Information Systems Auditing and Cyber Risk Awareness Course

Learn risk-based IS auditing, IT controls, application and cloud assurance, cyber-risk assessment, resilience and audit reporting.

Auditing, Governance, and Risk Compliance Training Courses Confirmed

Training Locations

This Information Systems Auditing and Cyber Risk Awareness Course is available in multiple cities. Please select your preferred location from the list below

Durrës

Albania

Tirana

Albania

Andorra la Vella

Andorra

Escaldes-Engordany

Andorra

Innsbruck

Austria

Salzburg

Austria

Vienna

Austria

Gomel

Belarus

Minsk

Belarus

Antwerp

Belgium

Brussels

Belgium

Banja Luka

Bosnia and Herzegovina

Sarajevo

Bosnia and Herzegovina

Plovdiv

Bulgaria

Sofia

Bulgaria

Dubrovnik

Croatia

Split

Croatia

Zagreb

Croatia

Limassol

Cyprus

Nicosia

Cyprus

Brno

Czech Republic

Prague

Czech Republic

Aarhus

Denmark

Copenhagen

Denmark

Tallinn

Estonia

Tartu

Estonia

Helsinki

Finland

Tampere

Finland

Lyon

France

Marseille

France

Nice

France

Paris

France

Berlin

Germany

Frankfurt

Germany

Hamburg

Germany

Munich

Germany

Athens

Greece

Thessaloniki

Greece

Budapest

Hungary

Debrecen

Hungary

Akureyri

Iceland

Reykjavík

Iceland

Cork

Ireland

Dublin

Ireland

Florence

Italy

Milan

Italy

Naples

Italy

Rome

Italy

Pristina

Kosovo

Prizren

Kosovo

Liepāja

Latvia

Riga

Latvia

Schaan

Liechtenstein

Vaduz

Liechtenstein

Kaunas

Lithuania

Vilnius

Lithuania

Esch-sur-Alzette

Luxembourg

Luxembourg City

Luxembourg

Kuala Lumpur

Malaysia

St. Julian's

Malta

Valletta

Malta

Bălți

Moldova

Chișinău

Moldova

La Condamine

Monaco

Monte Carlo

Monaco

Budva

Montenegro

Podgorica

Montenegro

Amsterdam

Netherlands

Rotterdam

Netherlands

The Hague

Netherlands

Ohrid

North Macedonia

Skopje

North Macedonia

Bergen

Norway

Oslo

Norway

Gdańsk

Poland

Kraków

Poland

Warsaw

Poland

Faro

Portugal

Lisbon

Portugal

Porto

Portugal

Bucharest

Romania

Cluj-Napoca

Romania

City of San Marino

San Marino

Serravalle

San Marino

Belgrade

Serbia

Novi Sad

Serbia

Singapore

Bratislava

Slovakia

Košice

Slovakia

Bled

Slovenia

Ljubljana

Slovenia

Barcelona

Spain

Madrid

Spain

Valencia

Spain

Gothenburg

Sweden

Stockholm

Sweden

Bern

Switzerland

Geneva

Switzerland

Zurich

Switzerland

Istanbul

Turkey

Kyiv

Ukraine

Lviv

Ukraine

Odesa

Ukraine

Dubai

United Arab Emirates

Birmingham

United Kingdom

Edinburgh

United Kingdom

London

United Kingdom

Manchester

United Kingdom

Rome (Vatican-adjacent)

Vatican City

Training Outlines

Introduction

Technology now supports critical processes, financial information and customer services, making information systems assurance a core organisational requirement. Auditors must understand technology risk well enough to test governance and controls, challenge evidence and communicate exposure without relying on technical jargon.

This five-day course equips internal auditors, risk professionals and control managers to plan and conduct risk-based information systems audits. Participants will evaluate general IT controls, applications, data, cloud services and cyber resilience using recognised governance and security concepts. Practical exercises build confidence in scoping, testing, documenting and reporting technology risk.

Objectives

By the end of this course, participants will be able to:

Frame information systems audit objectives.
Assess IT governance and accountability.
Evaluate general IT controls.
Review application and data controls.
Assess cloud and third-party exposure.
Interpret key cyber-risk scenarios.
Test resilience and incident controls.
Report technology risk clearly.

Course Content

Day 1: Information Systems Audit Context

Technology risk and business objectives
IS audit roles and assurance boundaries
COBIT and NIST concepts
IT governance and accountability
Risk-based scoping and materiality
IS audit-planning workshop

Day 2: General IT Controls

Identity and access management
Privileged access controls
Change and release management
IT operations and job processing
Backup and recovery controls
ITGC testing laboratory

Day 3: Applications, Data and Cloud

Application input and processing controls
Interface and output controls
Data integrity and governance
Cloud shared-responsibility models
Technology supplier assurance
Application-control review

Day 4: Cyber Risk and Resilience

Threats, vulnerabilities and attack paths
Security governance and risk treatment
Network and endpoint control awareness
Security monitoring and incident response
Continuity and cyber recovery
Cyber-risk scenario exercise

Day 5: Audit Execution and Reporting

Evidence collection and sampling
Configuration and log evidence
Data analytics in IS audits
Control findings and root causes
Technology-risk communication
Capstone IS audit case

Training Schedule

Below is the table of cities along with the respective dates for the upcoming training sessions of Information Systems Auditing and Cyber Risk Awareness Course. Please review the schedule to find the most convenient option for you. You can also use the below search bar to type the city name and filter the results.