Corporate training in the Gulf, London, Europe & Asia since 2015
+44 7462 102778[email protected]WhatsAppالعربية
Enquire now
CoursesSubjectsVenuesIn-House TrainingWhy ARUKContactالعربيةEnquire now
IT-015

IT Audit and Compliance

Intensive 5-day course · English, Arabic & European languages

Auditors and IT, risk and compliance professionals examine IT audit in a 5 day online course. Delegates assess systems, controls and security measures, then relate audit work to GDPR, SOX, ISO and PCI DSS. Planning, testing and reporting activities support the work on risk-based audits, recommendations, follow-up and continuing compliance in changing IT environments.

Classroom

Public courses in our cities

  • 19–23 Oct 2026Frankfurt£2,600 + VAT
  • 19–23 Oct 2026Muscat£3,080 + VAT
  • 2–6 Nov 2026Barcelona£3,080 + VAT
  • 16–20 Nov 2026Manama£3,080 + VAT
  • 7–11 Dec 2026Dubai£4,200 + VAT
  • 21–25 Dec 2026Frankfurt£2,600 + VAT
Show 24 more dates
  • 4–8 Jan 2027Jeddah£4,200 + VAT
  • 18–22 Jan 2027Barcelona£3,080 + VAT
  • 1–5 Feb 2027Singapore£4,200 + VAT
  • 15–19 Feb 2027Paris£3,600 + VAT
  • 1–5 Mar 2027Muscat£3,080 + VAT
  • 15–19 Mar 2027Frankfurt£2,600 + VAT
  • 5–9 Apr 2027Barcelona£3,080 + VAT
  • 19–23 Apr 2027Casablanca£2,280 + VAT
  • 3–7 May 2027Manama£3,080 + VAT
  • 17–21 May 2027Frankfurt£2,600 + VAT
  • 7–11 Jun 2027Amman£3,400 + VAT
  • 21–25 Jun 2027Barcelona£3,080 + VAT
  • 5–9 Jul 2027Madrid£3,400 + VAT
  • 19–23 Jul 2027Paris£3,600 + VAT
  • 2–6 Aug 2027Berlin£3,400 + VAT
  • 16–20 Aug 2027Frankfurt£2,600 + VAT
  • 6–10 Sep 2027Barcelona£3,080 + VAT
  • 20–24 Sep 2027Milan£3,400 + VAT
  • 4–8 Oct 2027Malaga£3,080 + VAT
  • 18–22 Oct 2027Frankfurt£2,600 + VAT
  • 1–5 Nov 2027Sarajevo£3,400 + VAT
  • 15–19 Nov 2027Barcelona£3,080 + VAT
  • 6–10 Dec 2027Dubai£4,200 + VAT
  • 20–24 Dec 2027Paris£3,600 + VAT

Group discount: 2 delegates 20% · 3 delegates 35% · 5 or more delegates 50%

Can't make these dates? We can run this course for your team on dates that suit you. Ask for custom dates · In-house options

Online (live)

With a trainer, on dates to suit your team

This course can be taught live online by a trainer, in English, Arabic or any European language, for one person or a whole team.

£1,850 + VAT

Group discount: 2 delegates 20% · 3 delegates 35% · 5 or more delegates 50%

Special requests

Tailor this course

Pick what you want changed and we’ll come back with a proposal and price.

Special request

IT Audit and Compliance

What would you like to change? (pick any)
or

Course overview

Technology practices have legal and regulatory implications. IT audits contribute to governance and compliance through the identification of important risks and evaluation of systems, internal controls and security protocols. Planning, execution and reporting provide the process structure, with an organisational risk case leading into the preparation of an audit plan.

Frameworks guide the control assessment. COBIT, ISO 27001 and NIST accompany Control Self-Assessment (CSA) and continuous auditing methods, while GDPR, SOX and PCI DSS provide regulatory reference points for privacy, financial integrity and payment data security. Delegates examine infrastructure, operations and IT General Controls (ITGC), map requirements to systems and assess cybersecurity practices and vulnerabilities. Findings and recommendations then feed into reports, stakeholder communication, monitoring and follow-up, ending with a report and action-plan case, assessment and group presentation.

Course objectives

By the end of the course, delegates will be able to:

  1. Explain the contribution of IT audit to governance and compliance frameworks
  2. Identify and evaluate IT risks, controls and compliance needs
  3. Align audit work with regulatory standards including GDPR, SOX, ISO and PCI DSS
  4. Assess security measures and controls for data protection
  5. Conduct IT audits using suitable practices and tools
  6. Prepare audit reports and recommendations for improving systems compliance
  7. Support continuous compliance and risk management as IT environments change

Who should attend

This course suits:

  • IT auditors
  • Internal and external auditors
  • IT managers and professionals
  • Risk and compliance officers
  • Cybersecurity professionals
  • Governance, Risk and Compliance (GRC) professionals
  • Financial auditors involved in audits of IT systems

Training methodology

  • Online presentations support the topics using adult learning techniques.
  • Trainer-led interactive discussions accompany the presentations.

Daily agenda

  1. Day 1

    IT audit purpose, governance and risks

    • Definitions and objectives of IT audit
    • Core concepts in IT governance and compliance
    • Regulatory frameworks including GDPR, SOX and PCI DSS
    • Understanding IT risk for risk-based auditing
    • Planning, executing and reporting IT audits
    • Case study identifying important organisational IT risks
  2. Day 2

    Control frameworks and audit methods

    • IT controls under COBIT, ISO 27001 and NIST
    • Aligning IT audits with international standards
    • Control Self-Assessment (CSA) and continuous auditing methods
    • Audits of IT infrastructure and operations
    • Governance structures and their contribution to compliance
    • Workshop to design an IT audit plan
  3. Day 3

    Regulations and systems testing

    • Regulatory requirements and their effects on IT
    • GDPR audits of privacy and data protection
    • SOX audits supporting financial integrity
    • PCI DSS and payment data security
    • ITGC audits of access, change management and operations
    • Testing and validating system compliance
    • Practical mapping of regulatory requirements to IT systems
  4. Day 4

    Security controls and data protection

    • Auditing security controls for risk management and mitigation
    • Assessing cybersecurity practices and frameworks
    • Compliance with protection laws and security standards
    • Finding and addressing IT system vulnerabilities
    • Practical audit of IT security measures
    • Case study of a security audit for regulatory compliance
  5. Day 5

    Reports, recommendations and continuing review

    • Developing findings and recommendations
    • Good practice in audit reports and stakeholder communication
    • Monitoring and following up audit recommendations
    • Maintaining compliance as IT environments change
    • Case preparation of an IT audit report and action plan
    • Final assessment and presentation by groups

Certificate

Every delegate who completes the course receives an ARUK Training Certificate of Attendance.

Frequently asked questions

How do I register?

Choose a date and city in the schedule and press Register, or send us an enquiry. Our team confirms your place and sends an invoice.

Are fees shown with VAT?

Fees are shown per delegate and exclude VAT, which is added to the invoice where applicable.

Can this course be delivered for our team only?

Yes. Any ARUK course can be delivered in-house at your premises, in a meeting room we book for you, or 1-to-1.

Is this course available online?

Yes. We run it live online with a trainer, on dates that suit your team, for £1,850 + VAT per delegate.

Is there a group discount?

Yes. 20% for 2 delegates, 35% for 3 delegates and 50% for 5 or more delegates on the same course.

Can the course be delivered in Arabic or another language?

Yes. Our courses can be delivered in English, Arabic or any European language, by a trainer who teaches in that language. Mention your preferred language when you register or enquire.

What certificate will I receive?

An ARUK Training Certificate of Attendance.

Related courses

Register

IT Audit and Compliance

Key booking terms (read before you register)
  • The full fee is paid in advance, before the course starts.
  • Cancel in writing 30 or more days before the start date (45 for in-house) for a refund. Later than that, the full fee is payable.
  • No refund for non-attendance or partial attendance.
  • Places are for the named delegate only; another person cannot attend instead.
  • Moving to another date or city is only possible if ARUK agrees in writing.
  • Travel, accommodation and visas are your responsibility. A refused visa does not change the cancellation terms.

booking terms and conditions

Get a quotation

IT Audit and Compliance