Rebuilding Thornbury Assurance Group's IT audit criteria: three high findings were withdrawn because their criteria could not be sourced or cited superseded policy, costing 60 audit days; a vague patching criterion is rewritten into a sourced, testable one with its pass condition stated, checked as authoritative, testable and current; and the criteria defensibility gauge rises from 21% of 1,412 criteria to 94.5% of 742, past the Audit Committee's 90% target, traced to the group framework, DORA and public frameworks.

CY-PRO-041Pro Level · Information Systems Audit

Audit Criteria and Framework Mapping

A forty-hour Pro-level IS audit methodology simulation run on a live audit criteria investment board, where you are Head of IT Audit at a composite insurer; management successfully disputes three High findings because their criteria were home-grown, untraceable or out of date, and the external quality assessor rates the function's criteria ‘partially conforms’ — and you measure the truth, set a standard, map, rewrite, calibrate, version, build the library and its roles, price the options at the margin and defend the investment to the Audit Committee.

40 hours12 chapters60 lessons433 activities12 labs

What you'll learn

Measure the defensibility of audit criteria honestly and set a quality standard — authoritative, relevant, testable and current — with sign-off rules and agreement at planning.
Anchor criteria in policy and regulation, map them to frameworks with precise relationships, and write criteria with thresholds and pass statements fixed before testing, including for cloud, data, AI and third parties.
Make consistency a measured property through canonical criteria, calibration, variants and criterion-first review, and keep criteria current through versioning and a change procedure.
Build the library, roles and skills that sustain it, measure quality without rounding, price the investment at the margin with its residuals, and win an audit committee resolution everyone can be held to.

Price:৳15,000