Focus on Internal Audit Leadership

Take your internal audit capability further.

Most organisations run internal audits. Far fewer get anything useful out of them. The difference usually comes down to one person: someone who plans the programme around real risk, develops the auditors doing the work, and writes findings that management acts on instead of files. That person could be you.

Focus on Internal Audit Leadership is the course for auditors ready to take responsibility for how internal auditing works across their organisation. It covers the two halves of that job: building and maintaining the programme, and delivering the audits inside it to a standard people take seriously.

This is what comes after you know how to audit. How you set programme objectives that connect to organisational priorities. How you decide audit frequency based on risk rather than habit. How you develop and evaluate the auditors around you. How you keep findings evidence-based when a process owner asks you to soften the wording.

The course is open to everyone. There are no formal prerequisites, though we strongly recommend completing Management Systems Auditor (ISO 19011:2026) or equivalent auditing training first, because this course builds on audit methodology rather than teaching it from the beginning. The content also transfers to other structured audit contexts, including but not limited to the NDIS Practice Standards, NHVAS, and legislative compliance auditing.

On successful completion of both modules you will be issued with a Certificate of Completion for Focus on Internal Audit Leadership.

Who this course is for

Internal audit leadership rarely comes with a job title. More often it arrives quietly: you are the person who has done the most audits, so now you are the one scheduling them, training the new auditors, and explaining the findings to management. This course is for anyone in that position, whether it is formally your role or something you have grown into.

• Internal auditors moving into audit coordination or audit programme management
• Experienced internal auditors who want a programme built on risk rather than a recurring schedule
• Quality, safety, environment, and information security managers responsible for internal audit activities
• Anyone who onboards, mentors, or evaluates other internal auditors
• Audit programme managers working to improve audit consistency and management engagement
• Consultants who establish or strengthen internal audit programmes for client organisations
• Auditors who have completed Management Systems Auditor and want to apply it in a first-party context

The gap between an internal audit programme that works and one that exists on paper is mostly practical. It comes down to whether the programme is planned around risk, whether auditors know what is expected of them, and whether findings are written clearly enough for someone to act on. This course closes that gap.

• Establish audit programme objectives that connect to organisational priorities, risks, management concerns, customer feedback, and previous audit results
• Schedule and track internal audits on a risk basis, taking account of process importance, incidents, complaints, and organisational change
• Identify and manage programme risks and opportunities, including auditor independence and objectivity when people audit their own colleagues
• Monitor programme performance, review outcomes, and turn what you find into programme improvements
• Define internal auditor competence requirements, record who currently meets them, and put practical development plans in place
• Onboard, observe, coach, and give feedback to internal auditors using structured tools rather than informal conversation
• Prepare and conduct internal audits where the audit may be short, informal, familiar to participants, or run by a sole auditor
• Write internal audit reports that are evidence-based, clear enough to act on, and neither vague nor overstated
• Manage the situations internal auditors actually face: unclear notes, disputed findings, missing evidence, and pressure to soften wording
• Raise, track, and follow up corrective actions so audit findings lead to change rather than a closed record

What you'll learn

Two modules, eight sections. The first builds the programme and the people. The second delivers the audits.

Making internal audit worth the time it takes

Internal audits are meant to do more than confirm conformance. You will start with what internal audit is actually for inside an organisation: assurance, conformance, improvement, risk visibility, and support for management decision-making. You will also work through why audits stop delivering that, from checklist-driven auditing and weak planning through to findings that go nowhere, and who is accountable for what across top management, programme managers, auditors, and process owners.

Building a programme that runs on risk, not habit

An audit schedule is not an audit programme. This section covers how to establish programme objectives, schedule and track audits against risk and process importance, identify programme risks and opportunities, manage auditor independence and objectivity, then monitor, review, and improve the programme over time. You will do it using the Internal Audit Programme Resource, worksheet by worksheet, so the programme you build is a working one.

Developing the auditors around you

Competent auditors are made, not found. You will look at how to define the competence requirements that matter in your organisation, record which auditors currently meet them, and track capability as development happens. Then the leadership side: giving auditors clear direction and expectations, keeping methods consistent between auditors, addressing concerns early, recognising good work, and dealing with the recurring problems of auditors left in isolation and management that shows little interest.

Delivering internal audits people take seriously

The second module is the delivery cycle end to end. Preparing an audit properly, which means confirming objectives, scope, criteria, method, access, and communication rather than sending a calendar invite. Conducting the audit when it is short, informal, or run solo. Writing reports where the wording is evidence-based, because copy that is too vague cannot be acted on and copy that is too dramatic gets argued with. Then corrective actions and follow-up, so findings close properly.

For the full module-by-module breakdown, see the Modules tab above.

Practical internal audit tools included

This course includes a full set of internal audit tools, plus the audit workflow templates applied specifically to first-party auditing. You build your practical activities around them, so you finish with programme and development documentation you have already used rather than a folder of blank templates.