What's inside
What the IT audit course pack includes
27-slide course deck
The full audit lifecycle, then access control: identity, passwords under NIST SP 800-63B-4, privileged and non-human accounts, remote access, logging and cloud.
Participant workbook
Notes pages, exercise instructions, a finding template, a 10-question knowledge check and a glossary.
Excel exercises
Realistic synthetic data: a leaver test, an access review completeness check and a password policy gap assessment.
Sample SOC 2 Type 2 report
An 8-page fictional report to practise on: period gaps, scope, exceptions, carved-out providers and customer controls.
Current standards
Mapped to the IIA Global Internal Audit Standards, ISACA's ITAF 5th edition, SSAE 18 and current NIST guidance.
Trainer extras
Editable PowerPoint with speaker notes, answer key, model finding and quiz answers (Trainer Licence).
Sample slide · Passwords
| Rule | 2016 practice | NIST SP 800-63B-4 |
|---|---|---|
| Minimum length | 6 to 8 characters | 15 if used alone; 8 within MFA |
| Complexity | Mix of letters and numbers | Composition rules not permitted |
| Expiry | Every 30–60 days | Only on evidence of compromise |
| Blocklist | Not covered | Required: breached and common values |
Pricing
IT audit training prices
Learner Pack
£29 one-off
For self-study and early-career auditors.
- Course deck (PDF, 27 slides)
- Participant workbook
- Excel exercise file
- Sample SOC 2 Type 2 report
- Single-user licence
Trainer Licence
£149 one-off
For audit managers, trainers and consultancies.
- Everything in the Learner Pack
- Editable PowerPoint with full speaker notes
- Exercise answer key, model finding and quiz answers
- Licence to deliver the course to your own teams or clients
Secure checkout by Stripe. Files are emailed to you within one working day of purchase. Discount codes accepted at checkout.
Who it's for
Built for practitioners
New IT and internal auditors who need the fundamentals done properly. Audit managers onboarding a team. GRC consultants who want a credible, current training module to deliver to clients.
Who made it
Lattice Baseline is an IT audit and technology risk consultancy. The course is written by CISA-qualified practitioners with 9+ years in IT audit and assurance across financial services, manufacturing, education and the public sector.
Questions
Before you buy
Is the data real?
No. Every scenario, company and report in the pack is fictional and clearly labelled, so it is safe to use in any training room.
What file formats do I get?
PDF for the deck, workbook and SOC 2 sample, and an Excel workbook for the exercises. The Trainer Licence adds an editable PowerPoint and an Excel answer key.
Can I deliver the course to clients?
Yes, with the Trainer Licence. You can run sessions for your own teams or clients. You may not resell or redistribute the files themselves.
How do I get the files?
After checkout they are emailed to the address you enter, within one working day. Contact hello@latticebaseline.com with any questions.