SOCI Act CIRMP Risk-Based Audit Training Course

Name: SOCI Act CIRMP Risk-Based Audit Training Course
Availability: InStock

Plan and perform risk-based audits of CIRMP obligations, controls, evidence, findings, remediation, and governing-body assurance.

At a glance

Duration: 1 Week
Format: Classroom
Cities: Amsterdam, Dubai, Prague, Madrid, Lisbon, Accra and more
Next session: 2 – 6 November 2026, Amsterdam
Average fee: 5,750 €

Home
Our Categories
SOCI Act CIRMP Risk-Based Audit Training Course

Download Brochure (PDF) Print PDF

Overview

SOCI Act CIRMP Risk-Based Audit Training Course is a one-week course for risk managers, internal auditors, governance professionals, control owners, and compliance leaders who need a CIRMP Assurance File. Participants scope applicable obligations, map material risks to controls, plan risk-based engagements, test design and operating effectiveness, evaluate evidence, and track remediation. The course connects SOCI Act compliance, CIRMP audit criteria, and critical infrastructure assurance. Agile Leaders Training Center presents CIRMP risk-based auditing as an evidence-led assurance practice.

Who Should Attend

Functions responsible for critical infrastructure risk and governance
Teams responsible for internal audit planning and engagement delivery
Functions responsible for CIRMP ownership and control operation
Teams responsible for compliance evidence and annual reporting
Functions responsible for remediation monitoring and governing-body assurance

The course assumes participants already perform risk, control, compliance, or assurance work and leaves out introductory auditing, legal advice, and technical penetration testing.

Departments and Industries

The course supports departments and industries that operate or assure critical infrastructure assets subject to SOCI Act obligations.

Internal audit, risk, compliance, and governance functions
Operations, asset management, security, and technology functions
Energy, utilities, transport, and communications organizations
Financial services, data processing, and healthcare organizations
Food, logistics, education, and research organizations

Learning Objectives

By the end of this course, participants will be able to:

Analyze SOCI Act applicability, asset scope, and CIRMP obligations
Build audit criteria from all-hazards risk and governance requirements
Apply risk-based planning to CIRMP assurance engagements
Evaluate control design, operating effectiveness, and audit evidence
Prioritize findings, causal factors, and remediation actions
Use reporting and follow-up tools for governing-body assurance

Course Agenda

Day 1: Applicability and Audit Criteria

SOCI Act Applicability and Obligation Map
Critical Infrastructure Asset Scope Decision Tree
Responsible Entity and Governance Responsibility Matrix
Baseline, Enhanced, and Telecommunications CIRMP Scope Matrix
CIRMP Audit Criteria and Evidence Matrix

Day 2: Risk and Control Traceability

All-Hazards Risk Domain Taxonomy
Material Risk and Relevant Impact Assessment Sheet
Asset-Hazard-Control Traceability Register
Interdependency and Operational Context Map
CIRMP Currency and Review Control Checklist

Day 3: Engagement Planning and Evidence

Global Internal Audit Standards Engagement Planning Framework
CIRMP Risk-Based Audit Universe and Priority Matrix
Engagement Objective, Scope, and Criteria Memo
Audit Evidence Request and Sampling Plan
Protected Information Handling Protocol

Day 4: Testing and Reporting

Control Design Assessment Workpaper
Operating Effectiveness Test Script
Evidence Sufficiency and Reliability Evaluation Sheet
Finding Significance and Root-Cause Analysis Record
Remediation Ownership and Follow-Up Tracker

Day 5: CIRMP Audit Practice

Exercise: SOCI Applicability and Asset Scope Assessment
Exercise: Hazard-to-Control Traceability Review
Exercise: Evidence and Control Test Evaluation
Exercise: Annual Report and Governing-Body Assurance Briefing
Capstone Exercise: CIRMP Assurance File

Practical Exercises

The course uses suggested activities that connect regulatory criteria, risk analysis, evidence testing, and assurance reporting.

Suggested activity: determine applicable obligations for a transport asset and document the scoping rationale.
Suggested activity: trace cyber, personnel, supply-chain, and physical hazards to controls for an energy asset.
Suggested activity: test control evidence for a data-processing asset and evaluate finding significance.
Suggested activity: prepare remediation priorities and a governing-body assurance briefing for a healthcare asset.

FAQs

Who should attend SOCI Act CIRMP risk-based audit training?

SOCI Act CIRMP risk-based audit training suits people who scope obligations, own risk and controls, perform internal audits, maintain compliance evidence, or report assurance. It assumes prior risk, control, compliance, or audit experience.

How does a CIRMP audit differ from general internal audit training?

A CIRMP audit applies risk-based engagement methods to SOCI Act applicability, all-hazards requirements, asset interdependencies, protected information, annual reporting, and control evidence, while general internal audit training covers engagement practices across many subjects.

What evidence supports a CIRMP audit conclusion?

CIRMP audit conclusions use relevant and reliable evidence such as approved governance records, risk assessments, control designs, implementation records, test results, incident records, review evidence, reporting records, and remediation status.

How are CIRMP audit findings prioritized?

CIRMP audit findings are prioritized by the significance of the underlying risk, the gap between criteria and condition, causal factors, potential effects, control dependence, and the urgency of corrective action.

How does CIRMP audit follow-up support annual reporting?

CIRMP audit follow-up tracks agreed actions, verifies closure evidence, reassesses residual exposure, and provides traceable assurance about program currency, variations, incidents, mitigation effectiveness, and governing-body oversight.

Conclusion

The course integrates SOCI Act applicability, CIRMP criteria, all-hazards risk analysis, engagement planning, evidence evaluation, control testing, findings, and follow-up. Participants take back a CIRMP Assurance File containing scope decisions, traceability records, workpapers, findings, and reporting materials. The file creates a repeatable path from regulatory obligation to tested control and monitored remediation.

credits: 5 credit per day

Course Mode: full-time

Provider: Agile Leaders Training Center

Download Brochure (PDF) Print PDF

Showing 21-40 of 75 events

Location	Dates	Duration	Mode	Price
Berlin	Week 05, 2027 1 – 5 February 2027	1 Week	Onsite	€5,700
Nairobi	Week 05, 2027 7 – 11 February 2027	1 Week	Onsite	€4,500
Paris	Week 07, 2027 15 – 19 February 2027	1 Week	Onsite	€5,700
Zanzibar	Week 07, 2027 21 – 25 February 2027	1 Week	Onsite	€5,500
Tashkent	Week 08, 2027 28 February – 4 March 2027	1 Week	Onsite	€4,500
Rome	Week 10, 2027 8 – 12 March 2027	1 Week	Onsite	€5,700
Abu Dhabi	Week 11, 2027 15 – 19 March 2027	1 Week	Onsite	€4,700
Manama	Week 11, 2027 21 – 25 March 2027	1 Week	Onsite	€4,700
Dubai	Week 12, 2027 22 – 26 March 2027	1 Week	Onsite	€4,500
Amman	Week 12, 2027 28 March – 1 April 2027	1 Week	Onsite	€4,100
Kuala Lumpur	Week 13, 2027 29 March – 2 April 2027	1 Week	Onsite	€5,200
Cairo	Week 14, 2027 5 – 9 April 2027	1 Week	Onsite	€4,100
Tokyo	Week 14, 2027 5 – 9 April 2027	1 Week	Onsite	€10,000
Frankfurt	Week 14, 2027 5 – 9 April 2027	1 Week	Onsite	€5,700
Doha	Week 14, 2027 11 – 15 April 2027	1 Week	Onsite	€5,500
Nice	Week 16, 2027 19 – 23 April 2027	1 Week	Onsite	€5,700
Montreux	Week 17, 2027 26 – 30 April 2027	1 Week	Onsite	€7,500
Sharm El-Sheikh	Week 18, 2027 3 – 7 May 2027	1 Week	Onsite	€4,100
Singapore	Week 18, 2027 3 – 7 May 2027	1 Week	Onsite	€5,700
Munich	Week 19, 2027 10 – 14 May 2027	1 Week	Onsite	€5,700

Frequently asked questions

What does this course cover?

OverviewSOCI Act CIRMP Risk-Based Audit Training Course is a one-week course for risk managers, internal auditors, governance professionals, control owners, and compliance leaders who need a CIRMP Assurance File. Participants scope applicable obligations, map material risks to controls, plan risk-based engagements, test design and operating effectiveness,…

Are training dates available?

Yes. Available dates and destinations are listed in the course dates section on this page.

How can I register?

Choose an available date on this page and complete the registration form, or send a programme enquiry.

Can I download the course brochure?

Yes. Use the brochure download link provided on this page.

SOCI Act CIRMP Risk-Based Audit Training Course