IT Auditing Fundamentals and Evidence Course

Name: IT Auditing Fundamentals and Evidence Training Course
Availability: InStock

Plan IT audit engagements, test controls, evaluate evidence and document findings through traceable assurance tools.

IT Auditing Fundamentals and Evidence Course

At a glance

Duration: 1 Week
Format: Classroom
Cities: Nairobi, Casablanca, Lisbon, Paris, Madrid, Abu Dhabi and more
Next session: 1 – 5 November 2026, Nairobi
Average fee: 5,750 €

Home
Our Categories
IT Auditing Fundamentals and Evidence Training Course

Overview

IT Auditing Fundamentals Training Course is a one-week foundation course for audit, risk and technology teams, who leave with an IT Audit Engagement Pack. The course connects engagement objectives, scope, risk assessment, control criteria, work programs, evidence collection, sampling, testing, workpapers, findings, reporting and remediation follow-up. Participants create traceable assurance records without preparing for a certification or configuring audit software. Agile Leaders Training Center develops practical IT auditing fundamentals.

Who Should Attend

Teams responsible for planning and conducting internal audit engagements
Teams responsible for technology controls and assurance evidence
Teams responsible for risk, compliance and remediation oversight
Teams responsible for system ownership and control operation
Managers responsible for reviewing IT audit results and actions

The course assumes participants can read basic policies, process maps and system records at work, and leaves out certification preparation, advanced data analytics and product configuration.

Departments and Industries

The course supports departments that assess technology governance, risk and controls across service environments.

Internal audit and assurance
Information technology and cybersecurity
Risk, compliance and governance
Financial services and digital commerce
Healthcare, manufacturing and infrastructure services

Learning Objectives

By the end of this course, participants will be able to:

Build risk-informed objectives and audit scope
Use risk and control matrices and work programs
Apply examine, interview and test methods
Evaluate evidence relevance, reliability and sufficiency
Analyze control gaps and formulate findings
Prioritize recommendations and remediation follow-up

Course Agenda

Day 1: Engagement Planning and Scope

IT Audit Mandate and Engagement Purpose Canvas
Process, System and Stakeholder Boundary Map
Preliminary Risk Assessment and Heat Map
Engagement Objective, Scope and Limitation Statement
Audit Resource and Communication Plan

Day 2: Criteria and Work Programs

Risk and Control Matrix Design
Policy, Standard and Procedure Criteria Register
Control Objective and Expected Condition Map
IT Audit Work Program Template
Sampling Population and Selection Plan

Day 3: Evidence and Control Testing

NIST SP 800-53A Examine, Interview and Test Method
Evidence Relevance, Reliability and Sufficiency Checklist
Access, Change and Operations Control Test Sheet
Exception, Cause and Impact Analysis Record
Audit Workpaper Index and Cross-Reference Method

Day 4: Findings and Follow-Up

Criteria, Condition, Cause and Effect Finding Model
Finding Significance and Risk Rating Matrix
Recommendation and Management Action Template
Final Audit Communication and Conclusion Outline
Remediation Owner, Due Action and Status Tracker

Day 5: Audit Practice and Capstone

Exercise: Scope an IT Audit Engagement
Exercise: Build a Risk and Control Work Program
Exercise: Evaluate Evidence and Record Test Results
Exercise: Draft a Finding and Follow-Up Action
Capstone: IT Audit Engagement Pack

Practical Exercises

The course uses suggested activities based on access management, system changes and technology operations.

Suggested activity: convert a process concern into objectives, scope and risk statements
Suggested activity: map risks, controls, criteria and audit procedures
Suggested activity: evaluate documents, interview notes and test evidence
Suggested activity: draft a finding, agreed action and follow-up record

FAQs

Who suits IT auditing fundamentals training and what does it assume?

IT auditing fundamentals training suits auditors, control owners, compliance analysts, risk coordinators and technology managers beginning assurance work. It assumes basic literacy in policies, processes and system records while excluding certification and advanced analytics.

How does IT auditing fundamentals training differ from advanced cybersecurity assessment?

IT auditing fundamentals training covers engagement planning, criteria, evidence, workpapers, findings and follow-up across technology controls. Advanced cybersecurity assessment usually requires deeper technical testing, specialized tools and detailed vulnerability analysis.

What makes IT audit evidence sufficient and reliable?

IT audit evidence is sufficient when its quantity supports a reasonable conclusion and reliable when its source, quality and collection method can be trusted. Relevance connects the evidence directly to the audit objective and criteria.

Why does an IT audit use a risk and control matrix?

An IT audit uses a risk and control matrix to connect objectives, risks, controls, criteria, procedures and results. The matrix keeps testing traceable and helps reviewers identify coverage gaps or unsupported conclusions.

Conclusion

Participants take back an IT Audit Engagement Pack containing scope statements, risk assessments, control matrices, work programs, test records, workpapers, findings, reports and follow-up actions. The pack creates traceability from audit objective to conclusion. It also gives audit and technology teams a shared basis for evidence review and remediation monitoring.

credits: 5 credit per day

Course Mode: full-time

Provider: Agile Leaders Training Center

Download Brochure (PDF) Print PDF

Showing 41-60 of 76 events

Location	Dates	Duration	Mode	Price
Kuala Lumpur	Week 17, 2027 26 – 30 April 2027	1 Week	Onsite	€5,200
Montreux	Week 18, 2027 3 – 7 May 2027	1 Week	Onsite	€7,500
Kuwait	Week 18, 2027 9 – 13 May 2027	1 Week	Onsite	€5,500
Amman	Week 19, 2027 16 – 20 May 2027	1 Week	Onsite	€4,100
Rome	Week 21, 2027 24 – 28 May 2027	1 Week	Onsite	€5,700
Amsterdam	Week 22, 2027 31 May – 4 June 2027	1 Week	Onsite	€5,700
Dubai	Week 23, 2027 7 – 11 June 2027	1 Week	Onsite	€4,500
Milan	Week 23, 2027 7 – 11 June 2027	1 Week	Onsite	€5,700
Abu Dhabi	Week 23, 2027 7 – 11 June 2027	1 Week	Onsite	€4,700
Doha	Week 23, 2027 13 – 17 June 2027	1 Week	Onsite	€5,500
Johannesburg	Week 24, 2027 20 – 24 June 2027	1 Week	Onsite	€4,500
Phuket	Week 25, 2027 27 June – 1 July 2027	1 Week	Onsite	€6,000
Frankfurt	Week 26, 2027 28 June – 2 July 2027	1 Week	Onsite	€5,700
Muscat	Week 26, 2027 4 – 8 July 2027	1 Week	Onsite	€5,700
Tokyo	Week 28, 2027 12 – 16 July 2027	1 Week	Onsite	€10,000
Munich	Week 29, 2027 19 – 23 July 2027	1 Week	Onsite	€5,700
Lagos	Week 29, 2027 25 – 29 July 2027	1 Week	Onsite	€4,100
Barcelona	Week 30, 2027 26 – 30 July 2027	1 Week	Onsite	€5,700
Dubai	Week 31, 2027 2 – 6 August 2027	1 Week	Onsite	€4,500
London	Week 31, 2027 2 – 6 August 2027	1 Week	Onsite	€5,700

Frequently asked questions

What does this course cover?

OverviewIT Auditing Fundamentals Training Course is a one-week foundation course for audit, risk and technology teams, who leave with an IT Audit Engagement Pack. The course connects engagement objectives, scope, risk assessment, control criteria, work programs, evidence collection, sampling, testing, workpapers, findings, reporting and remediation follow…

Are training dates available?

Yes. Available dates and destinations are listed in the course dates section on this page.

How can I register?

Choose an available date on this page and complete the registration form, or send a programme enquiry.

Can I download the course brochure?

Yes. Use the brochure download link provided on this page.

IT Auditing Fundamentals and Evidence Course