Course Introduction
Emerging technologies are reshaping organisational strategies, operating models, customer experiences, information systems and decision-making processes at an unprecedented pace. Artificial intelligence, cloud computing, blockchain, Internet of Things devices, robotic process automation, advanced analytics and other digital innovations can create significant value, but they also introduce new categories of strategic, operational, cybersecurity, regulatory, financial and reputational risk that internal auditors must understand.
This course provides a comprehensive framework for auditing risks associated with rapidly evolving technologies and digitally enabled business models. It equips internal auditors, IT auditors, risk professionals and assurance practitioners with practical methodologies for identifying technology risks, evaluating control environments, assessing governance arrangements and determining whether organisations are managing emerging technology exposures within acceptable levels.
Participants will examine how emerging technology risks develop across the technology lifecycle, from innovation strategy and business-case development through procurement, implementation, deployment, integration, monitoring and retirement. The programme focuses on applying risk-based audit principles to technologies that may have limited historical data, rapidly changing capabilities, complex dependencies and uncertain regulatory or control environments.
The training addresses critical areas including artificial intelligence, machine learning, generative AI, cloud services, automation, blockchain, distributed ledger technology, Internet of Things, application programming interfaces, advanced data analytics, digital platforms and technology ecosystems. Participants will learn how to translate technology-specific threats into auditable risks and assess whether appropriate governance, security, resilience, privacy, compliance and operational controls are in place.
Special attention is given to emerging technology governance challenges such as third-party dependency, technology concentration, algorithmic decision-making, data integrity, model uncertainty, cyber threats, privacy concerns, automation risk and rapid technological change. Participants will explore how continuous monitoring, technology risk indicators, data analytics and agile assurance approaches can strengthen internal audit coverage when conventional periodic audit methods may not adequately capture rapidly evolving risks.
By completing this programme, participants will be better prepared to provide independent and forward-looking assurance over emerging technology initiatives and their associated risks. The course develops practical capabilities for technology risk assessment, audit planning, control evaluation, evidence gathering, data analytics, reporting and remediation follow-up while helping auditors anticipate emerging exposures before they develop into significant organisational events.
Duration
10 days
Who Should Attend
-
Internal auditors responsible for assessing technology-enabled processes, digital transformation initiatives and emerging technology risks.
-
IT auditors and information systems assurance professionals reviewing modern technology platforms, applications and infrastructure.
-
Enterprise risk professionals responsible for identifying and monitoring strategic and operational risks associated with emerging technologies.
-
Technology risk managers developing frameworks for managing rapidly changing digital and technology exposures.
-
Cybersecurity professionals assessing new attack surfaces and security risks created by emerging technology adoption.
-
Compliance and regulatory professionals monitoring evolving technology-related legal, regulatory and governance requirements.
-
Data governance professionals responsible for data quality, integrity, privacy and information management across digital environments.
-
Digital transformation leaders responsible for implementing emerging technologies and managing associated organisational risks.
-
Technology governance professionals overseeing technology strategy, architecture, investments, standards and risk management.
-
Senior managers and executives seeking stronger oversight of emerging technology investments, dependencies and organisational exposures.
-
Audit committee members and governance professionals seeking greater understanding of technology risk and assurance challenges.
-
Business continuity and resilience professionals assessing technology dependencies, operational disruption and recovery risks.
-
Fraud, forensic and investigation professionals examining technology-enabled fraud, manipulation and digital misconduct.
-
Technology project, programme and change professionals seeking to strengthen risk, control and assurance practices throughout technology initiatives.
Course Objectives
-
Develop a comprehensive understanding of emerging technology risks and their implications for internal audit, enterprise risk management, governance and organisational resilience.
-
Identify strategic, operational, financial, cybersecurity, privacy, compliance, ethical and reputational risks associated with rapidly evolving technology environments.
-
Apply risk-based auditing techniques to emerging technologies throughout their lifecycle, from innovation and investment decisions through implementation, operation and retirement.
-
Evaluate technology governance frameworks, accountability structures, policies and oversight mechanisms supporting responsible adoption and effective management of emerging technologies.
-
Assess the effectiveness of technology risk identification, assessment, treatment and monitoring processes across complex and rapidly changing technology ecosystems.
-
Evaluate cybersecurity controls addressing emerging attack surfaces, technology vulnerabilities, unauthorised access, data compromise and technology-enabled threats.
-
Examine data governance, privacy and information security controls supporting emerging technology applications and digitally enabled business processes.
-
Assess third-party, cloud, platform and technology supply chain risks arising from external service providers, technology dependencies and interconnected ecosystems.
-
Develop practical audit procedures for artificial intelligence, automation, blockchain, Internet of Things, cloud and other emerging technology environments.
-
Apply data analytics, continuous auditing and technology-enabled monitoring techniques to identify anomalies, control weaknesses and emerging technology risk indicators.
-
Develop clear audit findings, recommendations and remediation plans that communicate technology risks and their potential business consequences to management and governance bodies.
-
Strengthen forward-looking internal audit capabilities by incorporating emerging technology intelligence, horizon scanning and dynamic risk assessment into assurance planning.
Comprehensive Course Outline
Module 1: Foundations of Emerging Technology Risk Auditing
-
Emerging technology concepts, technology innovation trends and their growing impact on organisational strategies and operating models.
-
The internal auditor’s role in identifying, assessing and providing assurance over rapidly evolving technology risks.
-
Differences between traditional IT risks and emerging technology risks involving uncertainty, speed of change, complexity and interconnected dependencies.
-
Core principles of emerging technology risk auditing, assurance objectives, professional judgement and risk-based audit approaches.
Module 2: Emerging Technology Governance and Risk Management Frameworks
-
Technology governance structures, board oversight, executive accountability and responsibilities for managing emerging technology exposures.
-
Integration of emerging technology risks into enterprise risk management, internal control, technology governance and strategic planning frameworks.
-
Technology policies, standards, procedures and approval mechanisms supporting controlled experimentation and responsible technology adoption.
-
Technology risk appetite, escalation processes, governance reporting and maturity assessment for emerging technology environments.
Module 3: Emerging Technology Risk Identification and Assessment
-
Identification of strategic, operational, financial, cybersecurity, privacy, compliance, resilience and reputational risks across emerging technology initiatives.
-
Risk assessment methodologies for technologies with limited historical experience, rapidly changing capabilities and uncertain risk profiles.
-
Emerging technology risk registers, risk taxonomies, scenario analysis and prioritisation of critical technology exposures.
-
Assessing inherent and residual risk while considering technology maturity, business criticality, dependencies and potential systemic impacts.
Module 4: Technology Innovation, Investment and Project Risk Auditing
-
Auditing technology strategy, innovation portfolios, business cases, investment decisions and expected benefits from emerging technology initiatives.
-
Assessment of project governance, delivery methodologies, implementation risks, milestones, resources and technology readiness.
-
Technology procurement, vendor selection, due diligence and risk assessment before adoption of emerging technology solutions.
-
Benefits realisation, post-implementation review and assurance over whether technology investments deliver intended organisational outcomes.
Module 5: Artificial Intelligence and Machine Learning Risk Auditing
-
AI and machine learning risk fundamentals, including model uncertainty, data dependency, algorithmic risks and automated decision-making.
-
Auditing AI governance, model development, validation, deployment, performance monitoring and lifecycle management controls.
-
Algorithmic bias, fairness, explainability, transparency and human oversight as emerging technology assurance considerations.
-
Generative AI, large language models and autonomous AI risks, including unreliable outputs, data exposure and inappropriate automation.
Module 6: Cloud, SaaS and Distributed Technology Risk Auditing
-
Cloud computing risk, shared responsibility, service models and governance considerations for emerging cloud-based technology environments.
-
Cloud configuration, identity management, data protection, resilience and security controls from an internal audit perspective.
-
Software-as-a-Service, platform dependencies, application programming interfaces and externally hosted technology risks.
-
Distributed ledger and blockchain technologies, including governance, transaction integrity, smart contract and operational risks.
Module 7: Internet of Things, Connected Devices and Edge Technology Assurance
-
Internet of Things architecture, connected devices, sensors and edge computing risks within enterprise and operational environments.
-
Device identity, authentication, firmware, configuration and lifecycle controls for increasingly interconnected technology ecosystems.
-
IoT data integrity, privacy, network security and monitoring risks associated with large volumes of distributed technology assets.
-
Operational resilience and third-party dependency considerations for critical connected devices and edge technology infrastructure.
Module 8: Automation, Robotics and Intelligent Process Risk
-
Robotic process automation, intelligent automation and automated workflow technologies and their implications for internal controls.
-
Automation governance, process suitability, control design and risks arising from excessive or inappropriate automation.
-
Bot access, credentials, segregation of duties, change management and monitoring controls within automated business processes.
-
Automation failure, exception handling, human intervention, business continuity and recovery controls for critical automated activities.
Module 9: Cybersecurity and Emerging Technology Threats
-
Emerging cyber threats affecting artificial intelligence, cloud, IoT, blockchain, automation and interconnected technology ecosystems.
-
Attack surface expansion, vulnerabilities, identity abuse, insecure interfaces and technology configuration risks created by digital innovation.
-
Security monitoring, threat detection, vulnerability management and incident response controls for emerging technology environments.
-
Technology-enabled cyber resilience, recovery planning and assurance over organisational preparedness for rapidly evolving attacks.
Module 10: Data, Privacy and Information Risk in Emerging Technologies
-
Data governance risks associated with advanced analytics, AI, cloud services, connected devices and digitally integrated platforms.
-
Data quality, integrity, lineage, provenance, classification and ownership considerations across emerging technology environments.
-
Privacy risks involving personal information, behavioural data, sensitive information and cross-platform data sharing.
-
Data retention, access, encryption, secure disposal and information protection controls supporting emerging technology applications.
Module 11: Third-Party, Platform and Technology Supply Chain Risk
-
Technology supplier risk assessment covering cloud providers, software vendors, AI providers, platforms, APIs and specialised technology partners.
-
Vendor due diligence, contractual requirements, service levels, audit rights and technology security obligations.
-
Fourth-party dependencies, technology concentration, supply chain vulnerabilities and systemic risks within interconnected ecosystems.
-
Third-party assurance evidence, control reports, performance monitoring and remediation of emerging technology supplier weaknesses.
Module 12: Emerging Technology Data Analytics and Continuous Auditing
-
Technology risk analytics, automated testing and data-driven techniques for identifying unusual activity and emerging control weaknesses.
-
Development of technology risk indicators, performance measures, thresholds and alerts supporting continuous assurance.
-
Continuous monitoring of technology configurations, system activity, access, transactions, incidents and control performance.
-
Using dashboards, visualisation and automated analytics to improve internal audit visibility over rapidly changing technology environments.
Module 13: Technology Resilience, Business Continuity and Operational Risk
-
Technology resilience principles for critical digital services, platforms, applications and interconnected technology ecosystems.
-
Business continuity, disaster recovery, backup, redundancy and recovery controls for emerging technology-dependent processes.
-
Technology failure scenarios, dependency mapping, concentration risk and contingency arrangements for critical digital operations.
-
Resilience testing, simulation exercises, recovery validation and lessons-learned processes for emerging technology disruptions.
Module 14: Regulatory, Ethical and Compliance Risks in Emerging Technologies
-
Regulatory and legal risks affecting artificial intelligence, digital platforms, cloud computing, data processing and automated decision-making.
-
Ethical considerations involving transparency, accountability, fairness, human oversight and responsible technology innovation.
-
Mapping emerging technology controls against applicable laws, regulations, organisational policies and recognised governance frameworks.
-
Managing regulatory uncertainty, jurisdictional differences and rapidly evolving compliance expectations through flexible risk-based assurance.
Module 15: Emerging Technology Audit Evidence, Reporting and Remediation
-
Gathering and evaluating audit evidence from technology governance records, configurations, models, systems, contracts and monitoring activities.
-
Developing audit findings that connect emerging technology control weaknesses with operational, financial, regulatory and strategic consequences.
-
Communicating technology assurance results clearly to management, audit committees, technology leaders and other governance stakeholders.
-
Remediation planning, management action tracking, follow-up testing and validation of corrective measures for emerging technology risks.
Module 16: Advanced Emerging Technology Assurance and Future Audit Strategy
-
Horizon scanning, technology intelligence and forward-looking approaches for identifying emerging risks before they become significant exposures.
-
Advanced assurance considerations for autonomous AI agents, quantum technologies, immersive platforms, synthetic data and next-generation digital ecosystems.
-
Building a dynamic emerging technology audit universe and integrating technology risk insights into enterprise-wide internal audit planning.
-
Future-ready internal audit strategies combining continuous assurance, specialist collaboration, advanced analytics and adaptive risk assessment.
Training Approach
This course will be delivered by our skilled trainers who have vast knowledge and experience as expert professionals in the fields. The course is taught in English and through a mix of theory, practical activities, group discussion and case studies. Course manuals and additional training materials will be provided to the participants upon completion of the training.
Tailor-Made Course
This course can also be tailor-made to meet organization requirement. For further inquiries, please contact us on: Email: training@upskilldevelopment.com Tel: +254 721 331 808
Training Venue
The training will be held at our Upskill Training Centre. We also offer training for a group (at a discount of 10% to 50%) at requested location all over the world. The Onsite course fee covers the course tuition, training materials, two break refreshments, buffet lunch, airport transfers, Upskill gift package, and guided tour.
Visa application, travel expenses, dinners, accommodation, insurance, and other personal expenses are catered by the participant
Certification
Participants will be issued with Upskill certificate upon completion of this course.
Airport Pickup and Accommodation
Airport pickup and accommodation is arranged upon request. For booking contact our Training Coordinator through Email: training@upskilldevelopment.com, +254 721 331 808
Terms of Payment:
Unless otherwise agreed between the two parties’ payment of the course fee should be done 3 working days before commencement of the training so as to enable us to prepare better.
