Internal audit training: tools and report writing
New internal auditors need practical skills from the first engagement: planning, testing, working papers and reports that audit committees act on. This course teaches those skills under the Global Internal Audit Standards, using Kenyan examples.
Choose how your team takes the course
On demand suits people joining through the year and annual refreshers. Live sessions use your own policies, products and cases.
KES 12,000per learner
- Start as soon as payment is confirmed
- Certificate of completion
- Completion report for your records
KES 12,000per learner per hour
- From 1 hour; you choose the length
- On Zoom or Teams
- Tailored to your operations
KES 12,000per learner per hour, minimum 5-hour session
- At your premises
- Combine with other courses to fill the session
- Case exercises in groups
From the 5th hour, each extra hour is half price. Live and in-person prices are calculated on a minimum of 5 learners; smaller groups are welcome and are priced as 5. For more than 75 learners or more than 16 hours we prepare a custom proposal. All prices include taxes; travel outside Nairobi is charged at cost.
What the standards expect
Audit committees expect a competent internal audit function that follows the standards. These are the requirements the course is built around.
| Rule or standard | What it requires | Applies to |
|---|---|---|
| Global Internal Audit Standards (in force 9 January 2025) | The baseline for planning, performing and communicating engagements. | All internal audit functions |
| IIA Topical Requirements | Mandatory requirements when the topic is audited: cybersecurity, third-party, organisational behaviour and organisational resilience. | Internal audit functions following the IIA standards |
| Sector regulators (CBK, SASRA, IRA) | An independent, competent internal audit function reporting to the audit committee. | Regulated institutions |
Recent developments and emerging issues
The course is updated as rules change. These are the developments it currently covers. Last reviewed: October 2026.
Global Internal Audit Standards
The baseline for planning, performing and reporting engagements.
IIA Topical Requirements
Cybersecurity from February 2026, Third-Party from September 2026, Organisational Behaviour from December 2026 and Organisational Resilience from April 2027.
Communicating results
New IIA guidance asks auditors to report themes and root causes, not only lists of findings.
AI in audit
COSO guidance maps generative AI risks to the internal control framework. Only 11% of chief audit executives say their coverage of digital disruption is fully adequate (IIA Risk in Focus 2026/27).
CBK draft Risk Management Guidelines
Bank internal audit would cover cybersecurity, third parties, operational resilience, ESG and AI-driven fraud.
What your team will learn
Each section ends with a short knowledge check. Learners who finish every section receive a certificate of completion.
Risk-based planning
Building an engagement plan around the risks that matter.
Walkthroughs and process mapping
Understanding the process and its controls.
Testing and sampling
Choosing tests and sample sizes you can defend.
Working papers
Documenting evidence a reviewer can follow.
Data analysis in Excel
Practical analytics for common audit tests.
Writing findings
Condition, criteria, cause, effect and recommendation.
The audit report
Reports that audit committees read and act on.
Following up actions
Tracking management actions to closure.
Records for your training file
The evidence pack records who was trained, on what and when, for your audit committee and regulators.
- 1Certificates of completionOne per learner who completes the course, with a unique number, the course, date and hours.
- 2Completion or attendance reportWho completed or attended, when, and in which edition.
- 3Knowledge check resultsScores from the checks at the end of each section.
- 4Course outlineThe content and the rules it addresses.
FNJ's internal audit and risk team
The same team provides outsourced and co-sourced internal audit to Kenyan organisations.
CIA
Certified Internal Auditors.
Built around your organisation
Before each live or in-person session we send a short questionnaire, so the cases come from your own policies, operations and findings.
Internal audit report template
A report template with a transmittal letter, findings table and grading criteria.
Download the templateOften taken together
GRC Team Development combines this course with related courses at 10% off when booked live or in person.
GRC Team Development
Internal audit, risk management, compliance and board paper writing.
On demand KES 48,000 per learner · 10% off live or in person
Compliance for compliance teams
Registers, monitoring and regulatory change.
Course detailsPrice your training
Internal audit training: tools and report writing is already ticked. Add other courses if you need them, then submit the form to see the payment details.
Questions about internal audit training: tools and report writing
Is this a CIA preparation course?
No. It builds the practical skills new auditors need on engagements and complements professional qualifications such as the CIA.
What are the 5 C's of audit findings?
Criteria (what should be), condition (what is), cause (why it happened), consequence or effect (why it matters) and corrective action (the recommendation).
How do I write an internal audit report?
Lead with the overall conclusion and the themes, rate each finding, explain condition, criteria, cause and effect, and agree actions with owners and dates. Our guide to writing internal audit reports covers the format.
Who should attend?
New and junior internal auditors, ideally as a team, and audit staff moving in from other functions.
What does it cost?
KES 12,000 per learner on demand, or KES 12,000 per learner per hour live or in person, inclusive of taxes, with half price from the 5th hour of a course.
Build your audit team's skills
Tell us how many auditors need training and by when. We reply within one working day.