Developing a Risk Based Auditing Plan

Intermediate to Advanced
Video preview
Select Date
DownloadDownload Brochure

Course Overview

Without any doubt, one of the crucial responsibilities of the Chief Audit Executive (CAE) is to make sure that the audit plan is adding value to the organisation. Nevertheless, organisation stakeholders (including the management and the audit committee) are sometime frustrated with the output of the plan, being developed in a silo, and missing a strategical approach.
The CAE should use a a systematic approach to develop and maintain a risk-based internal audit plan. The internal audit activity should use best practices to understand the organization, identify, assess and prioritize risks, engage stakeholders, estimate resources and communicate the plan.
During this engaging course, the participants will be able to put into practice the concepts at each step of the process, discuss best practices and leave with a comprehensive methodology model to apply in their organisation.

Key Takeaways

A better knowledge of the risk based internal audit planning.
A thorough understanding of the standards and conformance requirements.
A list of key best practices to put in place to insure flawless implementation.
An opportunity to discuss and exchange with other CAE on the matter.
A comprehensive toolkit to implement the program.

National Association of State Boards of Accountancy
Brand Logo
LEORON Professional Development Institute DMCC is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website:

Course Outline

Section 1
Overview of Risk Based Internal Audit Planning
→ The audit planning process – an overview → Which IIA standards are important to follow and understand
→ Other key concepts to take into consideration
Section 2
Understanding the Organisation
→ The impact of the strategies and objectives on the audit planning
→ Identifying key documents and stakeholders
→ The focus on risk assessment
Exercise: Defining your starting point
Section 3
Internal Audit Risk Assessment
→ Different approaches regarding risk assessment
→ Document, assess and measure the risks
→ Validate the assessment to insure buy-in from stakeholders
Section 4
Getting the Stakeholder’s Input
→ What about the second line of defense?
→ Assurance Vs consulting focus – how to attack the risks
→ Prioritisation and managing the expectations
Section 5
Estimating Resources
→ Assess the skills needed → Should you consider a hybrid approach?
→ Other variables to consider
Exercise: In-house or outsourced engagements?
Section 6
Drafting the plan
→ Formatting the plan – different approaches
→ Proof of concept: are you aiming for what you are supposed to?
→ Budget and considerations for small audit shops
Section 7
Finalizing the Plan
→ Obtain feedback and buy-in
Section 8
Communicating the Plan
→ Presentation to the Audit Committee
→ Presentation to Senior Management

Who Should Attend?

This highly practical and interactive course has been specifically designed for
This training course is appropriate for senior auditors and audit executives seeking professional development to understand, enhance or implement a strong risk based internal audit planning in their organisation.


What language will the course be taught in and what level of English do I need to take part in an LEORON training program?
Most of our public courses are delivered in English language. You need to be proficient in English to be able to fully participate in the workshop and network with other delegates. For in-house courses we have the capability to train in Arabic, Dutch, German and Portuguese.
Are LEORON Public courses certified by an official body/organization?
LEORON Institute partners with 20+ international bodies and associations.We also award continuing professional development credits (CPE/PDUs) for:1. NASBA (National Association of State Boards of Accountancy) 2. Project Management Institute PDUs 3. CISI credits 4. GARP credits 5. HRCI recertification credits 6. SHRM recertification credits
What is the deadline for registering to a public course?
The deadline to register for a public course is 14 days before the course starts. Kindly note that occasionally we do accept late registrations as well, but this needs to be confirmed with the project manager of the training program or with our registration desk that can be reached at +1071 4 1075 5711 or [email protected].
What does the course fee cover?
The course fee covers a premium training experience in a 5-star hotel, learning materials, lunches & refreshments, and for some courses, the certification fee and membership with the accrediting bodies.
Does LEORON give discounts?
Yes, we can provide discounts for group bookings. If you would like to discuss a discount on a corporate level, we will be happy to talk to you.


  • Review:
    IAMM Internal Audit Maturity Model
    In recognition of their dedication and contribution supporting IKEA Saudi Arabia in arranging training programs during 2017 & 2018, looking forward for more development and exciting effort this year. On behalf of IKEA Saudi Arabia, THANK YOU!
    Dalal Kutbi
    Country Learning & Development Manager at IKEA Saudi Arabia
  • Review:
    Certified Professional in Quality and Patient Safety
    Dating back to 2014, Mobily’s “LEORON” experience has grown from a single collaboration to a long-term partnership. We consider ‘’LEORON” Institute as a strategic partner, whose contribution has been nothing but premium in equipping our staff with field-based knowledge and information. Past three years have resulted with an expanded collaboration with superior customer service and support. Best Regards,
    Turki S. Alsahaan
    Dir L&D, Talent Management at Mobily, Etihad Etisalat Company
  • Review:
    Certified Professional in Quality and Patient Safety
    Since the partnership was signed between BAE Systems Saudi Development & Training and LEORON in 2017, we have been working together to offer the Saudi market a complete portfolio of training solutions benefiting from the wide and extensive experience of both parties. Recognizing the great success of this partnership, we are looking for further collaborations in the future that will position both companies as one of the leading training providers in Saudi Arabia. We thank the LEORON team for their full cooperation and continuing support, and look forward to further success together in the years to come.
    Emad Alrajih
    VP, Business Winning at BAE Systems Saudi Development & Training
  • Review:
    Certified Professional in Quality and Patient Safety
    We have been working with LEORON for the past two years and will be working with them again this upcoming year. The programs they delivered were fruitful and exciting and our organization has received positive feedback from the participants. What our organization aims to do is to provide at no cost training for all the private sector employees so that they may benefit from our offered programs in Innovation and Professional development. Leoron has helped us achieve this goal. We look forward to continuing this service and wish them the best of luck. Regards,
    Nasser M. Al-Subaie
    Sr. Program Officer, Enterprise Learning & Human Development at Kuwait Foundation for the Advancemen