control design
Control effectiveness
Residual exposure
Control gaps
6. Risk-Based Assurance Reporting
Assurance conclusions
Risk significance
Prioritising findings
Reporting residual risk
Methodology
The programme uses risk-assessment exercises, audit-universe scenarios, engagement-planning cases and control-evaluation tasks. Participants develop audit approaches that are explicitly linked to organisational risk.
Assessment
Assessment includes risk-based planning exercises and a final case requiring participants to prioritise audit coverage, define engagement scope and provide a risk-based assurance conclusion.
Certificate
Certificate of Completion
For your organisation
This programme can be delivered for a single organisation, team or institution, and adapted to your context, participants and objectives.
Organisational delivery is scoped and priced individually, and is not booked from this page.
Upcoming sessions
No dates are scheduled at present.
Institutional needs addressed
Related expertise
Related capabilities
Training & Professional Development
Structured professional learning that develops practical, role-relevant knowledge and capability.
Consulting & Advisory
Structured advisory support for strategy, governance, performance, transformation and organisational decision-making.