What you will be able to do
Learning outcomes
- Explain why role design, not the request ticket, is the real provisioning control
- Identify segregation of duties conflicts and judge whether mitigating controls are adequate
- Tell a meaningful approval from a paper one, across ERP, SaaS, cloud and database access
- Build a complete population from the system itself and test it with the right sample
- Test automated provisioning, privileged and emergency access, and non-human identities
Part 1: Designing access
Roles are the control, not the ticket · Combinations that should not sit with one person · Preventing, finding and living with conflicts
Part 2: Provisioning in practice
A paper approval versus a real one · Where provisioning actually happens · Movers are where access quietly piles up · Granting power for as short a time as possible · Service accounts, API keys and app consents
Part 3: Testing provisioning
Start from the system, not the ticket queue · Testing access provisioning · When a machine grants access, test the machine · Six ways provisioning tests go wrong
21-slide course deck
Every slide has full speaker notes, a worked audit finding, a knowledge check and current sources.
Participant workbook
Notes pages, a finding template, a 10-question knowledge check and a glossary.
Excel exercises
Trace 30 role assignments from the system to approved requests. Find users with conflicting duties and check for mitigation. All data is fictional.
Pricing
Choose your pack
Learner Pack
£29 one-off
For self-study and auditors building their skills.
- Course deck (PDF, 21 slides)
- Participant workbook
- Excel exercise file
- Single-user licence
Trainer Licence
£149 one-off
For audit managers, trainers and consultancies.
- Everything in the Learner Pack
- Editable PowerPoint with full speaker notes
- Exercise answer key and model finding
- Licence to deliver the course to your own teams or clients
Secure checkout by Stripe. Files are emailed within one working day. Want all six courses? See the ITGC Complete bundle.