How to Assess Risks and Evaluate Controls

Course Description

One of the primary objectives of every auditor is to assess organizational risks and evaluate the effectiveness of the controls established by management to mitigate those risks. The Institute of Internal Auditors has set forth the standards for auditors to use in accomplishing that objective

Every organization is set up to accomplish its primary business objective. Whether it is a “for-profit” organization or a “not-for-profit” organization, there is always a primary business objective.  And whenever there is an objective, there is always the risk that the objective will not be achieved.  

Management has the responsibility to assess risks and establish controls to give reasonable assurance that business objectives are achieved. Internal Audit has the responsibility to evaluate those controls to determine if they are adequate and effective.  

For the auditor, the process starts with the development of a risk-based annual audit plan to identify the various risk areas.  The risk areas are prioritized and subject to audit based on the high-level risk assessment. Each area is further subject to a more detailed review of their particular risks and controls.

There are certain Institute of Internal Auditors (IIA) standards that are required in the evaluation and communication of the risk and control assessment. There are also other resources available to auditors to assist them in their evaluation of risks and controls.

Major topics covered in this audit CPE webinar:

• Risk and control related definitions
• Relationship between risks and controls
• Control loop
• Broad risk categories
• Types of controls
• Control limitations
• Management responsibility as it relates to risks and controls
• Internal audit as it relates to risks and controls
• Related IIA Standards
• Exercises to strengthen knowledge
• Case Study

Learning Objectives

• To discuss the components to develop a risk-based annual audit plan.
• To determine the preliminary survey process.
• To determine the audit objectives based on the most significant risks.
• To evaluate how to determine audit scope.
• To review how to conduct the fieldwork.
• To discuss the best practices to communicate the results to management.

Recommended For

• This CPE course is recommended for CPAs, CMAs, Internal as well as External Auditors, Chief Audit Executives, Internal Control Specialists, Risk Managers, Controllers, CEOs, Managers, Compliance Managers, and Business Owners desiring to learn about the basics for assessing risks and evaluating controls.
• This IIA Approved CPE course is recommended for CIA, CRMA, and all the titles governed by IIA.
  

Who Should Attend?

Webinar Qualifies For

• 1.5 CPE Credit for Qualification in Internal Audit Leadership (QIAL)
• 1.5 CPE Credit for Internal Audit Practitioner (IAP)
• 1.5 CPD Credit for Chartered Professional Accountant (CPA Canada)
• 1 CPE Credit of Auditing for Certified Public Accountants (CPA-US)
• 1.5 CPE Credit for Certified Management Accountants (CMA)
• 1.5 CPE Credit for Certified Internal Auditors (CIA)
• 1.5 CPE Credit for Certification in Risk Management Assurance (CRMA)
• 1.5 CPE Credit for Certified Information Systems Auditor (CISA)
• 1 CE Credit for Certified Fiduciary & Investment Risk Specialist (CFIRS)
• 1 CE Credit for Certified Wealth Strategist (CWS)
• 1.5 General Credit for Accountant/Bookeeper
• 1.5 CPD Credit for CA - ICAEW
• 1.5 CPD Credit for Chartered Certified Accountants (ACCA)
• 1.5 CPD Credit for Chartered Accountants - Ireland (CAI)
• 1.5 CPD Credit for Chartered Accountants - Scotland
• 1.5 CPD Credit for CPA - Ireland

FAQs content