Objective

To equip those tasked with providing operational/quality assurance or internal audit assurance over internal processes with the skills necessary to identify and select controls for testing, to test controls using methods appropriate to those controls and to draw conclusions in relation to the overall reliability of the process

Course Outline

Business Processes:

•        How to define a process; Process driven assurance as oppose to risk based

•        Common risks in business processes

•        What is a control/ How to distinguish between a process and a control?

•        Process/ Risk/ Control Matrix

How to identify a control:

•        Control types – preventative, detective,recovery

•        Process mapping to discover/ identify existing controls and gaps (controls lacking)

•        What to do when controls inadequate/ lacking

How to write a control description:

•        Control objectives

•        Codified sets of controls

How to do control testing

•        How much testing is needed

•        Approaches to testing – auditing techniques

•        Assessing the design - What makes a good control

•        How to conduct control operating effectiveness testing

•        What evidence do we need.

Outcomes

At completion of this course, participants will be able to:

1.      Understand the concept of process driving risks and controls

2.      Identify controls relevant to specific business processes & risks

3.      Describe a control and its strengths

4.      Test a control for effectiveness