The course covers advanced risk topics such as governance, strategic, fraud, and IT risks, along with auditing the risk management process. Through interactive group discussions and reflection of current practices, participants will be encouraged to integrate the new learning objectives provided by the course in their professional activities.

At the end of this course students should be able to:

1. Outline through knowledge of IIA Global Internal Audit Standards and Topical Requirements, risk management concepts risk assessment activities and common risk frameworks (COSO, ISO 31000) necessary for risk assessment.
2. Explain the importance of risk governance, enterprise risk management (ERM), Three Lines Model and internal audit’s role in assessing strategic risk management and governance.
3. Discuss strategies for assessing emerging risks, high-risk areas, complex business processes such as third-party risk management, AI, and business continuity; common risk areas, including data governance and data management risks, fraud risk, IT governance, and cybersecurity.
4. Assess the coordination, reliance and reliability of internal and external assurance providers through assurance maps and other techniques.
5. Apply risk assessment methodologies to create an audit universe, identify and prioritize risk, then assess and analyse risks; use agile traditional risk-based auditing methodologies to assess and report on risk management.