Certificate in Internal Controls for Governance Excellence
- Map an organisation's control environment and governance structure to the COSO components and principles.
- Build a risk and control matrix for a key process linking risks, control objectives and controls.
- Distinguish preventive, detective, manual and automated controls and select suitable ones for identified risks.
- Design tests of control design and operating effectiveness with appropriate sample sizes and evidence.
- Evaluate control deficiencies by severity and recommend proportionate remediation.
- Prepare an internal control report for an audit committee or board.
- Governance and Internal Control
- Corporate governance roles and responsibilities
- The IIA Three Lines Model
- Regulatory expectations in Gulf markets
- The COSO Framework
- Five components and seventeen principles
- Control environment and tone at the top
- Risk assessment and fraud risk
- Designing Control Activities
- Entity-level and process-level controls
- Segregation of duties and authorisation matrices
- IT general and application controls
- Documenting Controls
- Process narratives and flowcharts
- Risk and control matrices
- Policies and delegation of authority
- Testing and Monitoring
- Testing design and operating effectiveness
- Sampling and evidence standards
- Continuous monitoring and control self-assessment
- Deficiencies and Reporting
- Classifying deficiencies by severity
- Remediation planning and tracking
- Reporting to audit committees and boards
الحصول على الكتيب
للحصول على كتيب بكامل محتويات الدورة برجاء ملء النموذج التالي ببياناتك الصحيحة

Program Professional Framework
Certificate in Internal Controls for Governance Excellence
Program Overview
Boards, regulators and audit committees in the Gulf expect management to demonstrate that internal controls are designed well and operate effectively. This programme applies the COSO Internal Control Integrated Framework with its five components and seventeen principles: control environment, risk assessment, control activities, information and communication, and monitoring. It covers the IIA Three Lines Model, entity-level and process controls, IT general controls, risk and control matrices, testing methods, deficiency evaluation and reporting to governance bodies.
Learning Outcomes
- ✓Map an organisation's control environment and governance structure to the COSO components and principles.
- ✓Build a risk and control matrix for a key process linking risks, control objectives and controls.
- ✓Distinguish preventive, detective, manual and automated controls and select suitable ones for identified risks.
- ✓Design tests of control design and operating effectiveness with appropriate sample sizes and evidence.
- ✓Evaluate control deficiencies by severity and recommend proportionate remediation.
- ✓Prepare an internal control report for an audit committee or board.
Target Audience
- Internal control and compliance officers
- Internal auditors and risk managers
- Finance managers and financial controllers
- Governance and audit committee secretariat staff
Detailed Program Modules
01Governance and Internal Control
- Corporate governance roles and responsibilities
- The IIA Three Lines Model
- Regulatory expectations in Gulf markets
02The COSO Framework
- Five components and seventeen principles
- Control environment and tone at the top
- Risk assessment and fraud risk
03Designing Control Activities
- Entity-level and process-level controls
- Segregation of duties and authorisation matrices
- IT general and application controls
04Documenting Controls
- Process narratives and flowcharts
- Risk and control matrices
- Policies and delegation of authority
05Testing and Monitoring
- Testing design and operating effectiveness
- Sampling and evidence standards
- Continuous monitoring and control self-assessment
06Deficiencies and Reporting
- Classifying deficiencies by severity
- Remediation planning and tracking
- Reporting to audit committees and boards
Training Methodology
Applied Project & Assessment
Applied Project
Participants document and assess the controls of one key process, such as procurement to payment: process flow, risk and control matrix, test plan with results, deficiency evaluation and a short report for an audit committee.
Assessment
Short diagnostic at the start, practical tasks linked to each learning outcome, and evaluation of the applied project against published criteria.


