Finance, Accounting and Audit
Audit and Assurance
Risk Based Internal Audit
Plan and run an audit that goes where the risk is, and write findings management will act on.
- Duration
- 5 days
- Contact hours
- 30
- Level
- Intermediate
- Fee from
- On enquiry
Overview
Internal audit earns its standing on two things: whether it looks in the right places, and whether anything changes as a result. This programme covers risk based planning, fieldwork that gathers evidence rather than confirmation, and reporting written so that a finding leads to a decision instead of a defensive response.
Who should attend
Internal auditors, audit managers, risk officers and those preparing to move into an internal audit function.
What you will be able to do
- Build an audit plan driven by assessed risk rather than by cycle.
- Design tests that would actually detect the failure they target.
- Gather and document evidence to a standard that survives challenge.
- Write findings that establish cause, effect and a workable recommendation.
How it is taught
Short input, then work, across 5 days of roughly 6 teaching hours each. Exercises run on situations delegates bring rather than on a case study written for a different organisation. Cohorts are capped so that everybody is asked something.
Available as classroom, live online, in house.
Programme outline
Day 1
Risk based planning
- Building the audit universe
- Assessing and ranking risk
- Coverage against depth
- Agreeing the plan with the committee
Day 2
Designing the test
- What a control is supposed to prevent
- Test design that could fail
- Sampling and its limits
- Data analysis in fieldwork
Day 3
Evidence
- Sufficiency and appropriateness
- Working papers that support the conclusion
- Handling contradictory evidence
- Documentation that survives review
Day 4
Findings that land
- Condition, cause, effect and recommendation
- Rating and prioritising
- Negotiating management response
- Following up to closure
What you leave with
- A risk based annual audit plan.
- A test programme for one assessed risk area.
- An evidence and working paper standard.
- A finding written to cause and effect with an agreed action.
Dates and fees
| Dates | Location | Format | Fee |
|---|---|---|---|
| 23 to 27 November 2026 | Nairobi, Kenya | Classroom | US$1,500 |
| 30 November 2026 to 4 December 2026 | Dubai, United Arab Emirates | Classroom | US$1,500 |
| 7 to 11 December 2026 | Durban, South Africa | Classroom | R15,000 |
| 14 to 18 December 2026 | Lagos, Nigeria | Classroom | US$1,500 |
Fees are per delegate and cover tuition, all programme materials and the certificate. Travel, accommodation and visas are arranged by the delegate. Registration closes two weeks before a programme starts.
Certificate
A GATI certificate recording what was attended, issued after the programme has run and attendance has been taken. Attending at least 80 per cent of the days earns a certificate of completion; attending less earns a certificate of attendance stating exactly what was attended. Every certificate carries a code that anybody can check against GATI's own record.
It records participation. and GATI does not claim one it does not hold.