IIA Standards require an internal audit function to undergo an external quality assessment review every five years as part of its quality assurance and improvement programme. The review is to be undertaken by a qualified External Quality Assessor. We undertake such reviews to identify areas where the internal audit function requires improvements so as to deliver greater value to the organization. The review also involves a survey of internal audit stakeholders and internal audit staff.

We undertake ICT reviews aimed at assessing the extent to which ICT systems meet the needs of an organization, the adequacy of the ICT internal controls and make recommendations on how to further strengthen the ICT controls. The ICT audit covers both the general ICT controls and application / automated controls.

The training aims at equipping the participants with the skills to undertake a risk based internal audit as required by IIA. The training covers key components such as annual audit planning, engagement planning, gathering and analyzing audit evidence, reporting and follow up of the implementation of audit recommendations. Relevant templates are provided on how to undertake each of the key steps in the audit process.