Risk Based Auditing – Establishing a Methodology
The Institute of Internal Auditors defines risk based internal auditing (RBIA) as a methodology that links internal auditing to an organization's overall risk management framework. RBIA allows internal audit to provide assurance to the board that risk management processes are managing risks effectively, in relation to the risk appetite.
RBIA is at the cutting edge of internal audit practice. It is an area that is evolving rapidly and where there is still little consensus about the best way to implement it. Executing on true risk based internal auditing requires more than an annual risk assessment for the internal audit plan. It requires a pre-established methodology that includes defining the organization's risk appetite and risk tolerance utilizing measurements that include aspects of financial, compliance and operational metrics. In addition, internal audit must be ready to put aside their typical checklists and standard work programs. True risk based internal auditing goes far beyond setting the annual audit plan. It incorporates cascading the process through to each individual audit as well as the audit reporting process.
This course is the second of three risk based auditing courses. This course focuses on the establishment of a framework or methodology for risk based auditing and examining how to utilize risk based questions within the process steps.
Prerequisites
No Advanced Preparation or Prerequisites are needed for this course. However, it is recommended to take the other courses in the series prior to completing this one.
Learning Objective
- Identify some of the various challenges internal audit may face when attempting to execute upon risk based auditing.
- Explore alternatives to identifying risk appetite and risk tolerance to utilize within risk based auditing.
- Explore and evaluate the development and usage of a variety of risk management characteristics when identifying risk tolerance.
- Explore sample scoring techniques to apply to risk based auditing.
- Identify and learn how to conclude your assessment for risk based auditing.
Last updated/reviewed: March 27, 2024
(224) Reviews
(183 rating)Good course thank you to Ms Fountain. Cash flow info useful.
This was a very interesting and relevant course. Internal Audit funcitons often face navigating the pull from management to engage in fraud investigations and that must be balanced with other Internal Audit activities, with the support of the Audit Committee.
Lots of new information on big datas role with fraud detection.
Course was very effective, instructor was clear, engaging and gave real life examples of how to actually implement material in real life. Absolutely enjoyed the entire course!
Trainer Lynn Fountain does a good job defining the traits of an ethical leader in a corporate context.
Great information in this training. I really appreciated the examples and how Jennifer walked through each one. I also liked the jokes at the end of each section. Exam question 13 is oddly worded though. I had trouble understanding what it says.
This was an interesting introductory course into powerBI and its uses
Thanks Lynn! I've been dealing with difficult stakeholders this year and trying to get a message through felt almost impossible. This course helps by providing tactics to deal with difficult people and I will be definitely testing them out during my daily activities.
Ethical issues are sometimes downrated, what is not correct. Great presentation.
Very good teacher and very interesting content. I addressed many relevant topics and give a broad overview on fraud schemes and controls. I like that it illustrates the content with statistics.
It's hard to distill the entire history of ethical thought down into a 2 hour business course, but I give credit to the instructor for making the effort.
Great course and presentation! Instructor does an excellent job at explaining ratios and analysis so that it is easily followed.
When preparing for an Internal Control Certificate, it's essential to choose resources that align with the specific certification or credential you are pursuing and to dedicate sufficient time to study and practice. I would recommend this course.
This was a good in-depth discussion on fraud identification.
I think the instructor does a great job explaining the information and providing good examples.
The excitement of the content combined with the enthusiasm and insight of Mr. Wasny make this course, along with those he presents on AI, the most inspiring and motivational I've experienced on this platform.
Great course on ethical and regulatory considerations for remote employees. This will interest you!
The material was well presented but surprise by the level of difficulty of the questions.
good course, a lot of good information provided verbally and not in slides.
A great review of what communication really is. Highlights ideas that are not intuitively known.
Great course with good examples of important aspects of the profession and certification.
easy to follow/understand and an excellent introductory course
Exam was helpful in understanding the importance of a top-down risk assessment. Thank you.
This is an excellent course for those being introduced to the basics of accounting or someone seeking a refresher on the foundational concepts of accounting. The teacher is very effective and walks through many journal entry examples.
Great refresher and consideration of the changing risk environment.
Interesting class. The final exam comes more from the class than the handouts, would like to see all material in a hand out for reference after the class.
An answer for an exam question is wrong. Like with part 1 the material on slides does not completely cover the exam questions.
This was a great overview of the FAR section of the CPA exam, from what I can recall.
I really appreciate the CPE surrounding IT risks. Hoping to see more about OT risks in the future ... given IT/OT convergence (standards are: 62443, Purdue and cross-reference to NIST). I am an IT/OT Third Party Risk Manager, and my focus is Operations Tech (large manufacturing). Thank you!
Great course covering many important concepts and history behind evolution of current accounting standards
Good overview of 2023 fraud trends and beyond, how account takeover happens, including the detection and prevention strategies for account takeover.
Excellent course on some basics of Strategic Management. Nice intro for newcomers in the workforce who have not grasped the importance of strategic placement in the market.
A very clear explanations, covering all topics. I really love the session. Perhaps can get a more exciting slides or link share for reference. Overall, good. thank you!
Good information that should be revisited frequently.
Good refresher on basic concepts of identifying controls and documenting them in flow charts and process narratives.
This was a great course to refresh and learn new excel skills that can improve time management and workflow.
This course provides some great information. The topics covered are very helpful as well.
its a great course with full of information! i find it useful for me to detect a fraud next time
Yellow Book 2: Government Auditing Standards: Foundation Course Part 2 is good course.
Excellent! This will lead better comunication. White spaces are realy an important.
great refresher course. it really helped me understand the ethics and compliance framework at a high level.
Very useful and meaningful course. Highly recommended to be taken by all professionals.
The course is very useful for those risk management professionals who need to rethink their organizational planning efforts.
This was a great class that gave me some important tips that I hadnt previously considered. Very useful!
Good overview and introduction in the terms of fraud, comprehensive slides
This course is a good overview of professional ethics for MD CPAs
Good course. Easy to follow. Would recommend for organizations who are trying to define risk tolerance, risk appetite, and RBA.
provided good information in a platform to engage the parties taking the course. Provided helpful ideas and processes..
Good overview, would love a follow-up course that dives even deeper on deal killers.
Great! Thank you for another useful and interesting course. Awesome summary.
Great. Perfect. As usual. I really like this trainer. Clearly presented.
It was very interesting course. It made me feel how important to build confidence and trust in an organization.
Learned a lot from this course as a new audit leader. Very informative!
I enjoy this instructor. The course is informative and offers real world usefulness.
This is an excellent course and discusses that any individual in any organization would witness and should be aware of.
Great presenter!!! Flowed well, positive upbeat presentation style, and helpful and practical information.
This was a good course, i enjoyed this course. It was a good refresher.
Poor grammar and punctuation in most slides, plenty of redundancy.
Material and review/exam content was not crisp and clear. Review question & answers were not accurate. Exam questions and answers were confusing and subjective.
Ms. Fountain does a great job of explaining COSO and how it impacts Internal controls.
A good course on ITGC. It has helped me refresh and reinforce my understanding of the topic
This course was a bit difficult due to lack of previous knowledge and reading through the course materials instead of instructed lead. Overall, the course was very educational.
Test was not easy to pass, even after lecture, reading definitions and reviewing course notes.
This is an excellent course from Lynn Fountain! The real-life scenarios and current event considerations bring life to the topic.
Helpful information about automating reports in Excel. Recommend.
"How should the control environment be viewed by organizations?" <--Based on the expected answer, this question is written extremely poorly & is misleading.
Very well rounded ethics course. Would have appreciated 2.5 hours of CPE vs 2 hours of CPE since videos were 2.5 hours long.
Lynn, the generational divide is an important concept to understand when hiring. This class helps me to understand the challenges in how I must lead the different members on my Team. The biggest challenge is in group meetings and in Team building. This course is very helpful. Thank you, Larry
The course was adequate but suggest you relook at the questions. The use of not in the questions is very confusing even for the most experienced person. Also your question in the final exam on incentives is poorly worded
This is a high-level overview of how to organize data analytics efforts and sell these services to the business.
Very well structured and easy to understand. The course materials provided a great overview of the topic and very clear. The pace allowed for a proper understanding of the topic.
I dont think you needed to get political with your exam question. Especially since its opinion. It seemed a bit unethical.
A good course and easy to understand, organizations should focus on continous improvement.
Very interesting study. Clearly stated and kept my interest
Loved it! It was great to learn techniques to improve yourself.
It was a good high level summary of the financial statements
Your courses have all been so wonderful, so informational, and so thorough--in short, greatly appreciated by me! Thank you for sharing your expertise, your wealth of knowledge, your inclusion of examples! I have greatly enjoyed reading and listening to all of your lectures thus far.
This course gives some good tips on presentation preparation for those who do not normally present. I felt that the audience was geared more towards senior management than those working in the weeds. I would have liked to learn more about "How" on some of the tips. Know your audience can be one of the most infuriating steps to perform because of lack of access. Overall, a good intro course but get more perspectives before doing formal presentations.
Good review of various types of audit reports that can be issued. However, this course did not cover the dating of the report or the auditor's responsibilities for reporting of subsequent events.
Challenging and an excellent course, it expanded my knowledge.
Good webinar to gain an understanding of the topics. Well structured and easy to follow.
great course, easy to read and follow along the way the text is written
The course is too long for just 1 course, it should at least be sectioned. Audit planning itself has various sections, in this way it may be less tedious.
A very thorough course covering all important areas: skill for IA management, managing the IA function, and building effective relationships with the Audit Committee. To be successful with the Audit Committee IA should make sure that management takes appropriate action to audit findings before raising the issue with the Audit Committee.
Nothing new was really learned but it did reinforce concepts that are taken for granted too often. This was a great training for reminding me about the importance of making team members feel valued and appreciated.
very refreshing materials. well summarized and laid out effectively
This course provides a good understanding of fraudulent disbursements.
I liked the overall content of the course. It should benefit all internal auditors regardless of organizational structure.
This course should be at least 1.5 CPE Credit since it is 1.5 hour long
This was a very confusing one. I finally passed when I answered one question which seemed again what the material and I understood. It was question six. I disagree that it should be answer A. A going concern is considered when a company has issues about going a year from the opinion letter date.
I found the course very interesting. I liked how the instructor explained how fraud connects to the role of the IA.
Great addition to illumeo. Really helps keep up with the Ethics requirement in a timely manner.
Very good class, informative materials and well presented
Fraudulent expense disbursements may happens at any kind of organization. This course will provides interest and necessary knowledge about the most common fraud type, also provides the techniques on how to identify it. Good course for everyone in professional organizations.
This course was well developed and well presented. Good coverage of the subject.
Great course of audit committee effectiveness in the aftermath of 2007
Good review course. This was a solid refresher for something I have been away from for some time.
It was great to review and/or learn anew these important topics.
I am really happy taking this course, I have really learned some new lessons.
I like the fact that all the materials were relevant to the topic.
the final exam questions are not clearly addressed in the slides.
Recommend Audit Engagement Planning as an excellent course.
I enjoyed Joe Ori's summary of ASC 842. He was to the point and I really liked the financial impact slides as a result of implementing the new lease accounting rules.
This instructor courses are always very helpful and are well thought out. I always look for her courses on-line as I always learn something new and interesting from her classes.
Great Course considering the course as a foundation level. It helps establish the foundation of why ethics is important in an organization.
I liked the overall review of the different controls. I would not have mind the course moving at a quicker pace.
Sincerely one of the best training courses I've taken in a while. Great take away and presented in a way that lingers with the audience.
outdated with 2013 data - don't think FCPA enforcement has increased under Trump
good review, nice to be back to this online trainings
Impressive course and great refresher. I especially like the pdf summaries that are provided as a point of reference.
Very well presented. Easy to understand and follow.
Fraud: Focus on Internal Controls to Prevent and Detect Fraud is a good overview course. The instructor used good examples and highlighted good outside resources.
This course was a good introductory to blockchain technology.
I learn better when I can read-along with the narration script; providing that would be helpful.
This course helped me strengthen my understanding of IA fundamentals.
Approaches to Ethical Intelligence was a great, easy to follow seminar. The five principles are very useful and applicable.
This review was concise and straight to the point. Highly recommend this course.
An important aspect that companies forget to look at because cyber attacks are seldomly experienced by them. Great refresher on how to react to cyber attacks
2014 means data and SEC actions are a bit out of date
I enjoyed this course. It opened my eyes to some thing that we as an internal audit team are not doing and I will suggest this training to my supervisor and coworkers.l
Clear and easy to digest information. Helps understand how some people get stuff done and others don't. Stepp explains this by incorporating personal experiences.
The course is designed well, and provides the user helpful information to improve their workflow.
Solid overview of the terms and definitions surrounding a financial statement audit.
well thought out and acceptable for cpe review purposes
Well done, very easy to follow along and the short cuts are real world useful. I plan on using excel more and more in my professional career and this course is a great starting point for easy to follow shortcuts.
The course is great for refreshing the skills in Pivot Tables. It is very informative and detailed. The presenter discusses the topic in a step-by-step procedure making it very clear and easy to understand.
Excellent course lead by an effective instructor. Great content.
Very insightful with some very useful sources of additional information that will come in handy.
Great Course I think we need more documentation.
Very cool course! Many really useful things have been explained.
I like the examples given in this course, which are detailed, and very realistic.
The material is useful but the instructor is monotone,which makes it difficult to stay engaged.
This course was a refresher. It is very informative and covers all the key components of the Internal Audit function at a very detailed level. I think this course is crucial for people with 1-4 years of experience, but overall everyone needs to take this course.
This course provides a detailed materials on preventing and detecting fraud.
After having been away from auditing for many years, this was an excellent refresher course.
This course covers addressing risk based auditing approach for an internal audit team within an organization.
Good overview of whistle-blowing and the statistics included in the pdf are good to see.
This course provides a good overall view of what composes ethics and what influences it within an organization
I liked that there was a summary in the video of what we learned throughout the course
This course does well at explaining keys to maintaining independence and objectivity as an auditor.
GOOD OVERVIEW FOR ANY ORGANIZATION AS THEY INTRODUCE IC MEASURES
Proper Documentation Methods for Internal Audit and Internal Controls Processes is a very good course designed to emphasize the importance of documentation in the world today. It introduces different methods for properly documenting information while providing pros/cons to each.
Nicely done. Succinct and straight to the point but also very informative. Thank you.
GREAT synopsis for documenting internal controls. This course really refreshed some points that I am pursuing in my organization.
This course should be required viewing by anyone involved in risk or assurance functions!
This course is very helpfull and effective. I think it is a good start.
Pretty standard ethics training. Though she tried to reinvent how ethics are discussed, no new information was shared.
This is an interesting and complex topic. I would have liked to see a longer, more indepth session.
Having recently joined the RAAS team this was a very good opportunity to get familiar with RAAS procedures and audit phases. Really appreciated
Course provides very good information related to the difference between general controls and application controls.
Clear explanation of the structure of the template.
I believe it was a very good course and very informative. I would love to see more courses on risk management by Mr. Doug Webster
I strongly recommend this course to anyone with the hotline.
The course is excellent, it adds a different perspective in the function of the CAE as part of the company.
There is no correct answer for question #3. Can you double check this?
Great information! Easy to understand and overall meaningful content....
This course covered various leadership style, with pros and cons for adopting/applying each style. However, adding to the slides the pictures of leaders ( who may or may not have demonstrated certain leadership style) was a distraction and minimized the course effectiveness. For example, was Princess Diana an inspiration leader? Perhaps not! Was Dr. King a non-authoritarian leader? Absolutely not!!! This course is about organizational leadership. Therefore, perhaps the author should use corporate leaders (past and present) and specific corporate examples to depict each leadership type AND to make the course stronger.
There are no slides for this series that are needed for documentation purposes.
Program materials were relevant and contributed to the achievement of the learning objectives.
Lot of new information to absorb but was very informative .
This was a good overview of the internal audit function, with all relevant parties and within the department.
I love how you used very clear and specific examples! Thank you Leslie!
instructor is very monotone and hard to listen to for a prolonged period of time
Very informative and detailed. Highly recommended.
nothing to add good course on financial information that is useful in conversation
Very well explained and detailed presentation about how to implement a RBIA.
The instructor explains the concepts with relevant examples which makes it easy to understand and apply. The course is well structured and detailed to provide step by step procedure for creating RBIA approach.
very informative and easy to follow
detailed course
I really enjoyed learning about the different ways to collect, merge and validate data. I thought is was very interesting and useful to know that there is an excel add-in where you can get data from the Federal Reserve (Fred) as well as data from the U.S. Census, and Google Trends.
Short albeit good review of T&E expenses.
Some more error rectification technique may be included in this course.
Excellent course for finance professionals.
Great course! I really enjoyed it.
A very interesting topic, another one they don't teach you in school.
Course is easy to use and the instructor was very knowledgeabe. Also the material was easy to follow and kept me engaged while the instructor went through the course.
What I liked the most is how Lynn explained the practical difficulties they faced when SOX was first implemented and explaining the learning curve they went through to understand the SOX legislation better. Excellent.
Perfect certification
clear and concise.
Good overview of SEC Reporting
Engaging and knowledgeable presenter.
liked the convenience; it was good information
Nice
Great material; covered a bit fast
Good overview.
Clear and concise - great examples provided. A great course for any experienced auditor.
Good introductory course to the topic
good review material
interesting info
There were great reminders and refreshers in this course. I have taken a similar course that was an all day and I learned just as much here.
I really enjoyed course. I would like to be able to see the correct answer for exam questions wrong.
I liked that I learned something
Learning more about Risk Base Auditing. What surprised me, is how important RBA to a company. What to look for while i'm auditing.
Very practical advice for a new manager
Flow of information
Questions are vague
Common sense advice. Would prefer more business environment examples versus a lot of personal examples.
Well done. Easy to understand.
Great course!
informative
Very informative. A must have tool for a manager.
Clear, well structured course, very informative
Informative. Focused contents on RBIA methodology.
Good concept
I enjoyed the course, but the background noise was somewhat distracting. (clock chiming)
Valuable course for educating auditors and management about the value of RBIA that provides a step by step methodology which can be utilized as a starting place for organizations to begin to establish RBIA.
Good description of the audit and report
Great introduction to RBA.
Was very informative and help me being an Internal Auditor to assess and move ahead with RBA
I learned more than I thought I would.
good reminders and tips for macros
great course
Test questions were not captured in the presentation materials.
Easy to understand the course
A good overview of the characteristics that IA managers need to have to excel in the profession.
It was a very good course
Great tips!
excellent refresher
Excellent Course!!
Bullet points - not the entire conversation or presentation - Please!!!!
A common sense reminder.
Content is excellent but video is poorly shot.
Nice overview and good use of statistics.
The real life examples were good to give a background.
Ask the instructor a question about this lesson