✕
Finance & Accounting

Assessing and Implementing Internal Controls Training

This intensive 5-day programme equips finance, audit, and compliance professionals with the knowledge and practical tools to design, assess, and implement robust internal controls across their organisations. Participants explore internationally recognised control frameworks, conduct risk-based control evaluations, and develop actionable improvement plans that strengthen accountability and reduce operational and financial risk. The course blends conceptual rigour with hands-on application, making it immediately relevant to real organisational challenges.

⏱ 5 Days 📡 In-Person 🎯 Intermediate From KES 80,000

About This Course

In today's complex regulatory and operating environment, effective internal controls are a cornerstone of sound governance, financial integrity, and operational resilience. Organisations that fail to establish and continuously assess their control environments face elevated exposure to fraud, errors, regulatory sanctions, and reputational damage. Conversely, those with well-designed and rigorously implemented controls are better positioned to achieve their strategic objectives with confidence.

The Assessing and Implementing Internal Controls Training course, offered by TrainingComplex, provides a structured and practical grounding in the principles, frameworks, and techniques used by world-class organisations to build strong control environments. Anchored in the COSO Internal Control – Integrated Framework and drawing on relevant International Standards for the Professional Practice of Internal Auditing (IPPF), the course walks participants through every stage of the internal control lifecycle — from risk identification and control design to testing, gap analysis, and remediation.

Participants will gain hands-on experience evaluating control effectiveness across key business processes including financial reporting, procurement, payroll, IT systems, and revenue management. They will learn to document controls using narratives and flowcharts, apply sampling and testing techniques, and communicate control deficiencies clearly to management and audit committees. Practical exercises based on realistic case scenarios ensure that learning translates directly into improved workplace performance.

Whether you are an internal auditor seeking to sharpen your assessment methodology, a finance manager responsible for control ownership, or a compliance officer tasked with regulatory assurance, this programme provides the conceptual depth and practical tools you need to make a measurable difference in your organisation's control environment.

Who Should Attend

Learning Objectives

Course Modules

Module 1: Foundations of Internal Control

  • Definition, purpose, and evolution of internal controls in organisations
  • The relationship between internal controls, governance, risk management, and compliance
  • Limitations of internal controls and the concept of reasonable assurance
  • Roles and responsibilities: control owners, internal audit, management, and the board
  • The cost-benefit principle in designing and maintaining controls
  • Overview of key internal control frameworks: COSO, COBIT, and ISO 31000

Module 2: The COSO Internal Control – Integrated Framework

  • History, structure, and authority of the COSO framework
  • The five components: control environment, risk assessment, control activities, information and communication, monitoring
  • The 17 principles underpinning the COSO components and their practical implications
  • Applying the COSO framework to both for-profit and public sector organisations
  • Assessing the presence and functioning of each COSO component
  • Common misconceptions and practical pitfalls in applying the COSO framework

Module 3: Risk Identification and Control Mapping

  • Defining organisational objectives as the starting point for risk identification
  • Techniques for identifying inherent risks across business processes
  • Risk categorisation: strategic, operational, financial reporting, and compliance risks
  • Linking identified risks to specific control activities through a risk and control matrix (RCM)
  • Prioritising risks using likelihood and impact assessment
  • Maintaining and updating the risk and control matrix as the organisation evolves

Module 4: Types and Design of Internal Controls

  • Preventive, detective, and corrective controls and when to apply each
  • Manual versus automated controls and the role of IT-dependent controls
  • Entity-level controls versus process-level controls
  • Key controls versus non-key controls and how to distinguish them
  • Principles of good control design: precision, completeness, and timeliness
  • Designing compensating controls where primary controls are not feasible

Module 5: Documenting the Control Environment

  • Importance of documentation in control assessment and audit evidence
  • Preparing process narratives: structure, content, and common errors
  • Developing process flowcharts: symbols, conventions, and practical tips
  • Constructing comprehensive risk and control matrices
  • Walkthrough procedures for validating documentation accuracy
  • Maintaining version control and managing changes to control documentation

Module 6: Testing the Operating Effectiveness of Controls

  • Difference between design adequacy and operating effectiveness
  • Overview of control testing approaches: inquiry, observation, inspection, and re-performance
  • Sampling methodologies: judgement-based and statistical sampling in control testing
  • Preparing test plans and designing test steps for key controls
  • Documenting test results and maintaining defensible working papers
  • Interpreting exceptions and determining their significance in the control context

Module 7: Evaluating IT Controls and Automated Processes

  • Categories of IT controls: general IT controls and application controls
  • Key general IT control domains: access management, change management, and IT operations
  • Assessing automated controls embedded in ERP and financial systems
  • Interface controls and data integrity in automated environments
  • Common IT control weaknesses and their impact on financial reporting
  • Collaborating with IT audit specialists in integrated audit engagements

Module 8: Identifying and Classifying Control Deficiencies

  • Definition and classification: control deficiency, significant deficiency, and material weakness
  • Root cause analysis techniques for understanding why controls fail
  • Factors that elevate a deficiency to a significant or material level
  • Aggregating individual deficiencies to assess their combined impact
  • Documenting deficiency findings in a clear and evidence-based manner
  • Escalation protocols and management responsibilities upon identification of deficiencies

Module 9: Reporting Internal Control Findings

  • Principles of effective internal control reporting: clarity, accuracy, and actionability
  • Structuring the internal control assessment report for different audiences
  • Writing finding statements: condition, criteria, cause, effect, and recommendation
  • Presenting control findings to management, audit committees, and boards
  • Navigating sensitive conversations around control failures and accountability
  • Following up on prior period findings and tracking remediation progress

Module 10: Remediation Planning and Continuous Improvement

  • Developing management action plans: ownership, timelines, and measurable outcomes
  • Prioritising remediation efforts based on risk exposure and resource constraints
  • Embedding a culture of continuous control improvement within the organisation
  • Using control self-assessment (CSA) as a tool for ongoing monitoring
  • Key performance indicators for measuring the health of the control environment
  • Building a sustainable internal controls programme aligned to organisational strategy

Requirements & Prerequisites

Participants should have a foundational understanding of accounting, finance, or audit principles gained through professional experience or formal study. Familiarity with basic business processes such as procurement, payroll, or financial reporting is recommended. Prior experience in an audit, finance, compliance, or risk management role is beneficial but not strictly required for motivated learners with relevant academic backgrounds.

Training Methodology

Organisational Benefits

Where Is Assessing and Implementing Internal Controls Training Offered?

This course runs in-person across: Dubai, Nairobi, Zanzibar, Cape Town, Nakuru, Mombasa, Kigali, Lagos, Riyadh, Abuja, Naivasha, Pretoria, Addis Ababa, Arusha, Accra, Kampala, Kisumu, Johannesburg, Dar es Salaam, plus Live Virtual (online) cohorts. Browse live dates for your city below.

Upcoming Schedules

LocationFormatDatesPrice
Live Virtual Online 12 Oct 2026 – 16 Oct 2026 KES 80,000
Live Virtual Online 24 Oct 2026 – 15 Nov 2026 KES 80,000
Dubai, United Arab Emirates In-Person 26 Oct 2026 – 30 Oct 2026 USD 4,100
Nairobi, Kenya In-Person 26 Oct 2026 – 30 Oct 2026 KES 115,000
Zanzibar, Tanzania In-Person 26 Oct 2026 – 30 Oct 2026 USD 2,500
Cape Town, South Africa In-Person 26 Oct 2026 – 30 Oct 2026 USD 3,800
Nakuru, Kenya In-Person 26 Oct 2026 – 30 Oct 2026 KES 120,000
Mombasa, Kenya In-Person 26 Oct 2026 – 30 Oct 2026 KES 120,000
Kigali, Rwanda In-Person 26 Oct 2026 – 30 Oct 2026 USD 1,900
Lagos, Nigeria In-Person 26 Oct 2026 – 30 Oct 2026 USD 2,500
Riyadh, Saudi Arabia In-Person 26 Oct 2026 – 30 Oct 2026 USD 4,500
Abuja, Nigeria In-Person 26 Oct 2026 – 30 Oct 2026 USD 2,800
Riyadh, Saudi Arabia In-Person 2 Nov 2026 – 6 Nov 2026 USD 4,500
Nairobi, Kenya In-Person 2 Nov 2026 – 6 Nov 2026 KES 105,000
Lagos, Nigeria In-Person 2 Nov 2026 – 6 Nov 2026 USD 2,500

+228 more dates — view live schedule →

Frequently Asked Questions

Do I need to be a qualified accountant or auditor to attend this course?

No formal qualification is required. The course is designed for finance, audit, and compliance professionals at various stages of their careers. A working knowledge of basic financial or business processes is sufficient to benefit fully from the programme.

Which internal control framework does the course focus on?

The course is primarily anchored in the COSO Internal Control – Integrated Framework, which is the most widely recognised standard globally. References are also made to COBIT for IT controls and to the IIA's International Professional Practices Framework where relevant.

Will I receive a certificate upon completion?

Yes. Participants who attend all sessions and complete the practical exercises will receive a TrainingComplex Certificate of Completion in Assessing and Implementing Internal Controls, which can be used to support CPD requirements with professional bodies such as ICPAK, ACCA, CPA, and ISACA.

Is this course available online or only in person?

The course is primarily delivered in-person to maximise the benefit of hands-on workshops, group exercises, and walkthroughs. However, a Live Virtual cohort is also scheduled for participants who cannot travel, delivered over five consecutive days via an interactive online platform.

What materials will participants receive?

Participants receive a comprehensive course workbook, editable templates for risk and control matrices, process flowchart tools, sample audit working papers, and a reference guide summarising the COSO principles. All materials are provided in digital format and are available for immediate use in the workplace.

View Live Schedule & Book →