Training Module
Training Module

Audit Programme Management

Understand audit programme governance, risk-informed audit portfolios, supplier audit integration, resourcing, and programme-level reporting

Understand

Implement

Manage

Audit

Training module overview

Many organisations can run individual audits, but struggle to steer an audit programme as a coherent system: priorities drift, supplier audits sit “outside” the programme, schedules become rigid, and results remain fragmented. The outcome is activity without reliable assurance.

This module focuses on the programme manager’s work: designing and governing an audit programme (internal and supplier) from single-entity to group-level, maintaining consistent quality, consolidating programme-level insight, and driving continual improvement. It stays explicitly at programme level: audit execution, interviewing, evidence collection, and supplier-audit fieldwork are handled in other modules.

Many organisations can run individual audits, but struggle to steer an audit programme as a coherent system: priorities drift, supplier audits sit “outside” the programme, schedules become rigid, and results remain fragmented. The outcome is activity without reliable assurance.

This module focuses on the programme manager’s work: designing and governing an audit programme (internal and supplier) from single-entity to group-level, maintaining consistent quality, consolidating programme-level insight, and driving continual improvement. It stays explicitly at programme level: audit execution, interviewing, evidence collection, and supplier-audit fieldwork are handled in other modules.

Target audience

  • Audit programme managers (single site to group-level)

  • Senior internal auditors moving into programme responsibility

  • Integrated management system owners coordinating multiple audit teams

  • Procurement / vendor assurance stakeholders who interface with supplier audit planning (programme level)

  • Second-line assurance or compliance functions coordinating audit coverage across units

  • Audit programme managers (single site to group-level)

  • Senior internal auditors moving into programme responsibility

  • Integrated management system owners coordinating multiple audit teams

  • Procurement / vendor assurance stakeholders who interface with supplier audit planning (programme level)

  • Second-line assurance or compliance functions coordinating audit coverage across units

Agenda

  1. Role and boundaries of audit programme management

  • Programme responsibility vs. individual audit responsibility

  • What this module covers (and what it intentionally does not)

  1. Programme governance and operating model

  • Roles, decision rights, escalation, and independence at programme level

  • Interfaces with system owners, procurement, and leadership routines

  1. Risk-informed audit portfolio design (multi-year and annual)

  • Using existing context, risks, and priorities as inputs to coverage decisions

  • Setting audit scope, depth, and frequency at programme level

  1. Supplier audit integration at programme level

  • Supplier segmentation for coverage decisions (criticality, dependency, impact)

  • Coordination points: access, confidentiality, contractual interfaces

  1. Scheduling and resource planning

  • Building schedules that remain workable under change

  • Assigning auditors: competence, independence, and conflicts (programme controls)

  1. Consistency and quality across audits

  • Programme standards: templates, expectations, and calibration approach

  • Competence maintenance and variability reduction (programme governance view)

  1. Programme monitoring, consolidation, and reporting

  • Tracking coverage and delivery without turning it into KPI design work

  • Consolidating themes and systemic issues for management visibility

  1. Continual improvement of the audit programme

  • Learning loops, feedback, and annual re-baselining of the programme

  • Updating governance, portfolio logic, and quality controls over time

  1. Workshop (case-based)

  • Build a 12-month internal + supplier audit programme pack from a provided case

  • Produce: governance snapshot, audit portfolio, resourcing assumptions, and a programme-level insight summary

  1. Role and boundaries of audit programme management

  • Programme responsibility vs. individual audit responsibility

  • What this module covers (and what it intentionally does not)

  1. Programme governance and operating model

  • Roles, decision rights, escalation, and independence at programme level

  • Interfaces with system owners, procurement, and leadership routines

  1. Risk-informed audit portfolio design (multi-year and annual)

  • Using existing context, risks, and priorities as inputs to coverage decisions

  • Setting audit scope, depth, and frequency at programme level

  1. Supplier audit integration at programme level

  • Supplier segmentation for coverage decisions (criticality, dependency, impact)

  • Coordination points: access, confidentiality, contractual interfaces

  1. Scheduling and resource planning

  • Building schedules that remain workable under change

  • Assigning auditors: competence, independence, and conflicts (programme controls)

  1. Consistency and quality across audits

  • Programme standards: templates, expectations, and calibration approach

  • Competence maintenance and variability reduction (programme governance view)

  1. Programme monitoring, consolidation, and reporting

  • Tracking coverage and delivery without turning it into KPI design work

  • Consolidating themes and systemic issues for management visibility

  1. Continual improvement of the audit programme

  • Learning loops, feedback, and annual re-baselining of the programme

  • Updating governance, portfolio logic, and quality controls over time

  1. Workshop (case-based)

  • Build a 12-month internal + supplier audit programme pack from a provided case

  • Produce: governance snapshot, audit portfolio, resourcing assumptions, and a programme-level insight summary

Course ID:

HAM-APM-1

Audience:

Auditor

Domain:

Agnostic

Available in:

English

Duration:

7 h

List price:

CHF 550

Excl. VAT. VAT may apply depending on customer location and status.

What you get

Learning outcomes

  • Define an audit programme charter that clarifies governance, roles, and escalation routes

  • Build a multi-year and annual audit portfolio that is risk-informed using existing organisational inputs (without teaching risk methods)

  • Integrate supplier audits into the audit programme with clear coverage logic and interfaces to procurement/contract owners

  • Create an audit schedule and resource plan that accounts for competence, independence, and change

  • Set programme-level consistency controls (templates, calibration routines, quality expectations) without teaching audit execution methods

  • Consolidate audit results into programme-level themes suitable for management visibility and management review input

  • Run a structured improvement cycle for the audit programme based on feedback, delivery data, and context changes

  • Define an audit programme charter that clarifies governance, roles, and escalation routes

  • Build a multi-year and annual audit portfolio that is risk-informed using existing organisational inputs (without teaching risk methods)

  • Integrate supplier audits into the audit programme with clear coverage logic and interfaces to procurement/contract owners

  • Create an audit schedule and resource plan that accounts for competence, independence, and change

  • Set programme-level consistency controls (templates, calibration routines, quality expectations) without teaching audit execution methods

  • Consolidate audit results into programme-level themes suitable for management visibility and management review input

  • Run a structured improvement cycle for the audit programme based on feedback, delivery data, and context changes

Learning materials

  • Slide deck

  • Participant workbook

  • Certificate of completion

  • Slide deck

  • Participant workbook

  • Certificate of completion

Templates & tools

  • Audit programme charter (roles, decision rights, escalation)

  • Multi-year audit programme plan template

  • Annual audit schedule template

  • Auditor competence & independence assignment matrix (programme-level)

  • Supplier segmentation and coverage decision guide (programme-level)

  • Programme monitoring log (coverage and delivery tracking)

  • Cross-audit theme consolidation sheet (programme-level insight)

  • Programme-level management report template

  • Lessons learned and improvement log for programme updates

  • Audit programme charter (roles, decision rights, escalation)

  • Multi-year audit programme plan template

  • Annual audit schedule template

  • Auditor competence & independence assignment matrix (programme-level)

  • Supplier segmentation and coverage decision guide (programme-level)

  • Programme monitoring log (coverage and delivery tracking)

  • Cross-audit theme consolidation sheet (programme-level insight)

  • Programme-level management report template

  • Lessons learned and improvement log for programme updates

Prerequisites

This module assumes participants can already operate comfortably in the internal audit domain and understand the difference between programme management and audit execution. In particular:

  • Solid understanding of audit principles, evidence thinking, and auditor judgement

  • Familiarity with how audit findings are formulated, reported, and followed up

  • Basic familiarity with supplier/outsourced relationships (helpful for programme-level integration)

This module assumes participants can already operate comfortably in the internal audit domain and understand the difference between programme management and audit execution. In particular:

  • Solid understanding of audit principles, evidence thinking, and auditor judgement

  • Familiarity with how audit findings are formulated, reported, and followed up

  • Basic familiarity with supplier/outsourced relationships (helpful for programme-level integration)

Strongly recommended preparatory modules

Audit Reporting & Follow-up: Findings, Reporting, and Verification of Closure

Understand how to write evidence-based findings, structure audit reports, and follow up agreed actions to verified closure.

7 h

Audit Reporting & Follow-up: Findings, Reporting, and Verification of Closure

Understand how to write evidence-based findings, structure audit reports, and follow up agreed actions to verified closure.

7 h

Audit Reporting & Follow-up: Findings, Reporting, and Verification of Closure

Understand how to write evidence-based findings, structure audit reports, and follow up agreed actions to verified closure.

7 h

Conducting Confident, Objective, and Insightful Audit Conversations

Interview planning, questioning, and conversation control for reliable audit evidence

7 h

Conducting Confident, Objective, and Insightful Audit Conversations

Interview planning, questioning, and conversation control for reliable audit evidence

7 h

Conducting Confident, Objective, and Insightful Audit Conversations

Interview planning, questioning, and conversation control for reliable audit evidence

7 h

Helpful preparatory modules

The modules below prepare for an optimal learning experience – but are not strictly necessary for participants to follow.

Audit Foundations: Principles, Evidence & Judgement

Core audit mindset, evidence logic, materiality-based focus, and audit test plan design.

7 h

Audit Foundations: Principles, Evidence & Judgement

Core audit mindset, evidence logic, materiality-based focus, and audit test plan design.

7 h

Audit Foundations: Principles, Evidence & Judgement

Core audit mindset, evidence logic, materiality-based focus, and audit test plan design.

7 h

Office scene with people standing, walking and sitting

Ready to achieve mastery?

Bring ISO requirements into everyday practice to reduce avoidable issues and strengthen the trust of your customers and stakeholders.

Office scene with people standing, walking and sitting

Ready to achieve mastery?

Bring ISO requirements into everyday practice to reduce avoidable issues and strengthen the trust of your customers and stakeholders.

Office scene with people standing, walking and sitting

Ready to achieve mastery?

Bring ISO requirements into everyday practice to reduce avoidable issues and strengthen the trust of your customers and stakeholders.