IT Auditing Fundamentals and Evidence Course

Name: IT Auditing Fundamentals and Evidence Training Course
Availability: InStock

Plan IT audit engagements, test controls, evaluate evidence and document findings through traceable assurance tools.

IT Auditing Fundamentals and Evidence Course

At a glance

Duration: 1 Week
Format: Classroom
Cities: Nairobi, Casablanca, Lisbon, Paris, Madrid, Abu Dhabi and more
Next session: 1 – 5 November 2026, Nairobi
Average fee: 5,750 €

Home
Our Categories
IT Auditing Fundamentals and Evidence Training Course

Overview

IT Auditing Fundamentals Training Course is a one-week foundation course for audit, risk and technology teams, who leave with an IT Audit Engagement Pack. The course connects engagement objectives, scope, risk assessment, control criteria, work programs, evidence collection, sampling, testing, workpapers, findings, reporting and remediation follow-up. Participants create traceable assurance records without preparing for a certification or configuring audit software. Agile Leaders Training Center develops practical IT auditing fundamentals.

Who Should Attend

Teams responsible for planning and conducting internal audit engagements
Teams responsible for technology controls and assurance evidence
Teams responsible for risk, compliance and remediation oversight
Teams responsible for system ownership and control operation
Managers responsible for reviewing IT audit results and actions

The course assumes participants can read basic policies, process maps and system records at work, and leaves out certification preparation, advanced data analytics and product configuration.

Departments and Industries

The course supports departments that assess technology governance, risk and controls across service environments.

Internal audit and assurance
Information technology and cybersecurity
Risk, compliance and governance
Financial services and digital commerce
Healthcare, manufacturing and infrastructure services

Learning Objectives

By the end of this course, participants will be able to:

Build risk-informed objectives and audit scope
Use risk and control matrices and work programs
Apply examine, interview and test methods
Evaluate evidence relevance, reliability and sufficiency
Analyze control gaps and formulate findings
Prioritize recommendations and remediation follow-up

Course Agenda

Day 1: Engagement Planning and Scope

IT Audit Mandate and Engagement Purpose Canvas
Process, System and Stakeholder Boundary Map
Preliminary Risk Assessment and Heat Map
Engagement Objective, Scope and Limitation Statement
Audit Resource and Communication Plan

Day 2: Criteria and Work Programs

Risk and Control Matrix Design
Policy, Standard and Procedure Criteria Register
Control Objective and Expected Condition Map
IT Audit Work Program Template
Sampling Population and Selection Plan

Day 3: Evidence and Control Testing

NIST SP 800-53A Examine, Interview and Test Method
Evidence Relevance, Reliability and Sufficiency Checklist
Access, Change and Operations Control Test Sheet
Exception, Cause and Impact Analysis Record
Audit Workpaper Index and Cross-Reference Method

Day 4: Findings and Follow-Up

Criteria, Condition, Cause and Effect Finding Model
Finding Significance and Risk Rating Matrix
Recommendation and Management Action Template
Final Audit Communication and Conclusion Outline
Remediation Owner, Due Action and Status Tracker

Day 5: Audit Practice and Capstone

Exercise: Scope an IT Audit Engagement
Exercise: Build a Risk and Control Work Program
Exercise: Evaluate Evidence and Record Test Results
Exercise: Draft a Finding and Follow-Up Action
Capstone: IT Audit Engagement Pack

Practical Exercises

The course uses suggested activities based on access management, system changes and technology operations.

Suggested activity: convert a process concern into objectives, scope and risk statements
Suggested activity: map risks, controls, criteria and audit procedures
Suggested activity: evaluate documents, interview notes and test evidence
Suggested activity: draft a finding, agreed action and follow-up record

FAQs

Who suits IT auditing fundamentals training and what does it assume?

IT auditing fundamentals training suits auditors, control owners, compliance analysts, risk coordinators and technology managers beginning assurance work. It assumes basic literacy in policies, processes and system records while excluding certification and advanced analytics.

How does IT auditing fundamentals training differ from advanced cybersecurity assessment?

IT auditing fundamentals training covers engagement planning, criteria, evidence, workpapers, findings and follow-up across technology controls. Advanced cybersecurity assessment usually requires deeper technical testing, specialized tools and detailed vulnerability analysis.

What makes IT audit evidence sufficient and reliable?

IT audit evidence is sufficient when its quantity supports a reasonable conclusion and reliable when its source, quality and collection method can be trusted. Relevance connects the evidence directly to the audit objective and criteria.

Why does an IT audit use a risk and control matrix?

An IT audit uses a risk and control matrix to connect objectives, risks, controls, criteria, procedures and results. The matrix keeps testing traceable and helps reviewers identify coverage gaps or unsupported conclusions.

Conclusion

Participants take back an IT Audit Engagement Pack containing scope statements, risk assessments, control matrices, work programs, test records, workpapers, findings, reports and follow-up actions. The pack creates traceability from audit objective to conclusion. It also gives audit and technology teams a shared basis for evidence review and remediation monitoring.

credits: 5 credit per day

Course Mode: full-time

Provider: Agile Leaders Training Center

Download Brochure (PDF) Print PDF

Showing 61-76 of 76 events

Location	Dates	Duration	Mode	Price
Abu Dhabi	Week 31, 2027 2 – 6 August 2027	1 Week	Onsite	€4,700
Istanbul	Week 32, 2027 9 – 13 August 2027	1 Week	Onsite	€4,500
San Diego	Week 33, 2027 16 – 20 August 2027	1 Week	Onsite	€14,000
Vienna	Week 34, 2027 23 – 27 August 2027	1 Week	Onsite	€5,700
Sharm El-Sheikh	Week 35, 2027 30 August – 3 September 2027	1 Week	Onsite	€4,100
Cape town	Week 35, 2027 5 – 9 September 2027	1 Week	Onsite	€4,500
Amsterdam	Week 37, 2027 13 – 17 September 2027	1 Week	Onsite	€5,700
Langkawi	Week 37, 2027 19 – 23 September 2027	1 Week	Onsite	€6,000
Tbilisi	Week 39, 2027 27 September – 1 October 2027	1 Week	Onsite	€5,000
Abu Dhabi	Week 39, 2027 27 September – 1 October 2027	1 Week	Onsite	€4,700
Prague	Week 40, 2027 4 – 8 October 2027	1 Week	Onsite	€6,000
Geneva	Week 40, 2027 10 – 14 October 2027	1 Week	Onsite	€6,200
Bangkok	Week 41, 2027 17 – 21 October 2027	1 Week	Onsite	€6,000
Manama	Week 42, 2027 24 – 28 October 2027	1 Week	Onsite	€4,700
London	Week 44, 2027 1 – 5 November 2027	1 Week	Onsite	€5,700
Berlin	Week 44, 2027 1 – 5 November 2027	1 Week	Onsite	€5,700

Frequently asked questions

What does this course cover?

OverviewIT Auditing Fundamentals Training Course is a one-week foundation course for audit, risk and technology teams, who leave with an IT Audit Engagement Pack. The course connects engagement objectives, scope, risk assessment, control criteria, work programs, evidence collection, sampling, testing, workpapers, findings, reporting and remediation follow…

Are training dates available?

Yes. Available dates and destinations are listed in the course dates section on this page.

How can I register?

Choose an available date on this page and complete the registration form, or send a programme enquiry.

Can I download the course brochure?

Yes. Use the brochure download link provided on this page.

IT Auditing Fundamentals and Evidence Course