Internal auditing training: curriculum and assessment
This course is for employees assigned to an organisation's internal audit programme, including process specialists who need an objective view of work outside their own responsibility.
Audience and preparation
This course is for employees assigned to an organisation's internal audit programme, including process specialists who need an objective view of work outside their own responsibility. Before enrolment, state the management-system criteria, operational scope and intended audit role. Reading the relevant requirements and understanding the organisation's processes are prerequisites for meaningful exercises; knowing a checklist by heart is insufficient. Internal auditing is an organisational assurance activity. It does not give the participant authority to certify a supplier or another organisation.
Learning sequence and expected records
The curriculum covers audit-programme priorities, scope and criteria, selection of a competent and sufficiently objective auditor, sampling, interviewing and the difference between a factual record and a conclusion. Learners prepare an audit plan, explain why particular transactions were selected and write findings that connect evidence to an identified requirement. A later module distinguishes immediate correction, cause analysis, corrective action and verification of effectiveness. Learners must also record access restrictions and incomplete sampling; an internal audit cannot establish that every transaction complies.
Planning exercise
A hypothetical warehouse wants its stock-control supervisor to audit the inventory process that she manages. The course-planning task is to identify the objectivity risk, arrange an auditor from a different process and decide how the supervisor can contribute technical knowledge without evaluating her own work. Prepare a role allocation, a sample plan for two storage zones and criteria for judging the submitted findings. An answer that merely renames the supervisor 'independent auditor' fails. The submitted role matrix must show who provides technical input, who evaluates evidence and who follows agreed actions.