All courses · Volume 1

IT audit training for 2026: the audit process and access control

IS Audit Foundations 2026 is a ready-to-use course pack for new IT auditors and the people who train them. Rebuilt from the ground up for current standards, cloud and SaaS, identity-first security and AI in audit.

See the packsWhat's inside
27slides with notes
5practical exercises
2026standards

What's inside

What the IT audit course pack includes

27-slide course deck

The full audit lifecycle, then access control: identity, passwords under NIST SP 800-63B-4, privileged and non-human accounts, remote access, logging and cloud.

Participant workbook

Notes pages, exercise instructions, a finding template, a 10-question knowledge check and a glossary.

Excel exercises

Realistic synthetic data: a leaver test, an access review completeness check and a password policy gap assessment.

Sample SOC 2 Type 2 report

An 8-page fictional report to practise on: period gaps, scope, exceptions, carved-out providers and customer controls.

Current standards

Mapped to the IIA Global Internal Audit Standards, ISACA's ITAF 5th edition, SSAE 18 and current NIST guidance.

Trainer extras

Editable PowerPoint with speaker notes, answer key, model finding and quiz answers (Trainer Licence).

Sample slide · Passwords

Rule2016 practiceNIST SP 800-63B-4
Minimum length6 to 8 characters15 if used alone; 8 within MFA
ComplexityMix of letters and numbersComposition rules not permitted
ExpiryEvery 30–60 daysOnly on evidence of compromise
BlocklistNot coveredRequired: breached and common values

Pricing

IT audit training prices

Learner Pack

£29 one-off

For self-study and early-career auditors.

  • Course deck (PDF, 27 slides)
  • Participant workbook
  • Excel exercise file
  • Sample SOC 2 Type 2 report
  • Single-user licence
Buy the Learner Pack

Secure checkout by Stripe. Files are emailed to you within one working day of purchase. Discount codes accepted at checkout. Want all six courses? See the ITGC Complete bundle.

Questions

Before you buy

Is the data real?

No. Every scenario, company and report in the pack is fictional and clearly labelled, so it is safe to use in any training room.

What file formats do I get?

PDF for the deck, workbook and SOC 2 sample, and an Excel workbook for the exercises. The Trainer Licence adds an editable PowerPoint and an Excel answer key.

Can I deliver the course to clients?

Yes, with the Trainer Licence. You can run sessions for your own teams or clients. You may not resell or redistribute the files themselves.

How do I get the files?

After checkout they are emailed to the address you enter, within one working day.