Partner
Exam Preparation

CIA® 3
Certified Internal Auditor
Part 3

Rating:
4.9
English
Advanced
Video preview
FACE 2 FACE
ON SITE TRAINING
LIVE VIRTUAL
TRAINING
COACHING
& MENTORING
SELF-PACED
TRAINING
Select Date
Download Brochure

Course Overview

This course is designed to equip internal auditors with the advanced knowledge and skills required to manage and optimize internal audit functions in alignment with organizational strategies and stakeholder expectations. Participants will develop a comprehensive understanding of internal audit operations, planning, quality assurance, and engagement monitoring, ensuring effective governance, risk m

Qassim A.
Senior Specialist - Program Enrollment
[email protected]
Let’s talk on WhatsApp

Key Takeaways

1
Develop strategies to plan, organize, and monitor internal audit operations effectively.
2
Align internal audit strategies with stakeholder expectations and organizational goals.
3
Optimize resource management within the internal audit function.
4
Implement a comprehensive quality assurance and improvement program.
5
Effectively communicate audit findings and recommendations to stakeholders.

The Institute of Internal Auditors
Brand Logo
Established in 1941, The Institute of Internal Auditors (IIA) is an international professional association with global headquarters in Altamonte Springs, Florida, USA. The IIA is the internal audit profession’s global voice, recognized authority, acknowledged leader, chief advocate, and principal educator. Members work in internal auditing, risk management, governance, internal control, information technology audit, education, and security.

Course Outline

Part 1: Internal Audit Operations(25%)
Planning, organizing, directing, and monitoring internal audit operations
  • Methods for managing external providers of internal audit services
  • Methods for monitoring internal audit operations
  • Methods for balancing assurance and advisory engagements
  • The conditions that warrant the review and possible revision of internal audit methodologies
Managing financial, human, and IT resources
  • Key steps and considerations of the budgeting process
  • The steps and considerations involved in recruiting resources
  • Roles and responsibilities of various internal audit team members
  • Strategies to train, develop, and retain internal auditors
  • Internal audit function’s performance management techniques
  • Key considerations for technological resources to perform engagements
  • Behavioral and management techniques that would enhance the internal audit function, including job design, rewards, work schedules, mentoring, coaching, and constructive feedback
Aligning internal audit strategy with stakeholder expectations
  • How internal audit strategy supports the organization’s business strategy and risk management practices
  • The purpose of the internal audit function’s mission and vision statements
  • How internal audit resource planning is aligned with the internal audit strategy
  • The conditions that warrant the review and revision of internal audit strategy
Building relationships and communicating with senior management and the board
  • The importance of formal and informal communication with stakeholders
  • Protocols for communicating the audit plan and any subsequent changes and how it links to the organization’s overall strategy
  • The protocol for communicating independence concerns and significant risk exposures
  • The chief audit executive's responsibility to report timely the overall effectiveness of the organization's risk management and control processes and to identify themes based on multiple engagements
  • The chief audit executive's responsibility for communicating quality assessment results, performance metrics, and any necessary remediation plans
Part 2: Internal Audit Plan (15%)
Identifying sources of potential engagements
  • The process for defining the audit universe
  • Key components of the audit universe
  • Applicability of Topical Requirements
  • The process for considering board and management requests
  • The process for identifying applicable laws and regulatory mandates
  • The process for identifying relevant market and industry trends, organizational changes, emerging issues, and emerging technologies such as the internet of things, artificial intelligence, blockchain, digital currency and assets, and robotic process automation
  • Audit cycle requirements reasons
Developing a risk-based audit plan
  • Risk assessment methodology and risk prioritization
  • The process for maintaining the audit plan’s alignment with the organization's strategy, the internal audit strategy, and stakeholder expectations
  • Circumstances that may trigger the need to make timely updates to maintain a dynamic audit plan
Coordination with other assurance providers
  • Internal and external assurance providers
  • Examples of, and methods for, coordinating assurance coverage
  • Criteria for evaluating assurance providers to determine the ability to rely on their work
Part 3: Quality of the Internal Audit Function (15%)
Elements of the quality assurance and improvement program
  • Key components of quality assurance
  • Applicability of Topical Requirements
  • Purpose of a quality assurance and improvement program
  • The chief audit executive’s responsibility for communicating to the board the results of the quality assurance and improvement program
  • Comparison of the elements of internal and external assessments
  • Acceptable qualifications of quality assessors
  • Key components of ongoing monitoring and periodic self-assessments
Addressing nonconformance with IIA standards
  • The information that must be communicated, such as the circumstances, actions taken, impact, and rationale for nonconformance
  • Key steps for communicating nonconformance to senior management and the board
Establishing key performance indicators for audit functions
  • The objectives of key performance indicators
  • Key considerations when establishing performance indicators and the need to establish the target
  • The merit of both qualitative and quantitative performance indicators
  • The internal audit function’s performance measures, including financial, operational, quality, productivity, efficiency, and effectiveness
Part 4: Engagement Results and Monitoring (45%)
Effective communication of engagement results
  • Attributes of accurate, objective, clear, concise, constructive, complete, and timely reporting
  • Application of these attributes in the communication of engagement results
  • Effective communication methodologies
  • Key components of audit reports, including objectives, scope, conclusions, recommendations, and action plans
  • When it is acceptable to include “conducted in accordance with the Global Internal Audit Standards” in the final communication of engagement results
  • When it is necessary to document scope limitation
Developing recommendations and action plans
  • Protocol for internal auditors when there are disagreements with management about engagement findings or action plans
  • Purpose of recommendations and action plans, including cost-benefit considerations
  • Action plan to adequately addresses the root cause of a finding
Engagement closing and reporting processes
  • The purpose and parties involved in the closing communication (exit conference)
  • Chief audit executive’s responsibility for distributing the final communication and reporting to stakeholders
  • Various purposes of communicating with different stakeholders, such as management of the activity under review, senior management, the board, the risk management function, external auditors, regulators, and the general public
  • The protocol for reporting on a finding that management has already resolved
  • Chief audit executive’s responsibility and protocol for correcting significant errors and omissions in the final communication
Assessing Residual Risk and Communicating Risk Acceptance
  • Methodologies to assess the existing controls for design adequacy and effectiveness and determine the level of residual risk
  • Purpose of aggregating and prioritizing findings
  • The purpose of using a rating scale to reflect the overall assessment of controls for the engagement
  • The process for communicating risk acceptance when management has accepted a level of risk that may be unacceptable to the organization
  • The method for determining whether a risk is unacceptable to the organization
  • The parties involved in communicating risk acceptance
  • Proper sequence of steps for communicating risk acceptance
Monitoring and confirming management action plans
  • Follow-up and escalation procedures for unresolved issues

Who Should Attend?

This highly practical and interactive course is tailored for professionals who aspire to achieve the Certified Internal Auditor (CIA) designation and advance their careers in internal audit. It is designed for:

Chief Audit Executives

Audit Managers

Internal Audit Staff

Risk Management Professionals

Governance and Compliance Officers

Finance Professionals

FAQ

What language will the course be taught in and what level of English do I need to take part in a LEORON training program?
Most LEORON courses are delivered in English. However, there are some courses offered in Arabic, mainly online. For our in-house courses, sessions can be curated and delivered in any language upon request. In general, the best way to confirm language availability is to check with our Enrollment Managers for the most up-to-date information. Simply click on “Let’s talk on WhatsApp” to chat with us directly.
What formats are the courses offered in?
LEORON delivers training in various formats including face-to-face, live virtual sessions, self-paced learning, in-house delivery as well as online courses.
Are LEORON Public courses certified by an official body/organization?
Yes, most LEORON public courses are accredited by internationally recognized bodies such as CIPD, ATD, PMI, EdEx, and many others—depending on the course.
Who accredits LEORON’s training programs?
LEORON partners with over 20 international bodies such as PMI, CIPD, ATD, EdEx, NASBA, CISI, GARP, HRCI, SHRM, ACCA, ASQ, IIA, ILM, IAC, and others
Are CPD points or PDUs provided?
Yes, learners can earn CPD credits and professional development units (PDUs) including NASBA CPEs, PMI PDUs, CISI, GARP, HRCI, SHRM, and more.
How can I register for a course?
You can register through our website by filling in the inquiry form, or by speaking directly with one of our consultants via WhatsApp or email. Once we confirm your interest, we’ll guide you through the steps.
When is the registration deadline for public courses?
Registration typically closes 14 days before the course start date, with occasional late registrations accepted upon confirmation
What is included in the course fee?
The fee generally covers 5-star venue facilities, training materials, certified instruction, lunches and refreshments, plus certification and membership where applicabl0065
Are there group rates or discounts?
Yes, group bookings and corporate-level discounts are available. Learners are encouraged to reach out to discuss specific arrangements
What support is available with registration?
Enrollment Managers and a Registration Desk assist with the entire process, including deadlines, travel logistics, and course customization. As well as any other special requests you might have. Simply to go your preferred course and click on “Let’s chat on WhatsApp” to do so.
Can I request a bespoke course at my location or within my organization?
Yes, in-house training is fully customizable in terms of curriculum, language, delivery, and timing. You can suggest dates and locations. Simply to go your preferred course and click on “Let’s chat on WhatsApp” in order to address any questions or concerns in this regards.
What is the refund or cancellation policy?
Refund and cancellation policies vary depending on the course type and location. Generally, cancellations made at least 14 days before the course start date may be eligible for a full or partial refund, while cancellations made closer to the course date may incur a fee. For exact terms, please consult your Enrollment Manager or refer to the course confirmation email.
Can I register multiple employees from my company?
Yes. We support group registrations and offer corporate packages for organizations enrolling multiple participants. Our team can help coordinate the logistics for group bookings.
Who should attend these courses?
LEORON caters to a variety of professionals: from those seeking leadership development to project managers, HR specialists, finance professionals, cybersecurity, procurement, Ai enthusiasts and many others.
Do I need prior experience or academic qualifications?
Not always. Many specialized paths, like cybersecurity, accept learners without prior experience. However, some courses (e.g., PMI PDU-based ones) may have recommended prerequisites. Its always better to chat with one of our Enrollment Managers to discuss more. Simply to go your preferred course and click on “Let’s chat on WhatsApp” to do so.
Will I receive a certificate after completing the course?
Yes. Upon full attendance and successful completion, you will receive a certificate of participation or accreditation, depending on the course.
Are meals and refreshments included in face-to-face courses?
Yes. For in-person courses, lunch and coffee breaks are provided daily at the venue.
Can LEORON deliver a course in-house at our organization?
Absolutely. All programs can be delivered privately at your company or virtually for your team, customized to match your internal goals and structure.

Reviews

  • Review:
    IAMM Internal Audit Maturity Model
    In recognition of their dedication and contribution supporting IKEA Saudi Arabia in arranging training programs during 2017 & 2018, looking forward for more development and exciting effort this year. On behalf of IKEA Saudi Arabia, THANK YOU!
    Dalal Kutbi
    Country Learning & Development Manager at IKEA Saudi Arabia
  • Review:
    Certified Professional in Quality and Patient Safety
    Dating back to 2014, Mobily’s “LEORON” experience has grown from a single collaboration to a long-term partnership. We consider ‘’LEORON” Institute as a strategic partner, whose contribution has been nothing but premium in equipping our staff with field-based knowledge and information. Past three years have resulted with an expanded collaboration with superior customer service and support. Best Regards,
    Turki S. Alsahaan
    Dir L&D, Talent Management at Mobily, Etihad Etisalat Company
  • Review:
    Certified Professional in Quality and Patient Safety
    Since the partnership was signed between BAE Systems Saudi Development & Training and LEORON in 2017, we have been working together to offer the Saudi market a complete portfolio of training solutions benefiting from the wide and extensive experience of both parties. Recognizing the great success of this partnership, we are looking for further collaborations in the future that will position both companies as one of the leading training providers in Saudi Arabia. We thank the LEORON team for their full cooperation and continuing support, and look forward to further success together in the years to come.
    Emad Alrajih
    VP, Business Winning at BAE Systems Saudi Development & Training
  • Review:
    Certified Professional in Quality and Patient Safety
    We have been working with LEORON for the past two years and will be working with them again this upcoming year. The programs they delivered were fruitful and exciting and our organization has received positive feedback from the participants. What our organization aims to do is to provide at no cost training for all the private sector employees so that they may benefit from our offered programs in Innovation and Professional development. LEORON has helped us achieve this goal. We look forward to continuing this service and wish them the best of luck. Regards,
    Nasser M. Al-Subaie
    Sr. Program Officer, Enterprise Learning & Human Development at Kuwait Foundation for the Advancemen