Certified Risk-Based Internal Auditor (C-RBIA)
A specialised professional certification that trains learners to perform internal audits using a risk-based approach. The programme equips participants with the skills to link audit priorities to organisational risks, evaluate control effectiveness, enhance governance, and support organisational improvement.
Learners gain competency in audit planning, risk assessment, control evaluation, audit fieldwork, reporting, and follow-ups aligned with international standards such as the Institute of Internal Auditors (IIA) and ISO 31000 risk management guidelines.
Module 1: Foundations of Risk-Based Internal Auditing (RBIA)
Introduces internal audit principles, differences between traditional vs. risk-based auditing, the role of RBIA in governance, and IIA standards guiding professional practice.
Module 2: Risk Assessment, Audit Universe & Prioritisation Techniques
Covers organisational risk assessment, developing the audit universe, risk registers, prioritising high-risk areas, and preparing risk-based annual audit plans.
Module 3: Internal Control Frameworks, Assurance & Control Testing
Explores internal control principles, COSO framework, control design, control effectiveness testing, and documenting control evaluations.
Module 4: Audit Planning, Engagement Scoping & Work Programme Design
Teaches how to scope engagements, define objectives, develop audit criteria, prepare audit programmes, and align work performed with identified risks.
Module 5: Fieldwork Execution, Evidence Gathering & Audit Techniques
Examines interviewing, sampling, analytical procedures, walkthroughs, document review, data testing, and evidence substantiation to support audit conclusions.
Module 6: Audit Reporting, Communication & Recommendation Development
Covers report structure, drafting clear findings, root-cause analysis, risk rating of issues, developing actionable recommendations, and communicating results to management.
Module 7: Audit Follow-Up, Monitoring & Continuous Improvement
Focuses on validating management actions, monitoring issue closure, dashboards, audit quality assurance, and strengthening the internal audit function.
Module 8: Integrating RBIA with Governance, ERM & Case Studies
Explores how RBIA connects with ERM frameworks, governance processes, compliance activities, and includes real-world case studies from diverse sectors.
Principles and standards of risk-based internal auditing
Conducting organisational risk assessments and defining audit priorities
Applying the COSO control framework and evaluating controls
Designing audit plans, scopes, and work programmes
Collecting and validating audit evidence effectively
Preparing professional audit reports and recommendations
Monitoring audit actions and improving audit quality
Integrating RBIA with ERM and corporate governance
Internal auditors and audit supervisors
Risk management and compliance officers
Internal control specialists
Financial auditors transitioning into RBIA
Public-sector and private-sector audit staff
Students and professionals pursuing auditing and governance careers
Start your journey to expertise today
Sign up to our newsletter