Internal Audit, Governance and Enterprise Risk Management Training Course

Course Introduction

The Internal Audit, Governance and Enterprise Risk Management Training Course provides a comprehensive and practical framework for professionals responsible for strengthening organizational assurance, accountability, governance, risk oversight, and internal control. It integrates modern internal audit practices with enterprise risk management principles to help participants identify emerging risks, evaluate control effectiveness, and support sustainable organizational performance.

This course explores the evolving role of internal audit as a strategic assurance and advisory function rather than simply a compliance-focused activity. Participants will examine contemporary approaches to audit planning, risk assessment, governance evaluation, control testing, audit evidence, reporting, and follow-up. The program emphasizes how internal auditors can provide objective insights that help management and governing bodies make informed decisions while maintaining appropriate independence and professional judgment.

Strong governance and effective enterprise risk management are essential for organizations operating in increasingly complex regulatory, technological, financial, operational, and geopolitical environments. The course therefore examines how governance structures, risk appetite, internal controls, accountability mechanisms, ethics, and organizational culture interact to influence performance and resilience. Participants will learn how to assess whether these components are properly designed, implemented, monitored, and aligned with strategic objectives.

The program also addresses emerging risks associated with digital transformation, cybersecurity, artificial intelligence, third-party relationships, data governance, fraud, sustainability, climate exposure, business continuity, and regulatory change. Through practical scenarios and structured analytical approaches, participants will develop the ability to evaluate risks beyond traditional financial and compliance considerations and understand how interconnected risks can affect organizational objectives, reputation, stakeholder confidence, and long-term value creation.

Participants will gain practical capabilities for developing risk-based internal audit plans, conducting enterprise risk assessments, evaluating governance arrangements, testing internal controls, communicating significant findings, and monitoring corrective actions. Particular attention is given to the relationship between boards, audit committees, senior management, risk functions, compliance teams, and internal audit, enabling participants to understand how assurance responsibilities can be coordinated without compromising independence or creating inappropriate reliance.

By the end of the course, participants will be better equipped to strengthen internal audit effectiveness, improve governance oversight, enhance enterprise-wide risk management, and contribute to a stronger control environment. The training is designed for professionals seeking practical, strategic, and forward-looking approaches that connect assurance activities with organizational objectives, risk resilience, regulatory expectations, and sustainable performance.

Duration

10 days

Who Should Attend

• Chief Audit Executives and Heads of Internal Audit seeking to strengthen risk-based assurance capabilities.

• Internal auditors responsible for audit planning, fieldwork, control evaluation, and reporting.

• Audit committee members seeking stronger understanding of governance, assurance, and enterprise risk oversight.

• Risk managers and enterprise risk professionals responsible for identifying and monitoring organizational risks.

• Governance, risk, and compliance professionals coordinating enterprise-wide assurance and control activities.

• Compliance officers responsible for regulatory compliance, monitoring, and organizational accountability.

• Finance managers and controllers involved in financial controls, risk oversight, and performance assurance.

• Senior executives responsible for governance, risk management, internal controls, and strategic decision-making.

• Board secretaries and corporate governance professionals supporting effective board and committee operations.

• Fraud risk, investigations, and anti-corruption professionals involved in organizational risk prevention.

• Information technology auditors and cybersecurity professionals evaluating technology-related risks and controls.

• Operational managers responsible for process performance, risk mitigation, and control implementation.

• Quality assurance professionals involved in monitoring organizational systems, processes, and performance.

• Legal and regulatory professionals supporting governance, risk, compliance, and accountability frameworks.

• Consultants and advisors providing internal audit, governance, risk management, and control improvement services.

Course Objectives

• Develop a comprehensive understanding of modern internal audit principles and their relationship with governance, enterprise risk management, internal controls, and organizational performance.

• Strengthen participants’ ability to design and implement risk-based internal audit strategies that align assurance activities with strategic priorities, organizational objectives, and changing risk exposures.

• Enable participants to assess governance structures, board oversight arrangements, accountability mechanisms, ethical frameworks, and decision-making processes for effectiveness and transparency.

• Build practical capabilities for identifying, assessing, prioritizing, documenting, and monitoring enterprise risks across strategic, financial, operational, technological, compliance, and reputational dimensions.

• Enhance participants’ ability to evaluate internal control design and operating effectiveness while identifying weaknesses that may expose organizations to financial loss, operational disruption, fraud, or non-compliance.

• Develop advanced approaches for preparing internal audit plans that reflect organizational risk appetite, emerging threats, regulatory developments, management priorities, and available audit resources.

• Improve audit engagement skills covering scoping, risk assessment, evidence gathering, sampling, testing, working papers, findings development, root-cause analysis, and professional audit documentation.

• Strengthen the ability to communicate audit findings clearly and constructively to management, audit committees, boards, and other stakeholders while maintaining objectivity, independence, and professional credibility.

• Enable participants to establish effective processes for monitoring audit recommendations, validating corrective actions, escalating overdue issues, and reporting unresolved risks to appropriate governance authorities.

• Examine emerging enterprise risks including cybersecurity, artificial intelligence, third-party dependencies, climate-related exposures, digital transformation, data privacy, geopolitical disruption, and regulatory change.

• Develop an integrated understanding of how internal audit, risk management, compliance, finance, legal, operations, and governance functions can coordinate assurance activities through clearly defined responsibilities.

• Equip participants with practical strategies for transforming internal audit into a value-adding function that provides forward-looking insights, supports resilience, improves controls, and contributes to sustainable organizational performance.

Comprehensive Course Outline

Module 1: Foundations of Internal Audit, Governance and Enterprise Risk Management

• Evolution, purpose, and strategic contribution of internal audit within modern organizations and complex operating environments.

• Interrelationships between governance, risk management, internal controls, assurance, accountability, and organizational performance.

• Core responsibilities of internal audit and distinctions between assurance, advisory, consulting, compliance, and management responsibilities.

• Contemporary challenges affecting internal audit functions, including increased expectations for strategic insight and forward-looking assurance.

Module 2: Internal Audit Professional Practices and Standards

• Fundamental principles governing effective internal audit activities, professional conduct, objectivity, competence, and quality.

• Internal audit charters, mandates, authority, responsibilities, reporting structures, and organizational positioning requirements.

• Maintaining independence and objectivity while developing constructive relationships with management and operational stakeholders.

• Quality assurance approaches, performance evaluation, continuous improvement, and assessment of internal audit effectiveness.

Module 3: Corporate Governance and Board Oversight

• Principles of effective corporate governance and their influence on accountability, transparency, ethical leadership, and organizational performance.

• Roles and responsibilities of boards, audit committees, senior management, internal audit, risk functions, and other assurance providers.

• Assessing board effectiveness, committee structures, information flows, oversight practices, and escalation mechanisms.

• Evaluating governance weaknesses and developing practical recommendations for stronger oversight and accountability.

Module 4: Enterprise Risk Management Frameworks

• Principles and components of enterprise risk management and their integration with strategy, planning, operations, and performance management.

• Risk identification techniques covering strategic, financial, operational, technological, legal, compliance, and reputational exposures.

• Risk assessment methodologies, likelihood and impact analysis, risk aggregation, prioritization, and enterprise risk profiling.

• Developing practical risk management processes that support informed decision-making and organizational resilience.

Module 5: Risk Appetite, Risk Culture and Risk Governance

• Establishing risk appetite statements, tolerance thresholds, escalation criteria, and management responsibilities across organizational levels.

• Assessing organizational risk culture, behavioral indicators, accountability structures, incentives, and leadership influence.

• Governance mechanisms for monitoring significant risks and ensuring that risk-taking remains aligned with strategic objectives.

• Identifying disconnects between stated risk appetite and actual organizational behavior, decisions, controls, and performance.

Module 6: Internal Control Systems and Control Frameworks

• Principles of effective internal control and the relationship between control environments, risk assessment, control activities, information, and monitoring.

• Evaluating preventive, detective, corrective, manual, automated, and technology-enabled controls across business processes.

• Control design assessments, operating effectiveness testing, control deficiencies, compensating controls, and remediation strategies.

• Linking internal control evaluation with financial integrity, operational reliability, regulatory compliance, fraud prevention, and organizational resilience.

Module 7: Risk-Based Internal Audit Planning

• Developing risk-based audit universes and prioritizing engagements according to organizational objectives, risk exposure, and assurance requirements.

• Preparing annual and multi-year internal audit plans that respond to changing business conditions and emerging enterprise risks.

• Resource allocation, audit scheduling, specialist requirements, engagement timing, and coordination with other assurance providers.

• Using risk intelligence, management information, previous audit results, incidents, and external developments to refine audit priorities.

Module 8: Conducting Effective Internal Audit Engagements

• Audit engagement planning, preliminary surveys, process understanding, risk identification, control mapping, and engagement scoping.

• Evidence collection, interviews, walkthroughs, observation, document review, data analysis, sampling, and control testing techniques.

• Developing audit findings through condition, criteria, cause, consequence, and practical recommendation analysis.

• Maintaining high-quality audit documentation, working papers, review trails, evidence integrity, and professional judgment throughout engagements.

Module 9: Fraud Risk Management and Investigative Auditing

• Understanding fraud risk factors, fraud schemes, occupational fraud, corruption, conflicts of interest, and control-related vulnerabilities.

• Designing fraud risk assessments and evaluating preventive, detective, reporting, investigation, and response mechanisms.

• Using data analytics, exception reporting, transaction analysis, and behavioral indicators to identify potential fraud patterns.

• Coordinating internal audit activities with investigations, legal functions, compliance teams, management, and appropriate governance authorities.

Module 10: Technology, Data Analytics and Digital Internal Audit

• Applying data analytics to improve audit planning, control testing, anomaly detection, continuous monitoring, and risk assessment.

• Auditing information systems, technology controls, cybersecurity governance, access management, data integrity, and technology resilience.

• Evaluating risks arising from automation, cloud computing, artificial intelligence, digital platforms, and rapidly evolving technologies.

• Developing technology-enabled internal audit approaches that increase coverage, efficiency, audit insight, and continuous assurance capabilities.

Module 11: Cybersecurity, Data Privacy and Emerging Technology Risks

• Assessing cybersecurity governance, threat management, security controls, incident preparedness, and organizational cyber resilience.

• Auditing data privacy practices, information handling, access controls, retention requirements, and accountability mechanisms.

• Evaluating artificial intelligence risks including model governance, data quality, transparency, bias, accountability, and unauthorized use.

• Developing risk-based assurance responses to rapidly changing digital threats, technology dependencies, and regulatory expectations.

Module 12: Third-Party, Supply Chain and Business Resilience Risk

• Identifying risks associated with outsourcing, vendors, strategic partners, contractors, service providers, and extended supply networks.

• Evaluating third-party due diligence, contractual controls, performance monitoring, information security, compliance, and exit arrangements.

• Assessing business continuity, crisis management, disaster recovery, operational resilience, and critical process dependencies.

• Integrating third-party and resilience risks into enterprise risk assessments, internal audit plans, governance reporting, and assurance activities.

Module 13: Audit Reporting, Communication and Stakeholder Engagement

• Developing clear, evidence-based internal audit reports that communicate significant risks, control weaknesses, root causes, and recommended actions.

• Tailoring audit communication for operational management, executive leadership, audit committees, boards, regulators, and other stakeholders.

• Handling disagreement over audit findings through evidence, professional judgment, constructive dialogue, escalation, and governance processes.

• Presenting audit results in ways that support timely decisions, accountability, remediation, risk ownership, and sustainable improvement.

Module 14: Audit Follow-Up, Issue Management and Assurance Coordination

• Establishing effective follow-up mechanisms for tracking management actions, remediation deadlines, unresolved risks, and recurring control deficiencies.

• Validating corrective actions and determining whether remediation has addressed root causes rather than merely treating symptoms.

• Coordinating internal audit with risk management, compliance, external audit, quality assurance, and other assurance functions.

• Developing integrated assurance approaches that reduce duplication, improve coverage, clarify responsibilities, and strengthen governance visibility.

Module 15: ESG, Climate and Strategic Emerging Risks

• Evaluating governance and assurance considerations associated with environmental, social, and governance risks and organizational sustainability commitments.

• Assessing climate-related physical, transition, financial, operational, regulatory, and reputational risks within enterprise risk frameworks.

• Reviewing emerging geopolitical, economic, regulatory, workforce, technological, and societal risks that may affect strategic objectives.

• Integrating forward-looking risk intelligence into audit planning, board reporting, resilience strategies, and organizational decision-making.

Module 16: Building a High-Impact Internal Audit and Risk Management Function

• Designing a mature internal audit operating model that aligns people, processes, technology, resources, governance, and strategic assurance priorities.

• Developing internal audit performance measures, maturity assessments, capability development plans, and continuous improvement initiatives.

• Establishing practical roadmaps for strengthening enterprise risk management, governance oversight, internal controls, and organizational resilience.

• Creating an integrated action plan for delivering strategic audit value, improving assurance outcomes, and responding effectively to future risks.

Training Approach

This course will be delivered by our skilled trainers who have vast knowledge and experience as expert professionals in the fields. The course is taught in English and through a mix of theory, practical activities, group discussion and case studies. Course manuals and additional training materials will be provided to the participants upon completion of the training.

Tailor-Made Course

This course can also be tailor-made to meet organization requirement. For further inquiries, please contact us on: Email: training@upskilldevelopment.com Tel: +254 721 331 808

Training Venue 

The training will be held at our Upskill Training Centre. We also offer training for a group (at a discount of 10% to 50%) at requested location all over the world. The Onsite course fee covers the course tuition, training materials, two break refreshments, buffet lunch, airport transfers, Upskill gift package, and guided tour.

Visa application, travel expenses, dinners, accommodation, insurance, and other personal expenses are catered by the participant

Certification

Participants will be issued with Upskill certificate upon completion of this course.

Airport Pickup and Accommodation

Airport pickup and accommodation is arranged upon request. For booking contact our Training Coordinator through Email: training@upskilldevelopment.com, +254 721 331 808

Terms of Payment:

Unless otherwise agreed between the two parties’ payment of the course fee should be done 3 working days before commencement of the training so as to enable us to prepare better.