This session provides the definition of internal auditing and reviews the standards under the Institute of Internal Auditing (IIA). Specific roles and responsibilities will be discussed, as well as the appropriate 
reporting structure. 

• Definition
• Standards - IIA
• Reporting structure
• Roles and responsibilities
• Tools

In this session, you'll examine the many roles of internal auditors. We'll emphasize how internal audit must remain independent.

• Reporting structure
• Independence
• Advisory services
• Fraud

This session provides an overview of the types of internal controls, the control framework, risk vocabulary/concepts and introduces risk assessment techniques.

• Types of controls
• Control framework
• Risk vocabulary and concepts
• Risk assessment techniques

In this session, you'll walk through the many components of an internal audit plan engagement. Steps to be covered include planning, testing, work paper completion and reporting.

• Communications
• Planning
• Testing/sampling
• Documentation/work papers
• Reporting

You'll start with an overview of credit unions and how they're different from other financial institutions. 
We'll discuss the regulatory environment, structure, trade associations and credit union operations.

• What is a credit union
• How credit unions differ from other financial institutions
• Regulatory oversight: NCUA, CFPB
• Credit union operations

This session will provide an overview of the internal auditor’s role in information security to collaborate 
with appropriate departments or with a third-party to determine the type and scope of risk assessments. 
These assessments help identify information security risks, vulnerabilities, and weaknesses to then 
provide recommendations for improvement to ensure the confidentiality, integrity and availability of 
information throughout the credit union. 

• IT risk assessments
• IT control testing within business process audits
• Access management 
• Physical security of data storage
• Audit response plans

We'll take you through the risk assessment process and how this information can be used to develop a 
risk-based internal audit plan.

• Risk categories
• Risk measurements
• Identifying high risk areas/entities
• Building an audit plan

This session covers the written communications to be prepared by internal auditors, as well as other 
types of communications auditors need to be familiar with. We will outline the who, what, when, and 
where of the audit report. In addition, we will discuss audit finding tracking, remediation actions, first 
day letters and reports to the Supervisory Committee.

• Report ratings
• Findings/exceptions/comments – tracking and remediation of findings
• Who, what, when, where and how of audit reports
• Other types of audit communications

This session covers key regulatory issues that auditors must be aware of in the credit union industry. 
We will also discuss the incorporation of compliance into your audit programs.

• Key regulations
• Audit programs that incorporate compliance

This session wraps up the remaining areas that internal auditors need to be familiar with when defining 
the audit universe and conducting an annual audit schedule.

• Payroll/HR
• Branch operations
• Wire transfers/ACH
• ERM

Learn about the types of permissible loans for credit unions. Included in this session will be audit 
program steps to perform for auditing loans, as well as documentation commonly used in the credit 
union industry.

• Consumer
• Commercial
• Credit card
• Direct vs. indirect

We will discuss the various auditable entities related to the accounting department. Learn how to audit 
the quarterly call report. Understand how auditing investments from an internal perspective is different 
from the external audit role while gaining an understanding about the basic financial statements and 
key ratios every auditor should be familiar with.

• 5300 Call Report
• Auditing investments
• Financial statements
• Key ratios

Understand the major types of fraud in the financial services industry, as well as the audit 
methodologies that assist in fraud detection. We will discuss the techniques to use when conducting an 
actual fraud investigation, as well as reporting responsibilities.

• Fraud types/categories
• Fraud detection
• Investigative techniques
• Auditor responsibility