Skip to content

Intermediate programme

Risk Based Internal Audit

Plan and run an audit that goes where the risk is, and write findings management will act on.

Duration
5 days
Level
Intermediate
Next date
2 to 6 November 2026
Fee from
US$995live online

Read the programme brochure

ClassroomLive onlineIn house

Overview

Internal audit earns its standing on two things: whether it looks in the right places, and whether anything changes as a result. This programme covers risk based planning, fieldwork that gathers evidence rather than confirmation, and reporting written so that a finding leads to a decision instead of a defensive response.

It runs 7 times over the published calendar, in 6 cities and live online. Every date is the same programme with the same content and the same certificate.

What you will be able to do

  • Build an audit plan driven by assessed risk rather than by cycle.
  • Design tests that would actually detect the failure they target.
  • Gather and document evidence to a standard that survives challenge.
  • Write findings that establish cause, effect and a workable recommendation.

Who should attend

Internal auditors, audit managers, risk officers and those preparing to move into an internal audit function.

Is the level right for you?

This is an intermediate level programme. It assumes you are working in or moving into the area it covers, and it is built around your own material rather than a case study. If you are unsure, ask an advisor before registering rather than after.

Ask an advisor

How it is taught

Short input, then work. Across 5 days of roughly 6 teaching hours each, the balance sits deliberately with the second: a programme where the trainer talks for six hours produces notes rather than capability.

  • Your own material

    Exercises run on situations delegates bring, not on a case study written for a different organisation in a different decade.

  • A capped cohort

    Small enough that everybody is asked something. Executive programmes are capped tighter still.

  • Practice under scrutiny

    The difficult conversation, the challenged assumption, the decision defended out loud. Judgement is not built by watching.

  • Something to take back

    Each day ends with a thing you can use on Monday rather than a slide deck you will not reopen.

The programme, part by part

This programme runs over 5 days. The outline below is grouped into 4 parts rather than one block per day, because that is how the material is organised. Your joining instructions carry the timetable for the dates you attend.

Part 1Risk based planning

Risk based planning

  • Building the audit universe
  • Assessing and ranking risk
  • Coverage against depth
  • Agreeing the plan with the committee
Part 2Designing the test

Designing the test

  • What a control is supposed to prevent
  • Test design that could fail
  • Sampling and its limits
  • Data analysis in fieldwork
Part 3Evidence

Evidence

  • Sufficiency and appropriateness
  • Working papers that support the conclusion
  • Handling contradictory evidence
  • Documentation that survives review
Part 4Findings that land

Findings that land

  • Condition, cause, effect and recommendation
  • Rating and prioritising
  • Negotiating management response
  • Following up to closure

What you leave with

  • A risk based annual audit plan.
  • A test programme for one assessed risk area.
  • An evidence and working paper standard.
  • A finding written to cause and effect with an agreed action.

The certificate

A GATI certificate recording what you attended, issued after the programme has run and attendance has been taken. Attending at least 80 per cent of the days earns a certificate of completion; attending less earns a certificate of attendance stating exactly what was attended.

Every certificate carries a code that anybody can check against GATI's own record, which is what makes it worth holding. It records participation. This site will not imply one it does not have.

Questions

Who is Risk Based Internal Audit for?
Internal auditors, audit managers, risk officers and those preparing to move into an internal audit function. It runs at intermediate level within Finance, Accounting and Audit, so it assumes you are working in or moving into that area rather than meeting it for the first time. If you are unsure whether the level fits, ask an advisor before registering rather than after.
How long is it, and what does a day look like?
5 days, running to roughly 6 teaching hours a day. Sessions are built around your own material rather than a case study, so a day alternates between short input and working on something you brought. The full outline is on this page, grouped into parts.
What does it cost, and what is included?
The next published date is Live online at US$995 per delegate. The fee covers tuition, all programme materials and the certificate. Travel, accommodation and visas are arranged by the delegate. Fees vary by city, and every published date shows its own.
Can it be delivered for my organisation only?
Yes. Any published programme can run as a private cohort, on dates that suit you, in your city or online, built around your own material. That is a different conversation from registering an individual, and it starts with what capability you are trying to build rather than with a course title.
What certificate do I get?
A GATI certificate recording what you attended, issued after the programme has run and attendance has been taken. Attending at least 80 per cent of the days earns a certificate of completion; attending less earns a certificate of attendance stating exactly what was attended. Every certificate carries a code that anybody can check against GATI's own record.
Is the online version the same programme?
Yes. The same faculty, the same material, the same cohort cap and the same certificate. It is not a recording and it is not a reduced version. It exists because travel budgets and visa timelines rule people out of a room they should be in. The classroom version runs in Nairobi, Dubai, Durban, Lagos.

Want to take this further?

Register on a published date, or tell an advisor what you need and they will come back with something specific rather than a brochure.

Related subjects

Related reading