Corporate training in the Gulf, London, Europe & Asia since 2015
+44 7462 102778[email protected]WhatsAppالعربية
Enquire now
CoursesSubjectsVenuesIn-House TrainingWhy ARUKContactالعربيةEnquire now
IT-011

Cybersecurity Audit Essentials

Intensive 5-day course · English, Arabic & European languages

Internal auditors, risk managers and systems engineers study structured inspection methodologies across this five-day technical course. Delegates evaluate ISO 27001, NIST and COBIT 5 standards, audit network architectures including IPv4 and IPv6 protocols, run vulnerability questionnaires in AuditXP using the BowTie method, and draft actionable remediation reports for executive leadership.

Classroom

Public courses in our cities

  • 19–23 Oct 2026Dubai£4,200 + VAT
  • 9–13 Nov 2026Barcelona£3,080 + VAT
  • 16–20 Nov 2026Paris£3,600 + VAT
  • 23–27 Nov 2026Riyadh£4,200 + VAT
  • 7–11 Dec 2026Frankfurt£2,600 + VAT
  • 14–18 Dec 2026Barcelona£3,080 + VAT
Show 37 more dates
  • 21–25 Dec 2026Doha£4,200 + VAT
  • 4–8 Jan 2027Barcelona£3,080 + VAT
  • 11–15 Jan 2027Istanbul£2,280 + VAT
  • 18–22 Jan 2027Casablanca£2,280 + VAT
  • 1–5 Feb 2027Paris£3,600 + VAT
  • 8–12 Feb 2027Vienna£3,400 + VAT
  • 15–19 Feb 2027Manama£3,080 + VAT
  • 1–5 Mar 2027Barcelona£3,080 + VAT
  • 8–12 Mar 2027Frankfurt£2,600 + VAT
  • 15–19 Mar 2027Amman£3,400 + VAT
  • 12–16 Apr 2027Barcelona£3,080 + VAT
  • 19–23 Apr 2027Paris£3,600 + VAT
  • 26–30 Apr 2027Madrid£3,400 + VAT
  • 3–7 May 2027Frankfurt£2,600 + VAT
  • 10–14 May 2027Barcelona£3,080 + VAT
  • 17–21 May 2027Berlin£3,400 + VAT
  • 7–11 Jun 2027Barcelona£3,080 + VAT
  • 14–18 Jun 2027Istanbul£2,280 + VAT
  • 21–25 Jun 2027Milan£3,400 + VAT
  • 5–9 Jul 2027Paris£3,600 + VAT
  • 12–16 Jul 2027Vienna£3,400 + VAT
  • 19–23 Jul 2027Malaga£3,080 + VAT
  • 2–6 Aug 2027Barcelona£3,080 + VAT
  • 9–13 Aug 2027Frankfurt£2,600 + VAT
  • 16–20 Aug 2027Sarajevo£3,400 + VAT
  • 13–17 Sep 2027Barcelona£3,080 + VAT
  • 20–24 Sep 2027Paris£3,600 + VAT
  • 27 Sep – 1 Oct 2027Dubai£4,200 + VAT
  • 4–8 Oct 2027Frankfurt£2,600 + VAT
  • 11–15 Oct 2027Barcelona£3,080 + VAT
  • 18–22 Oct 2027Riyadh£4,200 + VAT
  • 1–5 Nov 2027Barcelona£3,080 + VAT
  • 8–12 Nov 2027Istanbul£2,280 + VAT
  • 15–19 Nov 2027Doha£4,200 + VAT
  • 6–10 Dec 2027Paris£3,600 + VAT
  • 13–17 Dec 2027Vienna£3,400 + VAT
  • 20–24 Dec 2027Geneva£4,200 + VAT

Group discount: 2 delegates 20% · 3 delegates 35% · 5 or more delegates 50%

Can't make these dates? We can run this course for your team on dates that suit you. Ask for custom dates · In-house options

Online (live)

With a trainer, on dates to suit your team

This course can be taught live online by a trainer, in English, Arabic or any European language, for one person or a whole team.

£1,850 + VAT

Group discount: 2 delegates 20% · 3 delegates 35% · 5 or more delegates 50%

Special requests

Tailor this course

Pick what you want changed and we’ll come back with a proposal and price.

Special request

Cybersecurity Audit Essentials

What would you like to change? (pick any)
or

Course overview

High-profile security failures like the Facebook and Cambridge Analytica breach demonstrate the catastrophic operational and reputational damage caused by compromised data. Technical controls require rigorous, systematic verification rather than casual trust. Cybersecurity audits provide executive boards with verifiable proof that technical defences, communication architectures and administrative procedures function as intended.

Instruction covers the technical and procedural components of an information security review. Delegates assess network design, intrusion detection systems and communication protocols including IPv4 and IPv6 configurations. They explore international governance frameworks such as ISO 27001, NIST and COBIT 5, learning how to convert standard clauses into operational audit plans.

Delegates work with specialised auditing tools, applying AuditXP and the BowTie risk method to test controls, investigate incident recovery capabilities, and compile defensible audit findings that guide remediation.

Course objectives

By the end of the course, delegates will be able to:

  1. Conduct structured risk analyses of IT infrastructure and potential data breach vectors
  2. Apply control requirements from ISO 27001 and COBIT 5 frameworks during system audits
  3. Evaluate information security management practices across enterprise network environments
  4. Assess crisis management procedures and disaster recovery readiness against audit benchmarks

Who should attend

This course suits:

  • Risk managers and compliance officers
  • Internal and external IT auditors
  • Application and product designers
  • Marketing and market research specialists
  • Statistical analysts and data research personnel
  • Application development leads and database researchers
  • Technology and telecommunications engineers

Daily agenda

  1. Day 1

    Evolution of IT Security and Risk Domains

    • Classifying physical and electronic security risks
    • Networking infrastructures and communication technologies
    • Secure computer systems architecture and design
    • Legal obligations and regulatory compliance considerations
    • Threat intelligence and recent attack trend analysis
    • Review session and breach case study analysis
  2. Day 2

    Data Breach Identification and Crisis Management

    • IPv6 and IPv4 configuration risks and protocol security
    • Deploying Domain Name System Security Extensions (DNSSEC)
    • Formulating crisis management and incident response plans
    • Digital forensics and electronic investigation techniques
    • Aligning breach responses with business continuity plans
    • Practical review session and breach scenario case study
  3. Day 3

    Scoping Cybersecurity Audits with Industry Frameworks

    • Structure of the NIST Cybersecurity Framework
    • Statutory requirements for cyber incident response policies
    • Principles and control objectives of COBIT 5
    • Building an audit programme based on the NIST Cybersecurity Framework
    • Designing an audit programme using the COBIT 5 framework
    • Practical review session and scoping case study
  4. Day 4

    Executing Technical Audits and Tool Deployment

    • Applying the BowTie method to analyse cybersecurity risks
    • Conducting cybersecurity audit procedures using AuditXP software
    • Configuring NIST Cybersecurity Framework questionnaires in AuditXP
    • Building COBIT 5 audit evaluation questionnaires within AuditXP
    • Executing a cybersecurity audit on a target sample entity
    • Practical review session and software findings case study
  5. Day 5

    Cybersecurity Audit Workshop and Remediation

    • Assembling the audit team, charter and framework structure
    • Executing the on-site and technical security audit
    • Reviewing and validating raw audit findings
    • Drafting formal audit recommendations and remediation priorities
    • Presenting findings and discussing implementation roadmaps
    • Establishing continuous monitoring and post-audit upgrade cycles

Certificate

Every delegate who completes the course receives an ARUK Training Certificate of Attendance.

Frequently asked questions

How do I register?

Choose a date and city in the schedule and press Register, or send us an enquiry. Our team confirms your place and sends an invoice.

Are fees shown with VAT?

Fees are shown per delegate and exclude VAT, which is added to the invoice where applicable.

Can this course be delivered for our team only?

Yes. Any ARUK course can be delivered in-house at your premises, in a meeting room we book for you, or 1-to-1.

Is this course available online?

Yes. We run it live online with a trainer, on dates that suit your team, for £1,850 + VAT per delegate.

Is there a group discount?

Yes. 20% for 2 delegates, 35% for 3 delegates and 50% for 5 or more delegates on the same course.

Can the course be delivered in Arabic or another language?

Yes. Our courses can be delivered in English, Arabic or any European language, by a trainer who teaches in that language. Mention your preferred language when you register or enquire.

What certificate will I receive?

An ARUK Training Certificate of Attendance.

Related courses

Register

Cybersecurity Audit Essentials

Key booking terms (read before you register)
  • The full fee is paid in advance, before the course starts.
  • Cancel in writing 30 or more days before the start date (45 for in-house) for a refund. Later than that, the full fee is payable.
  • No refund for non-attendance or partial attendance.
  • Places are for the named delegate only; another person cannot attend instead.
  • Moving to another date or city is only possible if ARUK agrees in writing.
  • Travel, accommodation and visas are your responsibility. A refused visa does not change the cancellation terms.

booking terms and conditions

Get a quotation

Cybersecurity Audit Essentials