This course is built for professionals who want to break free from outdated audit cycles and embrace an updated risk‑based approach that reflects today’s fast‑moving business environment.
Course overview
Risk‑based internal audit (RBIA) is a modern, strategic approach to internal auditing that focuses on the risks that matter most to an organisation. Instead of auditing everything on a fixed cycle, RBIA directs audit effort toward the areas with the highest potential impact on objectives, performance, and reputation.
But we have been doing this for years, right? Yes, but maybe not! Plenty of internal audit teams are still struggling with this approach and haven’t embedded more recent developments, such as the IIA’s Topical Requirements, into their existing working practices.
This course is built for professionals who want to break free from outdated audit cycles and embrace an updated risk‑based approach that reflects today’s fast‑moving business environment.
You’ll learn how to identify the risks that truly matter, focus your internal audit resources where they deliver maximum value, and communicate insights that leadership actually uses.
We’ll think about the updated Three Lines Model, the Global Internal Audit StandardsTM and new developments including the Topical Requirements and where they fit into RBIA.
This course will provide best practice advice and coaching on applying the methodology, planning and then managing RBIA engagements.
It will also be interactive, so be prepared to join and share your views!
If you’re ready to upgrade your internal audit thinking and skillset, this is the RBIA course that will help get you there.
Who should attend?
This course is open to all. And it will be relevant and insightful for all – whether chief audit executive, risk management professional or new internal auditor. It is of most relevance to those who want to (re)think about their approach to risk based internal auditing or who want to move further in this direction. It will also be valuable for those who plan, manage or undertake risk based internal audit engagements or for those wishing to stay up to date with topical developments in this field.
Outline Course Programme
This course will take you through the following learning steps:
- a brief refresher covering risk management and assurance
- risk appetite, responses and mitigation
- risk management maturity and the updated Three Lines Model
- what the Global Internal Audit StandardsTM say – fact and fiction
- where do the Topical Requirements fit in?
- a risk based internal audit overview
- risk based internal audit planning
- risk based internal audit management, including:
- engagement planning
- testing risk management and management assurance
- evaluating results
- quality assurance
- managing engagement delivery risks
- reporting
- follow up
- stakeholder management.
The course includes facilitator input, short practical discussions and several task-based exercises to encourage you to plan and deliver effective risk based internal audit engagements.
IIA CPE competency areas covered
- International Professional Practices Framework
- Audit Methodologies
- Enterprise Risk Management
- Reporting Results
Tutor Biography
John Chesshire, CFIIA, QIAL, CRMA, CIA, CISA, has over 26 years’ experience working in the internal audit, risk management, business improvement and governance fields. He is a Fellow of the Chartered Institute of Internal Auditors (CIIA) in the UK, recent Independent Internal Audit Committee Chair, a member of two other Audit Committees in the international charity and defence sectors. John was Chief Assurance Officer for the States of Guernsey until the start of 2021. He continues to be a practising internal auditor and currently works in a part-time capacity as the CAE for an international credit ratings agency. Amongst his many other roles.
He has delivered numerous well-received courses for the CIIA, as well as to many other global Institutes of Internal Auditors. His other recent clients include FTSE listed companies, multinationals, financial services, central and local government, law enforcement, charities, professional services companies, and international organisations such as NATO, the OECD, the ACCA, and UN Agencies. He is an EQA reviewer for the CIIA and has been a visiting lecturer in the Governance and Assurance Hub at Birmingham City University.
John loves internal audit, has delivered several previous seminars for IIA Norway, is an enthusiastic advocate for the internal audit profession, and he particularly enjoys working in new and emerging areas of assurance interest.
