What you will be able to do
Learning outcomes
- Scope a review programme by risk: which systems, which accounts, how often and by whom
- Test the completeness and accuracy of the review listing as information produced by the entity
- Judge whether a review is precise enough to detect inappropriate access
- Re-perform a review and use analytics to spot rubber-stamping
- Evaluate and report a failed review, including whether access was misused
Part 1: Designing a review
What to review, how often, and by whom · A review is only as good as its list · The right person, with the right information · What makes a review precise enough to rely on
Part 2: Evidence and follow-through
A remove decision is not a removal · What a complete review leaves behind · Certification campaigns: helpful, but test them
Part 3: Testing the review
Testing a user access review · Re-perform it; do not just inspect the sign-off · Signs of rubber-stamping · The review missed something. Now what? · Six ways access review testing goes wrong
21-slide course deck
Every slide has full speaker notes, a worked audit finding, a knowledge check and current sources.
Participant workbook
Notes pages, a finding template, a 10-question knowledge check and a glossary.
Excel exercises
Test the completeness of a review listing. Re-perform the review against HR leavers and movers. Test that removals happened on time. Spot rubber-stamping with reviewer analytics. All data is fictional.
Pricing
Choose your pack
Learner Pack
£29 one-off
For self-study and auditors building their skills.
- Course deck (PDF, 21 slides)
- Participant workbook
- Excel exercise file
- Single-user licence
Trainer Licence
£149 one-off
For audit managers, trainers and consultancies.
- Everything in the Learner Pack
- Editable PowerPoint with full speaker notes
- Exercise answer key and model finding
- Licence to deliver the course to your own teams or clients
Secure checkout by Stripe. Files are emailed within one working day. Want all six courses? See the ITGC Complete bundle.