
Intermediate IT Audit School: Risk Assessment, Planning and Security Resources
Build risk-based audit plans and evaluate controls across modern IT environments
Created by Wes Bryan, Sophie Goodwin, Rob Clark
Strengthen your IT audit skills by learning how to assess risks, plan audits, and evaluate controls across today's technology environments. You'll work with recognized frameworks and real-world scenarios to build confidence in identifying threats and recommending improvements.
ACI | 240 min
What You Will Learn
You'll start by exploring key risk and control frameworks, then move into practical examples that connect risk assessment to audit planning. Through case-based exercises, you'll practice evaluating controls and presenting your findings to both technical and business audiences.
Key Features
- Build risk-based audit plans using frameworks like NIST, COBIT, and ISO 27001
- Assess controls for logical access, databases, cloud, IoT, and change management
- Communicate findings and recommendations clearly to technical and executive teams
Target Audience
This course is ideal for intermediate IT auditors, internal auditors, and security professionals who already understand basic audit concepts. If you're looking to deepen your ability to assess technology risks, develop audit plans, and communicate results, you'll find practical tools and guidance here.





