Anda di halaman 1dari 48

IIA Indonesia

Training
Catalogue

IIA INDONESIA TRAINING CATALOGUE


1
IIA INDONESIA TRAINING CATALOGUE
2
\ FO REWORD Salam Profesi, berkesinambungan, auditor internal akan
menjadi semakin diakui, dipercaya, dan

Let’s Continue Pertama, kami menghaturkan apresiasi


pada seluruh profesional auditor internal
memiliki nilai tambah dengan adanya
kompetensi profesional yang senantiasa

The Journey atas kontribusinya bersama IIA Indonesia


melalui serangkaian program pelatihan
terjaga.
Dalam tahun 2018 ini, IIA Indonesia
yang terselenggara selama tahun 2017 telah melakukan beberapa perubahan dan
lalu. Kami mencatat banyak peningkatan pengembangan dalam penyusunan 2018
signifikan, baik dari frekuensi maupun Training Program. Program-program
jumlah peserta training dibanding tahun- training ini dikembangkan untuk mem-
tahun sebelumnya. Tidak diragukan lagi, berikan yang terbaik bagi anggota IIA
kebersamaan dan komitmen adalah fak- Indonesia.
tor kunci keberhasilan tercapainya tujuan Kami berharap Program Training
kita, agar IIA Indonesia dapat senantiasa 2018 dapat membantu dan mendukung
memberikan program-program pelatihan anda dalam memperbaiki serta mening-
dan pelayanan terbaik untuk semua ang- katkan pengetahuan dan kompetensi,
gota. yang pada akhirnya dapat meningkatkan
Untuk dapat menjadikan profesi yang pelayanan jasa kepada klien Anda.
berbasiskan kompetensi, IIA Indonesia Kami selalu terbuka untuk segala
berkomitmen untuk selalu memenuhi masukan sebagai usaha kami untuk
kebutuhan dan harapan para anggota dapat melayani anda sebaik mungkin,
dan para pemangku kepentingan. Hal ini sehingga profesi ini dapat memberikan
sejalan dengan kerangka praktik interna- yang terbaik dan pada akhirnya mewu-
sional untuk profesi auditor internal di judkan kemakmuran nasional yang kita
tingkat global. Melalui pengembangan impikan.

Greetings Professional Auditors, the scheme of international practices for


global internal auditor profession. By
First of all, our appreciation to all of you, continuous development, internal audi-
as the professional internal auditors, for tors will be more acknowledged, trusted,
your contributions with our IIA Indonesia and have an added value with the well-
through the training programs provided maintained professional competences.
2017. We noted that there are significant In 2018, IIA Indonesia has some
progress in training program we did last improvements and more advances in
Fandhy Haristha Siregar, M.Kom, year, not only about the frequencies of developing the 2018 Training Program.
CIA, CCSA, CRMA, CISA, CISM, CRISC, trainings we did, but also the numbers Those training programs we developed
CGEIT, CISSP, CEH, CEP-PM, COBIT5, QIA of participants who joined and attended are solely for the best things for all of you
Secretary of IIA Indonesia, Head of at the classes. Undoubtedly, our toge- as members of IIA Indonesia. We hope
Training Committee therness and commitment are the key that the 2018 Training Program that we
success factors to make the IIA Indonesia provided will help and support you in im-
able to achieve the objectives in provid- proving and increasing your knowledge
ing the best training programs and excel- and competences, especially for the ben-
lence services for all members. efits for you in delivering services to your
To become the competence-based clients. We always open for feedbacks as
profession, IIA Indonesia always has a an effort to serve you the best as well as
commitment to keep up to date the needs a contribution from IIA Indonesia and In-
and expectations of all members and ternal Audit Profession for the best and
stakeholders. This is in accordance with prosperity of Indonesia we dream of.

IIA INDONESIA TRAINING CATALOGUE


3
\ cO nt Ent

3 FOREWORD 20 –bEttER
auDit REpORtS WRiting
DESign, FaSt
32 analyzing anD
impROving
4 cOntEnt DElivERy buSinESS pROcESS

5 StRatEgic
viSiOn, miSSiOn anD
ObjEctivES 21 quality aSSuRancE 33 ROOt cauSE analySiS
anD impROvEmEnt
pROgRam 34 cRitical tHinking FOR
6 inFORmatiOn
mEmbERSHip intERnal auDitOR

22 aRiSk-baSED auDiting:

7 cERtiFicatiOnS valuE aDD


pROpOSitiOn 35 it & cybERSEcuRity
auDitOR SERiES
8 abOut tHE tRaining
23 intERnal
Data analySiS FOR
auDitOR 36 auDiting tHE
cybERSEcuRity RiSk
9 pREpaRatiOn pROgRam
cERtiFicatiOn
anD cOntROlS
24 invEStigatiOn FOR
FRauD DEtEctiOn anD

10 cia REviEW intERnal auDitOR 38 cOntinuOuS auDit &


Data analyticS
11 cRma REviEW
25 FunDamEntal OF it
39 tHiRD paRty anD
12 ccSa REviEW auDiting vEnDOR managEmEnt
auDiting
13 cFSa REviEW
26 SOlving tEcHniquES
cREativE pROblEm-

14 cgap REviEW FOR auDitOR 40 cybERSEcuRity


auDiting in an
unSEcuRE WORlD
15 ESSEntial SkillS
intERnal auDit 27 intERnal auDiting
bESt pRacticE in

41 aDDitiOnal SERiES:

16 intERnal
nEW upDatE OF
auDit
28 cOSO 2013:
implEmEnting
RiSk cOntROl SElF-
aSSESSmEnt (RcSa)
StanDaRD (ippF) tHE FRamEWORk
42 availablE On REquESt

17 –tOOlS
bEginning auDitOR 29 cOSO-baSED intERnal
& tEcHniquE auDiting (2014)
43 OuR activitiES
18 (tEam lEaDER)
auDitOR-in-cHaRgE 30 cOSO ERm 2016
44 abOut iia inDOnESia
–tOOlS & tEcHniquE
31 SERiES
auDit managERial 46 tRaining REgiStRatiOn
FORm

19 auDitOR managER
–tOOlS & tEcHniquE

IIA INDONESIA TRAINING CATALOGUE


4
\ viS iOn, miS S iO n a n D S tR atE gi c & O b j E c t i v E S

Vision Mission
Internal audit professionals To advance the profession and
are universally recognized as practice of internal auditing in
indispensable to effective Indonesia
governance, risk management,
and control.

Strategic & Objectives


Membership. IIA-Indonesia is valued and highly regarded
by its members and stakeholders
1

Professionalism. IIA-Indonesia will


nurture high-performing internal audit
2 professionals that are indispensable
resource to their organizations.

Advocacy. IIA-Indonesia will raise


the profile of, and demand for,
3 the profession.

Governance. IIA-Indonesia will align


itself to a revised global operating
4 model governed by IIA- Global.

5 People. IIA-Indonesia will build a team of profes-


sional staff and volunteers to achieve its mission.

IIA INDONESIA TRAINING CATALOGUE


5
\ mEmbERS Hi p in F O R matiO n

Membership The Top 10 Benefits of IIA Membership


includes:
The IIA is the leading source for information and guidance about the internal
audit profession, and there are limitless benefits of being a member. For in-
ternal audit practitioners and those impacted by the profession, membership Worldwide Network of Professionals
in The IIA is a critical component of your overall strategy for career success.
As an IIA member, you are better positioned to add value to your organization
Professional Guidance
through the host of benefits that come with belonging.
With more than 180,000 members across 170+ countries and territories,
our more than 100 Institutes play a vital role in bringing The IIA’s services World-Class Training Opportunities
and benefits to members at a local level. Information on becoming an IIA
member is typically coordinated through each Institute. Where The IIA does
not have a local representation in your country or territory of residence, you Leadership Development
may join through our international membership.

Local Involvement
IIA Membership Benefits
As a member, you will have access to a world of learning programs, infor-
mation resources, and networking opportunities designed to improve your Awards and Recognition
performance today and prepare you for greater responsibilities tomorrow.
Membership with The IIA helps you master core internal audit competencies,
build effective tools and techniques, obtain credentials that distinguish you Increased Professionalism through
from peers, and build lasting relationships. Certification/Qualification
Join the Institute of Internal Auditor Indonesia memberships. Through
these memberships, you can stay current in your chosen technology profes-
sion, keep in touch with your peers, and invest in your career advancement. Books and Research

Increased Knowledge

Job Opportunities.

HOW TO APPLY
1. Complete the application form.
2. Return the completed application form with::
3. Payment for Annual Subscription Fee of IDR 850,000
to:
Bank Mandiri, Cab. Patra Jasa Office Tower.
Jl. Jend. Gatot Subroto Kav. 32-34, Jakarta 12950.
Rek. No. 070-00-0700483-6 a.n. IIA Indonesia
4. A photocopy of your Identity Card or Passport (for non-
resident only).
5. Copies of relevant Degree/Diploma Certificate.

IIA INDONESIA TRAINING CATALOGUE


6
\ cERt iFic at iO nS

Certified Internal Auditor (CIA). Make the Certified Internal Auditor® (CIA®) designation be your master
key to success. Demonstrate your competency and professionalism in the internal audit field with the CIA
–– the premier global internal audit certification.

Certification in Control Self-Assesment (CCSA). Demonstrate your ability to


drive for organizational change with the Certification in Control Self-Assesment®
(CCSA®). The CCSA is for practitioners at any experience level with CSA
fundamentals and processes.

Certified Goverment Auditing Professional (CGAP). The comprehensive, professional credential,


Certified Government Auditing Professional® (CGAP®), is designed for auditors working in the public
sector at all levels –– federal/national, state/provicincial, local, quasi-governmental, or crown authority.

Certified Financial Services Auditor (CFSA). Demonstrate the breadth of your


financial services knowledge with Certified Financial Services Auditor® (CFSA®)
and grow as a financial services audit professional. This certification is for profes-
sionals working in banking institutions, thrift/savings and loan organizations,
credit unions, insurance companies, and more.

Certification in Risk Management Assurance (CRMA). This Certification (CRMA®) is designed for
internal auditors and risk management professionals with responsibility for and experience in providing risk
assurance, governance processes, quality assurance, or control self-assessment.

NEW! Qualification in Internal Audit Leadership (QIAL). If you are aspiring to


be a leader in your organization or looking to add credibility to your current leader-
ship role with stakeholders and peers, the Qualification in Internal Audit Leadership™
(QIAL™) will help you build and enchance skills to further establish your credibility
as leader of the future.

IIA INDONESIA TRAINING CATALOGUE


7
\ abOu t t HE tR a in in g

The IIA is the leader in innovative internal audit training, and pro-
vides quality, engaging, facilitated learning opportunities for its
members and customers. IIA learning solutions help ensure that
you have the knowledge and skills needed to provide the highest
level of assurance, insight, and objectivity possible, adding value
to your organization. We are committed to delivering the very best
in internal audit training, and living up to our reputation as the
global leader in internal audit education by providing the highest
quality, convenience, and value in the business.

The IIA is your source for world-class professional development


training that is designed to educate you on relevant issues and
equip you with the skills and competencies you need to drive re-
sults. All IIA courses are eligible for NASBA-approved continuing
professional education (CPE) credit, so our training helps you
maintain your professional certifications, too.

Our facilitators, including chief audit executives and audit


managers, are some of the most experienced and accomplished
internal audit professionals in the business. They thoroughly
understand the challenges and demands of the profession and
are passionate about helping you acquire and master the know-
ledge and skills you need to add value to your employer and boost
the worth of your résumé.

IIA seminars and conference give you:


l The training you want.
l Best-in-class facilitators.
l Convenient and comfortable locations.
l The best value in the business.

The IIA’s Learning Platforms Seminars: Multi-day training practitioners from around the world and offer unparalleled
events that offer a variety of classroom-style courses. opportunities for networking.
l Certification Preparation Program
l Internal Audit Essential Skills Develop and enhance your auditing skills by attending an IIA
l Internal Control and Risk Management Series conference specializing in varying fields of internal audit. Don’t miss
l Audit Managerial Series these great hot-topic events designed to help you network with your
peers, understand industry best practices, and take your career to
Conferences: Multi-day, multi-track training events that draw the next level.

IIA INDONESIA TRAINING CATALOGUE


8
IIA INDONESIA TRAINING CATALOGUE
9
\ c ERt iFic at E tinjauan
pREpaRat iOn CERTIFIED INTERNAL AUDITOR® (CIA®) IIA Indonesia CIA Review Course meng
pROg RamS adalah satu-satunya sertifikasi yang diakui gunakan materi dari The IIA’s New CIA Learn-
secara global untuk auditor internal dan ing System yang telah dikembangkan untuk

CIA Review tetap menjadi standar untuk menunjukkan


kompetensi dan profesionalisme di bidang
mempelajari 3-Part CIA exam syllabus, da-
lam format blended learning dengan work-
audit internal. Para auditor internal akan books dan web-based learning software.
mendapatkan tambahan pengetahuan, in- Instruktur yang berpengalaman akan men-
formation update, dan business tools yang dampingi peserta mempelajari seluruh CIA
dapat diterapkan segera dalam organisasi exam syllabus dalam pola pengajaran yang
atau lingkungan bisnis. terstruktur dan interaktif.

OvERviEW
The IIA’s Certified Internal Auditor® (CIA®) IIA Indonesia CIA Review Course is based
designation is the only globally accepted cer- on the IIA’s New CIA Learning System which
tification for internal auditors and remains the has been updated and enhanced to teach the
standard by which individuals demonstrate entire 3-Part CIA exam syllabus. in a blended
their competency and professionalism in the learning format of customized workbooks
internal auditing field. Candidates leave the and web-based learning software. Our expert
program enriched with educational experi- instructor will lead you through the entire CIA
ence, information, and business tools that exam syllabus in a structured and interactive
can be applied immediately in any organiza- live classroom environment.
tion or business environment.

matERi pElatiHan / cOuRSE OutlinE


Part I: Dasar-Dasar Audit Internal / Internal Audit Basics
• Section I : Tuntunan Penugasan / Mandatory Guidance
• Section II : Pengawasan Internal dan Risiko / Internal Control and Risk
• Section III : Conducting Internal Audit Engagements—Audit Tools and Techniques
Part II: Praktik Audit Internal / Internal Audit Practice
• Section I : Mengelola Fungsi Audit Internal / Managing The Internal Audit Function
• Section II : Managing Individual Engagements / Mengelola Perjanjian Kerja Individu
• Section III : Risiko-Risiko Fraud dan Pengawasan / Fraud Risks and Controls
Part III: Elemen Pengetahuan Audit Internal / Internal Audit Knowledge Elements
• Section I : Etika TataKelola/Bisnis / Governance/Business Ethics
• Section II : Manajemen Risiko / Risk Management
• Section III : Struktur Organisasi/Proses Usaha dan Risiko /
Organizational Structure/Business Processes and Risks
• Section IV : Komunikasi / Communication
• Section V : Prinsip-Prinsip Manajemen/Kepemimpinan /
Management/Leadership Principles
• Section VI : Kesinambungan TI/Bisnis / IT/Business Continuity
• Section VII : Manajemen Keuangan / Financial Management
• Section VIII : Lingkungan Usaha yang Mendunia / Global Business Environment.

IIA INDONESIA TRAINING CATALOGUE


10
\ c ERt iFic at E tinjauan
pREpaRat iOn CERTIFICATE IN RISK MANAGEMENT kang akan mendapatkan keuntungan dari
pROg RamS ASSURANCE ® (CRMA®) adalah program kursus ini antara lain:
sertifikasi khusus yang ditawarkan The Insti- • Mendapatkan pengetahuan yang diperlu-
tute of Internal Auditors (IIA). Sertifikasi ini kan dalam hal risiko dan model pengen-
CRMA Review dirancang untuk semua profesional mana-
jemen risiko, tidak hanya auditor internal.
dalian.
• Memiliki konsep yang sangat penting
Mendapatkan pengetahuan yang diperlu- dalam menggunakan risiko dan pengen-
kan dari berbagai bidang seperti risiko dan dalian manajemen secara efektif untuk
model pengendalian –– sering hanya diang- membantu klien mencapai tujuan.
gap ranah auditor ––, mengekspos profesi- • Memahami segala hal mengenai ujian
onal manajemen risiko dari semua latar CRMA®.
belakang dengan konsep yang sangat penting • Belajar secara efektif bagaimana mem-
dalam mengelola risiko secara efektif dan persiapkan diri untuk menghadapi ujian
membantu klien mencapai tujuan mereka. CRMA®.
Para praktisi risiko dan pengendalian • Memiliki kepercayaan diri dalam men-
serta para manajer dari semua latar bela- jawab soal-soal ujian CRMA®.

OvERviEW
THE CERTIFICATE IN RISK MANAGEMENT Risk and control practitioners as well as
ASSURANCE® (CRMA®) is a specialty certi- managers from all backgrounds will benefit
fication program offered by The Institute of from this course in a variety of ways, include:
Internal Auditors (The IIA). It is designed for • Gaining required knowledge of risk and
all risk management professionals –– not control models.
only internal auditors. • Discovering concepts that are vital in effec-
Gaining the required knowledge of areas tively using risk and control management
such as risk and control models –– often to help clients achieve their objectives.
considered the realm of auditors only –– • Understanding the CRMA® Examination.
exposes risk management professionals from • Learning how to effectively study for the
all backgrounds to the concepts that are vital CRMA® Examination.
in effectively managing risk and helping • Gaining confidence in addressing CR-
clients achieve their objectives. MA® Exam questions.

matERi pElatiHan / cOuRSE OutlinE


• Domain I : Organisasi dan Budaya Organisasi / Organizations and Organizational Culture
• Domain II : Prinsip-Prinsip dalam Proses Manajemen Risiko /
Principles of Risk Management Processes
• Domain III : Peran Asuransi dalam Auditor Internal / Assurance Role of the Internal Auditor
• Domain IV : Peran Konsultasi dalam Auditor Internal /
Consulting Role of the Internal Auditor.

IIA INDONESIA TRAINING CATALOGUE


11
\ cERt iFic atE tinjauan
pREpaRat iO n CERTIFICATION IN CONTROL SELF- • Mendapatkan pengetahuan mengenai
pROg RamS ASSESSMENT® (CCSA®) merupakan serti- konsep risiko dan pengendalian model.
fikasi yang sangat bernilai bagi praktisi con- • Menemukan konsep yang sangat penting
trol self-assessment. Sertifikasi ini mengukur dalam menggunakan CSA secara efektif
CCSA Review pengetahuan calon peserta terhadap hal-hal
penting dan fundamental tentang CSA, pro-
untuk membantu klien mencapai tujuan
mereka.
ses, dan topik terkait seperti risiko, kontrol, • Memahami makna ujian sertfikasi CCSA®.
dan tujuan bisnis. • Belajar secara efektif untuk menghadapi
Calon peserta sertifikasi CCSA pada ujian CCSA®.
seluruh tingkat pengalaman dapat memper- • Memiliki kepercayaan diri dalam men-
oleh manfaat dari proses review menyelu- jawab soal-soal ujian CCSA®.
ruh prinsip dan teknik CSA. Auditor internal • Latihan menjawab soal ujian disertai pen-
dapat mengembangkan menggunakan CSA jelasan bagaimana menentukan “jawaban
sebagai pelengkap teknik audit tradisional. terbaik“ jika Anda menemukan pertanya-
Manfaat yang didapat peserta kursus ini: an seperti itu pada ujian CCSA®.

OvERviEW
CERTIFICATION IN CONTROL SELF-ASSESS- • Gaining required knowledge of risk and
MENT® (CCSA®) designation is an esteem- control models.
ed certification for control self-assessment • Discovering concepts that are vital in
practitioners. It measures a candidate’s effectively using CSA to help clients
knowledge of important CSA fundamen- achieve their objectives.
tals, processes, and related topics such • Understanding the CCSA® examination.
as risk, controls, and business objectives. • Learning how to effectively study for the
Candidates at any CSA experience level CCSA® examination.
can benefit from comprehensive review of • Gaining confidence in addressing CCSA
CSA principles and techniques. Internal exam questions.
auditors can specialize in CSA, often using • Answers to various questions with ex-
it as a complement to the more traditional planations how to determine the “best
audit techniques. answer” if you see this type question on
Benefit from this course including: the CCSA examination.

matERi pElatiHan / cOuRSE OutlinE


• Domain I: CSA Fundamentals
• Domain II: CSA Program Integration
• Domain III: Elements of the CSA Process
• Domain IV: Business Objectives and Organizational Performance
• Domain V: Risk Identification and Assessment
• Domain VI: Control Theory and Application.

IIA INDONESIA TRAINING CATALOGUE


12
\ c ERt iFic atE tinjauan
pREpaRat iO n CERTIFIED FINANCIAL SERVICES AUDITOR® keuangan. Calon peserta ujian dapat memilih
pROg RamS (CFSA®) adalah sertifikasi khusus yang sa- salah satu konsentrasi disiplin ilmu tertentu
ngat bernilai bagi profesional auditor yang (Perbankan/Asuransi/Sekuritas) saat meng-
bekerja di perusahaan perbankan, asuransi, ambil ujian, terlepas dari bidang pekerjaan
CFSA Review manajemen investasi, lembaga kredit, badan
pengatur jasa keuangan, dan organisasi jasa
mereka saat ini.
Pelatihan ini ditujukan bagi auditor pro-
keuangan lainnya. fesional yang ingin mengikuti ujian sertifikasi
Certified Financial Services Auditor® CFSA®. Kursus ini meliputi serangkaian pem-
(CFSA®) mengukur pengetahuan individu bahasan materi yang akan diuji dan ditam-
dalam hal prinsip dan praktik audit dalam bah dengan latihan soal yang akan dibimbing
dunia perbankan, asuransi, dan industri jasa instruktur yang berpengalaman.

OvERviEW
The CFSA® is a valued specialty certification within the banking, insurance, and financial
for audit professionals working in banking services industries. Candidates may choose
institutions, thrift/savings and loan organi- one of these disciplines when taking the
zations, credit unions, insurance companies, exam, regardless of their current occupa-
security and commodity services, holding tional field.
and investment companies, credit agencies, The course is aimed at all those wish-
financial services regulatory agencies, and ing to take the exam to achieve the CFSA
other financial services organizations. certification. The course includes a series of
The Certified Financial Services Auditor® discussion material to be tested and supple-
(CFSA®) measures an individual’s know- mented with exercises that will be guided by
ledge of audit principles and practices experienced instructors.

matERi pElatiHan / cOuRSE OutlinE


• Domain I : Financial Services Auditing
• Domain II : Auditing Financial Services Products
• Domain III : Auditing Financial Service Processes
• Domain IV : The Regulatory Environment
• Banking : Products, Processes, and the Regulatory Environment
• Insurance : Products, Processes, and the Regulatory Environment
• Securities : Products, Processes, and the Regulatory Environment.

IIA INDONESIA TRAINING CATALOGUE


13
\ c ERt iFic at E tinjauan
pREpaRat iOn CERTIFIED GOVERNMENT AUDIT PROFESSI- diikuti mock test yang terdiri dari soal-soal
pROg RamS ONAL (CGAP) Exam Review Course didasar- latihan yang relevan. Hasil mock test ini ke-
kan pada bahan yang bersumber dari The mudian akan dibahas satu persatu bersama.
Institute of Internal Auditors serta literasi ter- Tujuan Pembelajaran:
CGAP Review baru tentang peran dan harapan dari auditor
pemerintah di era peningkatan akuntabilitas
• Memahami dan menerapkan standar yang
dibutuhkan untuk audit pemerintahan
di sektor publik. Semua persyaratan dasar • Dapat menyediakan berbagai jasa audit
untuk mempersiapkan dan lulus ujian CGAP dalam pemerintahan
dibahas dalam ulasan ini. • Menggunakan metodologi audit saat ini
Seluruh domain di CGAP exam –stan- dan teknik dalam audit pemerintahan
dards and controls, audit practices, audit • Menjelaskan perkembangan peran audi-
methodologies and skills, and the govern- tor pemerintah dalam akuntabilitas dan
ment environment– akan diulas dan dibahas manajemen hasil.
cermat. Pembahasan seluruh domain akan

OvERviEW
THE CERTIFIED GOVERNMENT AUDIT PRO- main are followed by a mock quiz comprised
FESSIONAL E(CGAP) Exam Review Course of relevant practice questions. The results of
is based on The Institute of Internal Auditors’ mock quiz are discussed in lecture and indi-
source materials as well as the latest literature vidual question and answer periods.
on the role and expectations of government Learning Objectives:
auditors in the current era of enhanced ac- • Understand and apply required standards
countability in the public sector. All basic for governmental auditing
requirements to prepare for and pass the • Successfully provide a wide range of au-
CGAP exam are addressed in this review. dit services in the government
Each of the four domains in the CGAP • Use current audit methodologies and
exam –standards and controls, audit prac- techniques in government audits
tices, audit methodologies and skills, and the • Describe the government auditor’s evolv-
government environment– are carefully re- ing role in accountability and results
viewed and discussed. Discussion of all do- management.

matERi pElatiHan / cOuRSE OutlinE


• Domain I: Standards, Governance, and Risk/Control Frameworks
• Domain II: Government Auditing Practice
• Domain III: Government Auditing Skills and Techniques
• Domain IV: Government Auditing Environment.

IIA INDONESIA TRAINING CATALOGUE


14
Internal Audit
Essential Skills

IIA INDONESIA TRAINING CATALOGUE


15
\ i n t ERnal auD itO R tinjauan
ES S Ent ial S k illS INTERNATIONAL PROFESSIONAL PRACTICES dar Kinerja
FRAMEWORK (IPPF) yang baru memerinci • Memepelajari cara menggunakan IPPF
standar dan memberikan wawasan yang men- untuk meningkatkan fungsi audit inter-
New Update of dalam terhadap profesi audit internal. Me-
nawarkan saran praktis dan petunjuk tentang
nal serta pengetahuan dan keterampilan
Anda sebagai internal auditor
Internal Audit cara untuk meningkatkan fungsi audit internal
organisasi Anda dan pengetahuan serta kete-
• Mendiskusikan isu-isu terbaru dalam
kaitannya dengan penerapan IPPF
Standard (IPPF) rampilan staf audit Anda. Pelatihan ini secara
interaktif akan mengeksplorasi elemen kunci
• Mencari tahu di mana saja kegiatan au-
dit internal tidak sepenuhnya mematuhi
dari IPPF melalui ceramah, diskusi, latihan IPPF.
dan studi kasus. • Berbagi pengalaman dalam menerapkan
Hasil yang diharapkan: standar audit internal
• Mengidentifikasi dan memahami isi dan • Mendapat masukan dari apa yang Anda
tujuan masing-masing Atribut dan Stan- pelajari dalam studi kasus.

OvERviEW
THE NEW INTERNATIONAL PROFESSIONAL mance Standard
PRACTICES FRAMEWORK (IPPF) details • Learn how to use the IPPF to improve
internal auditing standards and provides your internal audit function and your
in-depth insight into the profession. It offers knowledge & skills as an internal auditor
practical advice and guidance on how to im- • Discuss current issues in relation to the
prove your organisation’s internal audit func- application of the IPPF
tion and your staff’s auditing knowledge and • Find out some common areas in which
skills. This is a hands-on, interactive course internal audit activities do not fully com-
that explores the key elements of the IPPF ply with the IPPF (from the IIA’s external
through lectures, discussions, exercises and quality assessment program)
scenario-based learning. • Share your experiences in applying inter-
Expected Outcomes nal auditing standards
• Identify and understand the content and • Put what you learn into practice during
purpose of each Attribute and Perfor- the scenario based activities.

matERi pElatiHan /
cOuRSE OutlinE
• Background and Structure of The IPPF
• Code of Ethics
• Mandatory Attribute Standards
• Mandatory Performance Standards
• Practice Advisories.

IIA INDONESIA TRAINING CATALOGUE


16
\ int ERnal auD itO R tinjauan
ES S Ent ial S k illS UNTUK DAPAT menjadi auditor yang berha- audit yang berhasil misalnya dengan meng-
sil, pemahaman dan pengetahuan dasar yang gunakan survei pendahuluan dan teknik
kuat mengenai dasar audit adalah hal yang pengumpulan bukti audit. Program pelatih-
Beginning Auditor sangat penting. Selama program pelatihan, an ini akan memberikan pemahaman dasar
auditor baru, maupun non-auditor dengan mengenai bagaimana teknik mengidentifikasi
–Tools & Technique tanggung jawab yang berhubungan dengan
pengendalian internal, dapat mempelajari se-
risiko dan pengendalian internal dalam audit,
mengembangkan keterampilan interpersonal
luk beluk penugasan audit dari awal sampai dan bekerjasama dalam tim.
akhir. Beginning Auditor-Tools and Techniques
Program ini disusun dengan mengguna- merupakan program dasar yang telah dise-
kan metode latihan tim, diskusi kelompok, suaikan dengan Internal Audit Competency
dan presentasi fasilitator. Peserta akan men- Framework yang terbaru dan hasil survei
dapatkan dasar pengetahuan yang memung- Common Body of Knowledge mengenai
kinkan mereka untuk melakukan persiapan keahlian dan ketrampilan yang harus dimiliki
yang baik dan melaksanakan penugasan oleh auditor dalam tiap posisi jabatan.

OvERviEW
TO BECOME a successful auditor, a strong preliminary surveys and evidence-gathering
base of knowledge and an understanding of techniques. This program will also provide a
basic audit skills are essential. With this pro- basic understanding of how to identify risks
gram, new auditors, as well as non-auditors and internal controls in auditing will also be
with internal control responsibilities, can stressed, along with interpersonal and team-
learn the ins-and-outs of an audit from be- building skills.
ginning to end. Beginning Auditor-Tools and Techniques
This program is prepared using method- is a foundation program and has been adapt-
ology of team exercises, group discussion, ed to the current Internal Audit Competency
and facilitator presentations. Attendees will Framework and survey of the Common Body
gain a foundation of knowledge that will al- of Knowledge, regarding the expertise and
low them to prepare properly for and con- skills that should be possessed by the audi-
duct a successful audit. For example: using tor in each level of positions.

matERi pElatiHan / cOuRSE OutlinE


• Praktik Audit Saat Ini / Internal Audit Today
• Penilaian dan Manajemen Risiko / Risk Assessment and Risk Management
• Perencanaan Penugasan Audit / Audit Assignment Planning
• Wawancara / Interviewing
• Pendokumentasian Proses / Process Documentation
• Program Audit l Alat Audit Ter-otomatisasi / Audit Programs | Automated Tools
• Pengujian / Testing
• Pelaporan / Reporting
• Menjual Hasil Penugasan / Selling The Result
• Kerjasama dalam Kelompok. / Teamwork.

IIA INDONESIA TRAINING CATALOGUE


17
\ i n t ERnal auD itO R tinjauan
ES S Ent ial S k illS MEMIMPIN tim audit tidak hanya mem- hal-hal yang dibutuhkan untuk memimpin
butuhkan pengetahuan, tetapi juga dedi- penugasan misalnya organisasi, manaje-
kasi, efisiensi, dan keterampilan mengenai men waktu dan pemecahan masalah. Melalui
Auditor-in-Charge kepemimpinan yang efektif. Pemimpin penu-
gasan audit perlu memahami bagaimana
penggunaan studi kasus, peserta akan belajar
tentang peran dan tanggung jawab auditor–
(Team Leader) menjalankan penugasan dan mengelola tim
dengan baik sehingga setiap penugasan
in–charge dalam setiap tahapan penugasan
audit internal.
–Tools & Technique dapat berjalan lancar sesuai dengan yang
direncanakan. Dengan kata lain, Pemimpin
Program pelatihan ini merupakan kelan-
jutan dari program sebelumnya: Beginning
penugasan membutuhkan keterampilan un- Auditor –Tools and Techniques dan telah
tuk memimpin dengan percaya diri. disesuaikan dengan Internal Audit Compe-
Pelatihan ini dipersiapkan untuk anda tency Framework yang terbaru dan hasil sur-
yang baru saja dipromosikan sebagai audi- vei Common Body of Knowledge mengenai
tor–in–charge, mereka yang ingin lebih dalam keahlian dan ketrampilan yang harus dimiliki
memahami peran auditor–in–charge, atau oleh auditor dalam tiap posisi jabatan.
mencari penyegaran. Anda akan mempelajari

OvERviEW
LEADING an audit team not only requires that is woven into the course, participants will
a great deal of knowledge, it also requires learn about the roles and responsibilities of
dedication, efficiency, and effective leader- an auditor–in–charge for the phases of an
ship skills. Audit leaders today need to know internal audit.
how run a team properly so that every project This program is a continuation of previ-
runs smoothly. In other words, they need the ous program: Beginning Auditor Tools and
skills to lead with confidence. Techniques, and has been adapted to the cur-
Whether you are a recently promoted rent Internal Audit Competency Framework
auditor–in–charge, assuming the role, or and survey of the Common Body of Knowl-
seeking a refresher, this course covers the or- edge, regarding the expertise and skills that
ganizational, time management and problem should be possessed by the auditor in each
solving skills necessary to manage a suc- level of positions.
cessful team. Through the use of a case study

matERi pElatiHan / cOuRSE OutlinE


• IPPF for The Auditor–in–Charge
• The Role of an Auditor–in–Charge
• Case Study-Bob Brown
• Planning The Audit
• Audit Programs and Staffing Audit Supervision
• Reviewing Working Papers
• Audit Concerns and Reports
• The Exit Conference
• Wrapping Up The Audit
• Appraising Staff Performance.

IIA INDONESIA TRAINING CATALOGUE


18
\ int ERnal auD itO R tinjauan
ES S Ent ial S k illS TRANSISI dari senior auditor ke posisi terlibat dalam proses audit. Peserta juga akan
manajer tim audit mengharuskan seseorang belajar bagaimana mempertahankan jalur ko-
untuk belajar dan menguasai keterampilan munikasi yang efektif dan benar dengan Chief
Auditor Manager set yang sama sekali baru. Manajer Audit Audit Executive atau senior management,
tidak hanya merupakan auditor yang efisien, memecahkan masalah sekaligus memotivasi
–Tools & Technique tetapi juga harus menjadi komunikator yang
efektif, guru, dan pendengar aktif. Kursus ini
tim dan mendelegasikan tugas.
Program pelatihan ini merupakan kelan-
dirancang dengan fokus untuk menyediakan jutan dari program sebelumnya: Auditor-in-
alat yang dibutuhkan oleh manajer baru su- Charge –Tools and Techniques dan telah di-
paya dapat memimpin secara efektif dalam sesuaikan dengan Internal Audit Competency
pelaksanaan audit internal. Framework terbaru dan hasil survei Common
Melalui latihan praktis dan studi kasus, Body of Knowledge, mengenai keahlian dan
peserta akan belajar bagaimana mengelola ketrampilan yang harus dimiliki oleh auditor
peran, hubungan dengan berbagai pihak yang dalam tiap posisi jabatan.

OvERviEW
TRANSITIONING from staff auditor to man- ticipants will learn how to maintain lines of
ager of an audit team means learning and communication with the CAE and executive
mastering an entirely new skill set. Audit management, and problem solve while moti-
managers must not only be efficient auditors, vating a team and delegating tasks.
but also effective communicators, teachers, This program is a continuation of the pre-
and active listeners. This course focuses on vious program: Auditor in Charge Tools and
providing new managers with the tools they Techniques, and has been adapted to the cur-
need to lead effectively in an internal auditing rent Internal Audit Competency Framework
environment. and survey of the Common Body of Knowl-
Through practical exercises and case edge, regarding the expertise and skills that
studies, participants will learn how to man- should be possessed by the auditor in each
age the roles and relationships of the diverse level of positions.
parties involved in the auditing process. Par-

matERi pElatiHan /
cOuRSE OutlinE
• The Internal Audit Department’s Structure
• Setting The Tone
• Building Rapport
• Managing The Audit
• The Reporting Process
• Innovative Problem Solving
• Marketing the Audit Function.

IIA INDONESIA TRAINING CATALOGUE


19
\ i n t ERnal auD itO R tinjauan
ES S Ent ial S k illS KOMUNIKASI yang persuasif adalah keteram- gaimana menyusun laporan yang memenuhi
pilan yang penting untuk Auditor di semua standar profesional, bagaimana mendorong
tingkatan, laporan hasil audit yang berkualitas tindak lanjut dari manajemen, serta bagaima-
Audit Reports tinggi adalah alat komunikasi utama. Dalam na mengkomunikasikan pesan yang penting
pelatihan ini Anda akan belajar bagaimana untuk para top eksekutif.
Writing melakukan observasi secara efektif dan ba-
(Pelatihan ini dalam format lokakarya, sangat disarankan untuk membawa laptop dan contoh
–Better Design, laporan yang pernah dibuat).

Fast Delivery OvERviEW


PERSUASIVE communication is an essential dards, elicit management action, and com-
skill for auditors at all levels, and high-quality municate crucial messages to executives and
audit reports are a key communication tool. board-level readers. By honing these skills,
By participating in this course, auditors in all they can distinguish themselves in their cur-
sectors and at all levels will learn what goes rent positions and prepare themselves for
into an effective audit observation and how to advancement.
organize reports that meet professional stan-
(This is a hands-on course that focuses on the organization and structure of audit reports,
and includes case study activities for practicing the basics of audit report writing).

matERi pElatiHan / cOuRSE OutlinE


• Analisis Laporan Hasil Audit / Analysis of Audit Report
• Unsur-Unsur Observasi dalam Audit / Components of Audit Observations
• Struktur Laporan Hasil Audit / Structure of Audit Report
• Kualitas Laporan Hasil Audit / Quality of Audit Report
• Menulis Laporan Hasil Audit. / The Audit Report Writing Task.

IIA INDONESIA TRAINING CATALOGUE


20
\ int ERnal auD itO R pada auditee agar meningkatkan terus kualitas yang efektif sama halnya dengan pengem-
ES S Ent ial S k illS pekerjaan operational auditee melalui upaya- bangan manajemen mutu terpadu (TQM),
upaya efisiensi dan efektivitas yang harus yaitu produk dan jasa dianalisis untuk diveri-
dipenuhi auditee dalam mencapai tujuan fikasi apakah memenuhi harapan stakehold-
Quality Assurance operasional yang telah ditetapkan. Tentunya
menjadi pertanyaan juga bagi auditee mau-
ers, aktivitas operasional dievaluasi untuk
menentukan efektivitas dan efisiensinya, ser-
and Improvement pun para stakeholder audit internal, apakah
kualitas pekerjaan audit sudah memenuhi
ta praktik-praktik dinilai untuk dikonfirmasi-
kan kesesuaiannya dengan standar. Model
Program standar kualitas yang ditetapkan.
Satuan Pengawasan Intern (SPI) atau unit
dan perangkat Program Quality Assurance
yang dikembangkan dalam pelatihan ini ada-
audit internal harus menunjukkan komitmen- lah sesuai dengan Manual Quality Assurance
tinjauan nya mengenai kualitas pekerjaannya dalam yang telah diterbitkan The Institute of Internal
Who AudIT ThE AudIToRS? Pertanyaan rangka memenuhi harapan para stakeholder. Auditors (IIA) Global.
ini kerap kali timbul baik secara langsung di- Program Quality Assurance Unit Audit Inter- Pelatihan selama 2 (dua) hari ini akan
tanyakan maupun yang ada dalam pemikiran nal sangat penting untuk memenuhi kualitas membahas berbagai topik berkaitan dengan
auditee. Dalam pekerjaan audit internal yang pekerjaan dan kegiatan audit internal. pengembangan Program Quality Assurance
dilaksanakan, auditor selalu menekankan ke- Pengembangan Program Quality Assurance untuk Unit Audit Internal.

OvERviEW
AN INTERNAL audit activity demonstrates its conformance to standards. Once the QAIP • Gain experience with the quality assess-
commitment to quality by meeting the expec- has been established, sustaining it requires ment process model and related tools
tations of its stakeholders while continuing leaders who are responsible for setting the contained in the new Quality Manual
to improve the effectiveness and efficiency proper tone in support of quality. The qual- to identify areas of focus for their own
of its operations. A successful quality assur- ity assessment process flow model and relat- QAIPs.
ance and improvement program (QAIP) is ed tools from the recently published Quality • Practice building the two key compo-
crucial to achieving this goal. Manual provide the basis for class discus- nents of an effective QAIP: ongoing and
Building an effective QAIP is similar to es- sion and activities. Guided by knowledgeable periodic assessments.
tablishing a total quality management pro- facilitators with extensive experience in qual- • Experience developing metrics and de-
gram, where products and services are ana- ity assessments, participants will: signing reports of results of their internal
lyzed to verify they meet stakeholder expec- • Learn how to apply The IIA’s International audit’s QAIP.
tations, operations are evaluated to deter- Professional Practices Framework (IPPF) • Assess the readiness of their IA activity
mine their efficiency and effectiveness, quality standards to establish an effective for an external quality assessment.
and practices are assessed to confirm their QAIP within their internal audit practice.

matERi pElatiHan / cOuRSE OutlinE


• Quality Standards and Recommended Guidance
• Quality Assurance Process Model
• Quality Assurance – Internal Audit Process
• Quality Assurance – Internal Audit Staff
• Quality Assurance – Internal Audit Management
• Quality Assurance – Internal Audit Governance
• Building the Periodic Internal Assessment
• Developing Metrics and Reporting for the QAIP.

IIA INDONESIA TRAINING CATALOGUE


21
\ i n t ERnal auD itO R tinjauan
ES S Ent ial S k illS BERDASARKAN standar profesi audit internal dasi-rekomendasi dari hasil audit internal
yang berlaku (IPPF), penugasan audit harus akan lebih mudah untuk ditindaklanjuti oleh
menggunakan pendekatan audit internal ber- auditee dalam rangka untuk meningkatkan
Risk-Based basis risiko. Pendekatan ini mensyaratkan da- efektivitas pengendalian internal yang ada.
lam setiap pekerjaan audit, fokus audit tidak Bagi auditor internal sendiri, pendekatan
Auditing: A Value lagi sekedar melakukan evaluasi kecukupan
pengendalian internal yang ada, melainkan
audit internal berbasis risiko akan membuat
alokasi sumber daya audit lebih efektif dan
Add Proposition juga auditor internal terlebih dahulu harus
melakukan identifikasi dan analisis risiko-
efisien untuk digunakan.
Pelatihan akan dilaksanakan dalam pe-
risiko yang utama atas kegiatan yang diaudit. maparan oleh fasilitator dan diskusi di antara
Pendekatan audit internal berbasis risiko para peserta dengan contoh-contoh studi
ini akan memberikan manfaat terutama bagi kasus yang menarik. Dibahas juga dalam pe-
auditee karena fokus audit internal akan lebih latihan ini mengenai bagaimana identifikasi
langsung ke permasalahan-permasalahan (risk) dan proses asesmen risiko dilaksanakan,
yang menghambat auditee dalam mencapai serta pengembangan rencana audit berbasis
tujuan kegiatannya. Di samping itu, rekomen- risiko.

OvERviEW
INTERNAL AUDITING is a profession that’s professionals align their organizations’
always evolving, always changing, especial- strategies, visions, and values with the in-
ly in the area of risk-based audit approach- ternal audit process.
es. Successful audit leaders know that it’s Furthermore, participants will come to
imperative that they continue to hone their understand the importance of corporate
skills in guiding their organizations’ risk- governance and enterprise risk manage-
based auditing, while improving their cur- ment, while learning to identify risks,
rent internal audit processes. perform risk assessments, develop a risk-
Through case studies, group discus- based assurance plan, understand entity-
sions, round tables, and facilitator presen- wide controls, and plan a risk-based en-
tations, this course will help audit team gagement.
leaders and other management level audit

matERi pElatiHan /
cOuRSE OutlinE
• Role of Internal Auditing
• Corporate Governance
• Risk Management
• Control and Risk Frameworks
• Entitywide Risk Assessment
• Risk-Based Audit Engagement.

IIA INDONESIA TRAINING CATALOGUE


22
\ int ERnal auD itO R tinjauan
ES S Ent ial S k illS PELAKSANAAN audit yang efektif dan mem- kan analisis populasi dalam tahapan peren-
berikan nilai tambah bagi organisasi mutlak canaan penugasan. Pelatihan ini juga meng-
membutuhkan pemahaman yang memadai ajarkan auditor bagaimana melaksanakan
Data Analysis for atas populasi yang menjadi obyek audit. Tan- penugasan audit di mana diperlukan peng-
pa pemahaman ini, penugasan akan meng- gunaan sampling baik yang bersifat acak
Internal Auditor gunakan banyak sumber daya dan dalam hal
pemilihan sampel yang dilakukan memiliki
maupun terstruktur. Pemilihan sampling ini
akan mengarah pada pemberian gambaran
risiko tidak menggambarkan populasi secara mengenai populasi secara keseluruhan se-
keseluruhan. hingga risiko kegagalan penyimpulan popu-
Pelatihan ini memberikan pengetahuan lasi dapat diminimalisir.
mengenai kapan dan bagaimana cara melaku-

OvERviEW
THE IMPLEMENTATION of an effective audit and how to perform the analysis of the popula-
and provide added value to the organization tion in the planning stages of the assignment.
absolutely requires an adequate understand- The course is also train auditors how to con-
ing on the population which is the object of duct the audit assignment which required the
the audit. Without this, the assignment will use of both random sampling and
be using a lot of resources and in terms of structured. Selection of sampling would lead
selection of samples conducted at risk of not to giving an overview of the overall popula-
describe the population as a whole. tion so that the risk of failure of population
The course proviades training on when inference can be minimized.

matERi pElatiHan / cOuRSE OutlinE


• Introduction of Data Analysis
• Population Analysis: Frequency Distribution and Case Studies
• Population Analysis: Measures of Central Tendency and Case Studies
• Population Analysis: Comparison with Benchmark and Case Studies
• Population Analysis: Correlation and Time Series Analysis and Case Studies
• Random Sampling Technique
• Non Random Sampling Technique, including an Indication of Red Flag Fraud Analysis.

IIA INDONESIA TRAINING CATALOGUE


23
\ i n t ERnal auD itO R tinjauan
ES S Ent ial S k illS FRAUD berdampak negatif bagi organisasi Auditor internal dapat membantu manajemen
dalam banyak cara termasuk implikasi ke- dengan melakukan deteksi dan investigasi
uangan, reputasi, psikologis dan sosial. fraud ––di saat yang sama–– menentukan
Fraud Detection Menurut berbagai survei, fraud menimbulkan
dampak kerugian moneter yang signifikan.
apakah organisasi memiliki kontrol internal
yang memadai.
& Investigation for Namun, biaya sesungguhnya yang timbul
karena fraud sangat beragam baik dari segi
Program pelatihan ini bertujuan untuk
menunjukkan bagaimana auditor internal
Internal Auditor waktu, produktivitas, maupun reputasi.
Fraud dapat dilakukan oleh karyawan di
memposisikan diri atau setidaknya setara
dalam penerapan metodologi deteksi dan
semua tingkatan dalam sebuah organisasi, investigasi fraud sebelum kerugian besar ter-
serta oleh orang-orang di luar organisasi. jadi pada organisasi. Beberapa kasus aktual
Meskipun manajemen dan dewan bertang- akan digunakan untuk menggambarkan ba-
gung jawab penuh untuk pencegahan fraud, gaimana fraud dilakukan dan bagaimana hal
kegiatan audit internal yang efektif dapat itu akhirnya tertangkap.
sangat membantu dalam mengatasi fraud.

OvERviEW
FRAUD negatively impacts organizations in helpful in addressing fraud. Internal auditors
many ways including financial, reputation, can assist management by performing fraud
psychological and social implications. Ac- detection and investigation ––in the same
cording to various surveys, monetary losses time–– determining whether the organization
from fraud are significant. However, the full has adequate internal controls.
cost of fraud is immeasurable in terms of This program aims to show how internal
time, productivity, and reputation. auditor can try to be ahead or at least on par
Frauds can be committed by an employee in fraud detection and fraud investigation
at any level within an organization, as well as methodologies before major harm occurs
by those outside the organization. Although to the organization. Several actual cases are
management and the board are ultimately used to illustrate how frauds are perpetrated
responsible for fraud deterrence, an effec- and how it was eventually caught.
tive internal audit activity can be extremely

matERi pElatiHan / cOuRSE OutlinE


• Creating an Environment for Dealing with Fraud
• Detecting Fraud in Routine Audits
• Fraud & Technology
• Fraud Exposures and Audit Suggestions
• Investigation for Internal Auditors.

IIA INDONESIA TRAINING CATALOGUE


24
\ int ERnal auD itO R tinjauan
ES S Ent ial S k illS PELATIHAN INI akan memberikan kepada pe- Pelatihan ini juga akan memberikan ke-
serta pengenalan akan audit Teknologi Infor- pada peserta kesempatan untuk melakukan
masi (TI), dengan menekankan pada konsep audit aplikasi TI yang mendukung proses
Fundamental of melalui latihan dan studi kasus. Profesional
audit intern diharapkan akan mengembang-
bisnis utama, mengkoordinasikan penilaian
risiko TI dengan evaluasi kontrol umum TI,
Information kan pengetahuan tentang konsep-konsep
dasar audit TI yang dapat digunakan untuk
dan melakukan penilaian risiko dan evaluasi
kontrol atas aplikasi komputer di pengguna
Technology (IT) memfasilitasi upaya audit yang terintegrasi
dalam organisasi mereka.
akhir.

Auditing
OvERviEW
THIS COURSE will provide attendees with an The course will also provide attendees the
introduction to IT auditing, emphasizing the opportunity to perform an audit of IT applica-
concepts through exercises and case stud- tions supporting key business processes,
ies. Internal audit professionals will develop coordinate the assessment of IT risk with the
knowledge of basic IT audit concepts that can evaluation of IT general controls, and perform
be used to facilitate integrated audit efforts a risk assessment and evaluation of controls
within their organization. over end user computer applications.

matERi pElatiHan / cOuRSE OutlinE


• Overview of IT Auditing, Concepts and Controls: Why IT Auditing and What Is It?
• General Control: Logical Security
• General Control: Business Continuity Planning (BCP), Disaster Recovery (DR), and Back-
up Processing
• Application Controls
• General Control: Change and Patch Management
• Cloud Computing and Service Organization Control (SOC) Reports
• General Control: System Development Lifecycle (SDLC) Technique, including an indica-
tion of Red Flag Fraud Analysis
• End User Computing.

IIA INDONESIA TRAINING CATALOGUE


25
\ i n t ERnal auD itO R tinjauan
ES S Ent ial S k illS AUDITOR sering kali berupaya mencari cara penilaian diri, pelatihan ini akan membantu
untuk melampaui cara audit yang tradisional peserta menentukan kreativitas dan dimensi
atau bukan sekedar audit kepatuhan, Auditor pemecahan masalah secara kreatif. Fasilita-
Creative mencoba untuk menemukan cara-cara baru
untuk bekerja dengan orang-orang yang
tor yang berpengalaman akan menunjukkan
lima strategi untuk kreativitas dan berpikir
Problem-Solving memiliki gaya dan preferensi yang berbeda,
sekaligus berupaya memaksimalkan kekua-
divergen dan menjelaskan aturan-aturan
dasar untuk berpikir konvergen. Pada akhir
Techniques for tan mereka. Dengan kata lain, Auditor beru-
saha untuk menjadi pemecah masalah yang
pelatihan, peserta akan tahu bagaimana un-
tuk melompat ––memulai pendekatan kreatif
Auditor lebih kreatif.
Melalui presentasi fasilitator, diskusi
untuk masalah dan memiliki alat baru yang
dapat segera digunakan untuk pemecahan
kelompok, latihan praktis, studi kasus, dan masalah secara logis.

OvERviEW
AUDITORS often find themselves searching help participants define creativity and the
for ways to go beyond traditional or compli- dimensions of creative problem solving. Ex-
ance auditing, trying to find new ways to perienced facilitators will demonstrate five
work with people who have different styles strategies for creativity and divergent think-
and preferences, while maximizing their ing and explain the ground rules for con-
strengths. In other words, they are seeking to vergent thinking. By the end of the course,
become more creative problem solvers. participants will know how to jump-start cre-
Through facilitator presentations, group ative approaches to problems and have new,
discussions, practical exercises, case stud- immediately usable tools for logical problem
ies, and self-assessments, this course will solving.

matERi pElatiHan / cOuRSE OutlinE


• Dimensions of Creative Problem Solving
• Creativity and Divergent Thinking
• Closure and Action Planning
• Problem Solving and Convergent Thinking
• Styles and Preferences
• Synthesis
• Case Study.

IIA INDONESIA TRAINING CATALOGUE


26
\ int ERnal auD itO R tinjauan
ES S Ent ial S k illS PELATIHAN INI berbentuk seminar yang me- untuk menyesuaian praktik terbaik tersebut
nyajikan berbagai praktik yang terbaik dari kedalam organisasi Anda sendiri. Setelah
unit audit internal kelas dunia. Walaupun mengikuti pelatihan ini, diharapkan peserta
Best Practice in dalam bentuk seminar, pelatihan ini tidak pelatihan mampu menggunakan berbagai
contoh sebagai sebuah model untuk mencip-
sekadar sebuah overview. Peserta pelatihan
Internal Auditing akan mendapatkan alat-alat evaluasi dan
dokumen-dokumen yang terkait. Peserta
takan dan meningkatkan nilai dalam praktik
audit yang Anda lakukan.
pelatihan akan juga akan belajar bagaimana

OvERviEW
This seminar presents a wealth of practices the tools and how to tailor their practices to
from world-class internal audit departments. your own organization. After the seminar, you
This is not just an overview. You will get their will be able to use these examples as models
actual evaluation tools and related docu- to create or enhance your own value-added
ments. You will also learn how they apply practices.

matERi pElatiHan / cOuRSE OutlinE


• The Foundation of Best Practices
• Audit Department Structure and Annual Planning Process
• Value-Added Audit Methodologies
• Risk and Control Self-Assessment
• Other Assurance and Consulting Services
• Internal Audit’s Role in Enterprise Risk Management
• Emerging Practices
• Staffing, Work Environment, Marketing, and Measuring
• How to Get There from Here: Transforming Internal Audit.

IIA INDONESIA TRAINING CATALOGUE


27
\ int ERnal auD itO R tinjauan
E S S Ent ial S k illS COSO adalah kerangka pengendalian internal berpedoman pada enam kerangka utama
yang pertama kali diperkenalkan pada tahun dan 17 prinsip, organisasi dapat mendesain,
1992. COSO telah diadopsi dan diimplemen- mengimplementasi, memelihara serta menilai
COSO 2013: tasikan di banyak organisasi dan negara. kecukupan sistem pengendalian internalnya.
Pada tahun 2013, COSO mengeluarkan Tujuan pelatihan ini adalah membantu
Implementing penyempurnaan atas kerangka pengendalian
internal yang dikeluarkan pada tahun 1992.
auditor internal dalam penerapan kerangka
pengendalian internal pada penugasan audit
The Framework Terdapat perubahan yang signifikan antara
COSO 2013 dengan COSO 1992. COSO 2013
internal. Dengan penerapan kerangka pen-
gendalian internal COSO 2013 ini, auditor
memperjelas kriteria yang ada dan menam- internal dapat memberikan nilai tambah baik
bahkan 17 prinsip dan 81 atribut. Dengan pada penugasan assurance.

(Catatan: Pelatihan ini hanya membahas mengenai konsep kerangka pengendalian internal
dan tidak membahas ICoFR).

OvERviEW
COSO is an internal control framework which principles, organizations can design, imple-
first introduced in 1992. COSO has been ment, maintain and assess the adequacy of
adopted and implemented in many organiza- its internal control system.
tions and countries. The purpose of this training is to assist
In year 2013, COSO issued revision on internal auditors in the implementation of the
the internal control framework issued in 1992. internal control framework during the inter-
There are significant changes between COSO nal audit engagement. By implementing the
2013 compared to 1992. COSO 2013 clari- 2013’ COSO internal control framework, the
fies the existing criteria. In addition, COSO internal auditor can provide added value both
2013 adds 17 principles and 81 attributes. in the assurance or consulting assignment.
With a reference to the 5 main frames and 17

(Note: This training is only discusses the concept COSO internal control framework and do not
discuss regarding the ICoFR).

matERi pElatiHan / cOuRSE OutlinE


• COSO Internal Control–Integrated Framework (IC-IF)
• Risk Assessment
• Control Environment
• Control Activities
• Information and Communication
• Monitoring Activities
• Using COSO Internal Control –Integrated Framework
• Wrap Up.

IIA INDONESIA TRAINING CATALOGUE


28
\ i nt ERnal auD itO R tinjauan
ES S Ent ial S k illS STANDAR Internasional untuk Praktik Profe- bagi auditor internal untuk mengembangkan
sional Audit Internal (Standar) menuntut ak- pengetahuan mengenai kerangka kerja COSO
tifitas audit internal untuk “mengevaluasi dan yang diperlukan untuk melaksanakan peran
COSO-Based memberikan kontribusi pada peningkatan
tatakelola, manajemen risiko, dan proses
dan tanggung jawab auditor dan bagaimana
Aktifitas audit internal memanfaatkan kerang-
Internal Auditing kontrol”. Pelatihan ini meliputi praktik terbaru
kerangka kerja COSO Pengendalian Internal
ka kerja COSO dalam proses audit.
Hari pertama pelatihan fokus pada pe-
(2014) (2013) dan COSO Enterprise Risk Manage-
ment (2004) yang dapat digunakan untuk
ngembangan pemahaman tentang kerangka
kerja COSO pengendalian internal dan mana-
membantu kegiatan Internal Audit sesuai jemen risiko dari perspektif audit internal.
dengan Standar dan memberikan layanan Hari kedua fokus cara memanfaatkan kerang-
yang bernilai tambah. ka kerja COSO dalam proses audit internal.
Pelatihan ini adalah sebuah kesempatan

OvERviEW
THE INTERNATIONAL Standards for the Pro- auditors to develop the level of knowledge of
fessional Practice of Internal Auditing (Stan- the COSO frameworks needed to carry out
dards) require internal audit activities to their roles and responsibilities and 2) Inter-
“evaluate and contribute to the improvement nal audit activities to utilize the COSO frame-
of governance, risk management, and control works in their audit process.
processes”. The course will cover content and The first day of the course focuses on devel-
practices in updated COSO Internal Control oping an understanding of the internal con-
(2013) and COSO Enterprise Risk Manage- trol and risk management frameworks from
ment (2004) Frameworks that can be used to an internal audit perspective. The second day
help Internal Audit activities conform to the of the course focuses on utilizing the frame-
Standards and deliver value-added services. works in the internal audit process.
This course is an opportunity for 1) Internal

matERi pElatiHan / cOuRSE OutlinE


• COSO Frameworks: The Basics
• COSO Internal Control: A Closer Look
• COSO ERM: A Closer Look
• IPPF and COSO Framework Connections
• COSO-Based Audit and Engagement Planning
• Using COSO in Performing The Work
• Using COSO in Communicating The Results.

IIA INDONESIA TRAINING CATALOGUE


29
\ int ERnal auD itO R tinjauan
ES S Ent ial S k illS ENTERPRISE RISK MANAGEMENT (ERM) perusahaan yang menyediakan sebuah jalan
didasarkan pada asumsi bahwa setiap en- yang jelas bagi entitas untuk menciptakan
titas ada untuk memberikan nilai bagi para dan merealisasikan nilai tersebut.
COSO ERM 2016 stakeholder. Prinsip dasar bisnis menyatakan Pelatihan ini menilai bagaimana pendekat-
an berbasis prinsip dapat digunakan untuk
bahwa semakin besar risiko atas keputusan,
semakin besar potensi keuntungan. Ketidak- merancang, mengimplementasikan, meme-
pastian dapat berupa risiko dan peluang. lihara, dan mengevaluasi ERM. Anda akan
Mengintegrasikan manajemen risiko per- memiliki kesempatan untuk mendiskusikan
usahaan di seluruh organisasi meningkatkan implikasi Kerangka yang diperbarui kepada
dalam tatakelola, strategi, penetapan tujuan, profesi audit internal dan kepada kegiatan au-
dan operasi sehari-hari. ERM membantu un- dit internal individu. Anda juga akan mengi-
tuk meningkatkan kinerja dengan lebih meng- dentifikasi peluang untuk menggunakan
hubungkan strategi dan tujuan bisnis baik kerangka yang diperbarui dalam proses audit
risiko dan peluang. Ketekunan diperlukan internal dan meningkatkan nilai jaminan dan
untuk mengintegrasikan manajemen risiko jasa konsultasi.

OvERviEW
ENTERPRISE RISK MANAGEMENT (ERM) required to integrate enterprise risk manage-
is based on the premise that every entity ment provides an entity with a clear path to
exists to provide value for its stakeholders. creating, preserving, and realizing value.
Basic business principles suggest that the This course examines how a principles-
greater the risk associated with a decision, based approach can be used to design,
the greater the potential return that decision implement, maintain, and evaluate ERM. You
will yield. Uncertainty presents both risk and will have an opportunity to discuss the impli-
opportunity. cations that the updated Framework presents
Integrating enterprise risk management to the internal audit profession and to indi-
throughout an organization improves deci- vidual internal audit activities. You will also
sion-making in governance, strategy, ob- identify opportunities for using the updated
jective-setting, and day-to-day operations. It Framework in your internal audit process
helps to enhance performance by more close- and increase the value of your assurance and
ly linking strategy and business objectives consulting services.
to both risk and opportunity. The diligence

matERi pElatiHan / cOuRSE OutlinE


• Applying the Framework: Putting It into Context
• COSO ERM 2016 Framework
• Risk Governance and Culture
• Risk, Strategy, and Objective-Setting
• Risk in Execution
• Risk Information, Communication, and Reporting
• Monitoring Enterprise Risk Management Performance.

IIA INDONESIA TRAINING CATALOGUE


30
Audit
Managerial
Series

IIA INDONESIA TRAINING CATALOGUE


31
\ auDit managE R ia l tinjauan
S ERiES ORGANISASI terdiri dari beberapa unit bis- misalnya internal supplier dan customer,
nis dan aktifitas yang dibentuk dengan tu- risiko proses bisnis terhadap organisasi.
juan untuk membantu organisasi mencapai Tujuan pelatihan ini adalah untuk mem-
Analyzing and tujuannya. Gabungan beberapa aktifitas dari bekali auditor internal dalam melakukan
beberapa unit bisnis atau yang lebih dikenal identifikasi dan analisa proses bisnis utama
Improving dengan istilah proses bisnis inilah yang akan
menjadi faktor penentu keberhasilan organ-
bagi organisasi dan mengevaluasi efektifitas
dan efisiensi proses bisnis tersebut. Hal ini
Business Process isasi.
Karena itu, banyak organisasi berusaha
akan membantu auditor internal untuk mene-
mukan risiko dan hambatan yang signifikan
untuk mengidentifikasi, menganalisa dan dalam proses bisnis. Dengan demikian, au-
mengevaluasi proses bisnisnya. Namun, pada ditor internal dapat memberikan nilai tambah
kenyataannya banyak analisa yang dilakukan bagi organisasi dalam bentuk rekomendasi
hanya bersifat parsial, tidak menyeluruh dan yang tepat.
tanpa mempertimbangkan beberapa faktor

OvERviEW
ORGANIzATIONS consist of several business tion risks associated with those business
units and activities, established with aim to processes.
assist organization to achieve its objectives. This training is prepared with an aim to
The accumulation of several activities from equip internal auditor in identifying and ana-
different business unit known as business lyzing critical business process within an or-
process; ultimately determines an organiza- ganization and how to evaluate business pro-
tion’s success. cesses’ effectiveness and efficiency. By doing
Therefore, organizations try identifying, this, internal auditor can find the significant
analyzing and evaluating its business pro- risks and obstacles within a business pro-
cesses. Nevertheless, in fact, analyses being cess. At the end, internal auditor can provide
conducted in partial, not at a holistic level and added value to the organization by providing
do not consider several factors. For example: appropriate recommendations for improve
internal suppliers and customers, organiza- the business process.

matERi pElatiHan /
cOuRSE OutlinE
• Process Objectives and Risks
• Defining the Process
• Process Mapping
• Customer Mapping
• “Spaghetti” Mapping
• RACI Matrices.

IIA INDONESIA TRAINING CATALOGUE


32
\ au Dit managE R ia l tinjauan
S ERiES PENDEKATAN analisis masalah dan peme- kup lima unsur temuan audit, dan kemudian
cahan masalah dalam audit pada umumnya berfokus pada alat khas yang digunakan
menggunakan pendekatan analisis sebab dalam root menyebabkan analisis. Alat yang
Root Cause akibat (root cause analysis). paling sering digunakan dalam praktik audit
Pelatihan ini mengajarkan tinjauan pro- sebagaimana dinyatakan dalam IIA Practice
Analysis ses audit internal, dan alat-alat yang diguna-
kan dalam mengidentifikasi akar penyebab
Advisory 2320-2: Root Cause Analysis are
discussed and included in practice sessions
masalah-masalah audit. Kursus ini menca- and exercises.

OvERviEW
THIS COURSE provides a review of the in- in complex systems, and provides a basis for
ternal audit process, and the tools used in their usage in risk assessment and control
identifying root causes of audit issues. The identification. Auditors who want to under-
course covers the five elements of an audit stand the tools used in determining the root
finding, and then focuses on the typical tools causes of audit issues should attend this
used in root cause analysis. The most-used course for a: Refresher in the steps in the
tools in the IIA’s Practice Advisory 2320-2: audit process; Review the five elements of
Root Cause Analysis are discussed and in- an audit issue; Practice the most-used tech-
cluded in practice sessions and exercises. niques for root cause analysis of audit issues;
The course also introduces Normal Ac- and Practice linking root causes to the com-
cident Theory and constructing root causes ponents of internal control.

matERi pElatiHan / cOuRSE OutlinE


• Refresher: The Audit Model and Internal Controls
• Reporting Audit Issues
• Using Root Cause Analysis (RCA) Tools.

IIA INDONESIA TRAINING CATALOGUE


33
\ au Dit managE R ia l tinjauan
SE RiES BANYAK UNIT audit internal difokuskan pada kritis yang sudah Anda pahami, skeptisisme
ketaatan pada ketentuan Sarbanes-Oxley, se- profesional, dan penilaian profesional, dan
hingga auditor mungkin tidak memiliki ke- menerapkan konsep-konsep ini untuk berba-
Critical Thinking sempatan yang konsisten untuk belajar dan gai tahap audit –– dari persiapan dan peren-
menerapkan konsep-konsep berpikir kritis canaan, untuk menilai dan pengujian, untuk
for Internal dalam perencanaan dan pelaksanaan audit,
untuk waspada terhadap indikator negatif se-
berkomunikasi dan pelaporan.
Dalam pelatihan ini terdapat berbagai
Auditor lama audit, dan untuk menilai secara signi-
fikansi isu-isu dan bagaimana melaporkan-
metode pembelajaran, termasuk ceramah,
presentasi, diskusi kelas, latihan interaktif,
nya. Auditor lain mungkin ingin menyegar- dan video untuk mendapatkan pengalaman
kan keterampilan berpikir kritis ini. belajar dan memberikan kesempatan bagi
Pelatihan dua hari yang interaktif ini akan peserta untuk berlatih menerapkan konsep-
membantu Anda mengembangkan atau me- konsep ini.
nyegarkan kembali konsep-konsep berpikir

OvERviEW
MANY internal audit departments have been ism, and professional judgment, and apply
focused on Sarbanes-Oxley compliance, so these concepts to various stages of an audit
auditors may not have had consistent op- – from preparation and planning, to assess-
portunities to learn and apply critical thinking ing and testing, to communicating and re-
concepts to planning and executing an audit, porting.
to being alert to negative indicators during an This course includes a variety of learning
audit, and to judging the significance of is- methods, including lecture, presentation, class
sues and how to report them. Other auditors discussion, interactive exercises, video scena-
may simply want to refresh their skills. rios, and participant teach-backs to enhance
This interactive two-day course will help the learning experience and providea variety
you further develop or refresh familiar con- of opportunities for the participants to prac-
cepts of critical thinking, professional skeptic- tice applying and challenging the concepts.

matERi pElatiHan / cOuRSE OutlinE


• Foundation of Critical Thinking
• Applying Concepts to Planning and Interviewing
• Applying Concepts to Assessing and Testing
• Applying Concepts to Communicating and Reporting.

IIA INDONESIA TRAINING CATALOGUE


34
IT & Cybersecurity
Auditor Series

IIA INDONESIA TRAINING CATALOGUE 31


35
\ it & c ybERSE c uR ity tinjauan
au DitOR S E R iE S SERANGAN CYBERSECURITY meningkat dan kerusakan dari serangan yang sukses. Mer-
berkembang sangat cepat sehingga lebih eka telah diadopsi oleh pemerintah, universi-
sulit daripada sebelumnya untuk mencegah tas, dan banyak perusahaan swasta.
Auditing The dan mempertahankannya. Apakah organisasi Kontrol adalah panduan spesifik di mana
Anda memiliki metode efektif untuk mende- CISO, CIO, IGs, administrator sistem, dan
Cybersecurity teksi, menggagalkan, dan memantau ancam-
an eksternal dan internal untuk mencegah
personel keamanan informasi dapat diguna-
kan untuk mengelola dan mengukur efektiv-
Risk & Controls pelanggaran keamanan? Kursus ini mem-
bantu Anda menguasai teknik dan alat khusus
itas pertahanan mereka. Mereka dirancang
untuk melengkapi standar, kerangka kerja,
yang terbukti diperlukan untuk menerapkan dan skema kepatuhan yang ada dengan
dan mengaudit Kontrol Keamanan Kritis memprioritaskan ancaman paling kritis dan
sebagaimana didokumentasikan oleh Pusat pertahanan pembayaran tertinggi, sambil
Keamanan Internet (CIS). memberikan garis dasar umum untuk tindak-
Ketika ancaman berkembang, keamanan an melawan risiko yang kita semua hadapi.
organisasi juga harus. Untuk memungkinkan Kontrol adalah kerangka kerja keamanan
organisasi Anda tetap di atas skenario anca- yang efektif karena didasarkan pada serang-
man yang selalu berubah ini, SANS telah an aktual yang diluncurkan secara teratur
merancang kursus komprehensif tentang terhadap jaringan. Prioritas diberikan kepada
cara menerapkan Kontrol Keamanan Kritis, Kontrol itu
pendekatan keamanan berbasis risiko yang 1. Mengurangi serangan yang diketahui
diprioritaskan. Dirancang oleh para ahli sek- 2. Mengatasi berbagai serangan, dan
tor publik dan swasta dari seluruh dunia, 3. Mengidentifikasi dan menghentikan
Kontrol adalah cara terbaik untuk memblokir penyerang di awal siklus kompromi.
serangan yang diketahui dan mengurangi

matERi pElatiHan / cOuRSE OutlinE 12. Audit/Evaluation Methodologies


Day 1: 13. Evaluation Tools
During day 1, we will cover an introduction 14. Exercise to Illustrate Implementation Or
and overview of the Critical Security Con- Steps for Auditing a Control
trols, laying the foundation for the rest of the
class. Critical Security Controls for Auditing in Day 1:
For each control the following informa- • Critical Control 1: Inventory of Authorized
tion will be covered, and we will follow the and Unauthorized Devices
same outline for each control: • Critical Control 2: Inventory of Authorized
1. Overview of the Control and Unauthorized Software.
2. How it is Compromised
3. Defensive Goals Day 2:
4. Quick Wins During day 2, we will cover the following
5. Visibility & Attribution Critical Security Controls:
6. Configuration & Hygiene • Critical Control 3: Secure Configurations
7. Advanced for Hardware and Software on Laptops,
8. Overview of Evaluating the Control Workstations, and Servers
9. Core Evaluation Test(s) • Critical Control 4: Continuous Vulner-
10. Testing/Reporting Metrics ability Assessment and Remediation
11. Steps for Root Cause Analysis of Failures • Critical Control 5: Controlled Use of Ad-

IIA INDONESIA TRAINING CATALOGUE


36
OvERviEW
Cybersecurity attacks are increasing and CISOs, CIOs, IGs, systems administrators,
evolving so rapidly that it is more difficult and information security personnel can use
than ever to prevent and defend against to manage and measure the effectiveness of
them. Does your organization have an ef- their defenses. They are designed to comple-
fective method in place to detect, thwart, ment existing standards, frameworks, and
and monitor external and internal threats to compliance schemes by prioritizing the most
prevent security breaches? This course helps critical threat and highest payoff defenses,
you master specific, proven techniques and while providing a common baseline for ac-
tools needed to implement and audit the tion against risks that we all face.
Critical Security Controls as documented by The Controls are an effective security
the Center for Internet Security (CIS). framework because they are based on actual
As threats evolve, an organization’s security attacks launched regularly against networks.
should too. To enable your organization to stay Priority is given to Controls that
on top of this ever-changing threat scenario, 1. Mitigate known attacks
SANS has designed a comprehensive course 2. Address a wide variety of attacks, and
on how to implement the Critical Security 3. Identify and stop attackers early in the
Controls, a prioritized, risk-based approach to compromise cycle.
security. Designed by private and public sec- The course shows security professionals
tor experts from around the world, the Controls how to implement the controls in an exist-
are the best way to block known attacks and ing network through cost-effective automa-
mitigate damage from successful attacks. They tion. For auditors, CIOs, and risk officers, the
have been adopted by governments, universi- course is the best way to understand how you
ties, and numerous private firms. will measure whether the Controls are effec-
The Controls are specific guidelines that tively implemented

ministrative Privileges Critical Security Controls:


• Critical Control 6: Maintenance, Moni- • Critical Control 16: Account Monitoring
toring, and Analysis of Audit Logs and Control
• Critical Control 17: Security Skills As-
Day 3: sessment and Appropriate Training to Fill
During day 3, we will cover the following Gaps (validated manually)
Critical Security Controls: • Critical Control 18: Application Software
• Critical Control 7: Email and Web Brows- Security
er Protections • Critical Control 19: Incident Response
• Critical Control 8: Malware Defenses and Management (validated manually)
• Critical Control 9: Limitation and Control • Critical Control 20: Penetration Tests and
of Network Ports, Protocols, and Services Red Team Exercises (validated manually)
• Critical Control 10: Data Recovery Capa-
bility (validated manually) Who Should Attend:
• Critical Control 11: Secure Configura- 1. Information assurance auditors
tions for Network Devices such as Fire- 2. System implementers or administrators
walls, Routers, and Switches 3. Network security engineers
4. IT administrators.
Day 4:
During day 5, we will cover the following

IIA INDONESIA TRAINING CATALOGUE


37
\ it & c ybER S E c uR ity tinjauan
au DitOR S E R iE S SELAMA bertahun-tahun, telah ada diskusi dalam melakukan pemantauan terhadap kon-
tentang apakah semua auditor harus memiliki disi-kondisi yang perlu diperhatikan dalam
keahlian Analisa Data dan Computer Assisted rangka melakukan persiapan audit dan peng-
Continuous Audit Audit Techniques (CAATs). Terhadap hal ini, ukuran risiko mikro dari obyek yang akan
di audit. Konsep ini memungkinkan Internal
Institute of Internal Auditor telah menerbitkan
& Data Analytics pedoman sebagai berikut ini:
“In exercising due professional care, in-
Audit memahami risiko dengan tepat, mem-
prioritaskan sumber daya audit dengan tepat
ternal auditors must consider the use of tech- dan mendapatkan ruang lingkup pemeriksaan
matERi pElatiHan:
nology-based audit and other data analysis yang tepat pula.
• Memahami konsep Continuous Auditing
dan data Analytics
techniques.” (IIA Standard 1220.A2) Selain itu peserta juga diberikan pema-
• Memahami konsep Database Core Bank- “Auditor internal harus memiliki penge- haman mengenai proses bisnis dan operasi-
ing Application yang banyak digunakan tahuan yang cukup, termasuk pengetahuan onal Kartu Kredit dan Kartu Debit, Perkreditan
• Memahami cara memahami proses bisnis berbasis teknologi untuk melakukan pekerja- dan Trade Finance untuk dapat memahami
dan risiko Perkreditan, operasional Kartu an yang ditugaskan.” (The International Pro- beberapa kondisi yang perlu dicermati dalam
Kredit dan Kartu Debit, serta Trade Finance fessional Practice Framework – IIA IPPF) analisa data dan continuous audit. Diharapkan
4. Memahami aplikasi Generalized Audit Keahlian terhadap penggunakan CAATs peserta dapat membuat script analisa data.
Software secara pendekatan praktis dan telah menjadi patokan atas kemampuan Pelatihan ini diharapkan dapat memberi-
tidak hanya teori saja. teknis dan keahlian profesional seorang au- kan panduan mengenai teori dan teknik
5. Memahami dan dapat melakukan query
ditor selain tentunya pengetahuan terhadap praktis penggunaan CAATs. Selain itu akan
terhadap data Perkreditan, Kartu Kredit/
proses/produk internal dan pengetahuan dilakukan workshop terhadap penggunaan
Debit dan Trade Finance untuk mencari
kondisi abnormal yang perlu dicermati. mengenai metode dan standar audit. salah satu Generalized Audit Software yang
6. Dapat melakukan scripting dan pelaporan Selain itu konsep continuous audit juga terkenal untuk keperluan pembuatan script
atas hasil query data itu diatas untuk ke- memberikan kemampuan bagi Internal Audit analisa data.
perluan pelaporan Continuous Audit.

cOuRSE OutlinE: OvERviEW


1. Understand the concept of Continuous monitoring the conditions that need to be
Over the years, there has been discussion
Auditing and Data Analytics
about whether all auditors should have Data considered in order to prepare the audit and
2. Understanding the concept of Database
from Core Banking Application is widely
Analysis and Computer Assisted Audit Tech- measurement of the micro risk of the object to
used niques (CAATs) expertise. Against this, the be audited. This concept allows the Internal
3. Understand how to understand business Institute of Internal Auditors (IA) has issued Audit to understand the risks appropriately,
processes and risks Credit, Credit Card the following guidelines: prioritize audit resources appropriately and
and Debit Card operations, and Trade Fi- “In exercising due professional care, in- get the right scope of examination as well.
nance ternal auditors must consider the use of tech- In addition participants are also provided
4. Understand Generalized Audit Software nology-based audit and other data analysis with an understanding of the business pro-
applications in a practical approach and techniques.” (IIA Standard 1220.A2) cesses and operations of Credit and Debit
not just theory alone. “IA should have sufficient knowledge, Card, Credit and Trade Finance to understand
5. Understand and can query credit data,
including technology-based knowledge to some of the conditions that need to be exam-
Credit / Debit Card and Trade Finance to
perform assigned work.” (The International ined in data analysis and continuous audit. It
find the abnormal condition that need to
be observed. Professional Practice Framework (IIA IPPF) is expected that participants can create a data
6. Can perform scripting and reporting on Expertise on CAATs’ use has become a analysis script.
the results of the above data query for the benchmark for the auditor’s technical skills This training is expected to provide guid-
purpose of reporting Continuous Audit. and professional expertise as well as knowl- ance on the theory and practical techniques
edge of internal processes/products and of CAATs use. In addition, a workshop will be
knowledge of audit methods and standards. conducted on the use of one of the famous
In addition, the concept of continuous Generalized Audit Software for the purposes
audit also provides the ability for the IA in of creating data analysis scripts.

IIA INDONESIA TRAINING CATALOGUE


38
\ it & c ybERS E c uR ity tinjauan
au DitOR S E R iE S BANYAK UNIT audit internal difokuskan pada kritis yang sudah Anda pahami, skeptisisme
ketaatan pada ketentuan Sarbanes-Oxley, se- profesional, dan penilaian profesional, dan
hingga auditor mungkin tidak memiliki ke- menerapkan konsep-konsep ini untuk berba-
Third Party sempatan yang konsisten untuk belajar dan gai tahap audit –– dari persiapan dan peren-
menerapkan konsep-konsep berpikir kritis canaan, untuk menilai dan pengujian, untuk
and Vendor dalam perencanaan dan pelaksanaan audit,
untuk waspada terhadap indikator negatif se-
berkomunikasi dan pelaporan.
Dalam pelatihan ini terdapat berbagai
Management lama audit, dan untuk menilai secara signi-
fikansi isu-isu dan bagaimana melaporkan-
metode pembelajaran, termasuk ceramah,
presentasi, diskusi kelas, latihan interaktif,
Auditing nya. Auditor lain mungkin ingin menyegar-
kan keterampilan berpikir kritis ini.
dan video untuk mendapatkan pengalaman
belajar dan memberikan kesempatan bagi
Pelatihan dua hari yang interaktif ini akan peserta untuk berlatih menerapkan konsep-
membantu Anda mengembangkan atau me- konsep ini.
nyegarkan kembali konsep-konsep berpikir

OvERviEW
COMPANIES are increasingly relying on a risks.
complex ecosystem of (global) third parties Last year, almost 55% of CAEs identified
for critical business services. While achiev- control deficiencies in third-party relation-
ing cost reductions and lower working capi- ships, perhaps not surprising given the grow-
tal levels, firms have increased their financial, ing eco-system of third parties to execute core
operational, compliance, and reputational business functions, most specifically contract
risk exposures through these arrangements. workers and outsourcing service providers. In
In response, companies should re-evalu- addition, ongoing macroeconomic woes and
ate their operating models to ensure an appro- commodity price volatility have increased
priate balance between efficiency gains and the risk of severe supply chain disruptions.
the effective management of these third-party

matERi pElatiHan / cOuRSE OutlinE


1. Pengkajian & Perencanaan Risiko Audit / Audit Risk Assessment & Planning
2. Tahap Inisiasi Audit / Audit Initiation Phase
a. Vendor Due Diligence & Selection
b. Perjanjian Kontrak / Contract & Agreement
3. Audit pada Tahap Implementasi / Audit on Implementation Phase
a. Tinjauan Kontrol & Kepatuhan Internal / Internal Control & Compliance Review
b. Pemantauan Kualitas & Kinerja Layanan / Service Quality & Performance Monitoring
c. Pemantauan Kondisi Keuangan / Financial Condition Monitoring
d. Kesinambungan Bisnis Pihak Ketiga / Third Party Business Continuity
4. Peraturan Eksternal & Nasional tentang Proses Pihak Ketiga dan Outsource. /
External & National Regulation on Third Party and Outsourced Process.

IIA INDONESIA TRAINING CATALOGUE


39
\ i t & c ybERS E c uR ity tinjauan
au DitOR S E R iE S $ 5,4 JUTA – itu adalah biaya rata-rata pe- pakar industri terkemuka, pelatihan ini akan
langgaran data ke perusahaan berbasis AS. memeriksa pengendalian preventif, detektif,
Tidak mengherankan bila cybersecurity ada- dan korektif, dan bagaimana menerapkan
Cybersecurity lah topik hangat dan tantangan utama dalam proses audit dalam lingkungan “Cloud”.
audit internal saat ini. Cybersecurity adalah Anda juga akan dikenalkan dengan lingkung-
Auditing in an risiko bisnis yang sama dengan keamanan,
sehingga penting bagi auditor internal untuk
an “mobile” dan “cyber standard”, serta bel-
ajar bagaimana audit atas solusi keamanan
Unsecure World mengembangkan keahlian yang dibutuhkan
untuk menghadapi tantangan ini.
bersama.
Pelatihan ini dirancang untuk Internal
Dalam pelatihan ini, Anda akan mengem- Auditor yang terlibat dalam audit TI atau me-
bangkan pemahaman tentang konsep cyber- reka yang terlibat dalam kegiatan audit yang
security yang dapat digunakan untuk mem- memerlukan pemahaman tentang bagaimana
fasilitasi upaya audit terpadu dalam organi- mengelola dampak kejadian cybersecurity
sasi Anda. Dikembangkan dan difasilitasi terhadap risiko bisnis.

$5.4 million — that’s the average cost of a facilitated by leading industry experts, this
data breach to a U.S.-based company. It’s course will examine preventive, detective,
no surprise, then, that cybersecurity is a hot and corrective controls, and how to apply the
topic and a major challenge in internal au- audit process to a cloud environment. You
diting today. Cybersecurity is as much of a will also be exposed to the mobile environ-
business risk as it is a security one, making ment and cyber standards, as well as learn
it critical for internal auditors to develop the how to audit common security solutions.
skill set needed to take on these challenges. This course is designed for internal audi-
In this course, you will develop an under- tors involved in IT audits or those involved in
standing of cybersecurity concepts that can audit activities that require an understanding
be used to facilitate integrated audit efforts of how to manage the impact of cybersecurity
within your organization. Developed with and events on business risks.

matERi pElatiHan / cOuRSE OutlinE


• Sekilas Cybersecurity
• Pengendalian Preventif
• Pengendalian Detektif
• Pengendalian Korektif
• Standar Cyber
• Risiko Cybersecurity, Cyber Liability Insurance, dan State Notification Laws
• Menerapkan Proses Audit di Lingkungan “Cloud” atau Penyedia Layanan Pihak Ketiga
• Lingkungan “Mobile” , BYOD dan Jaringan Sosial
• Audit atas Solusi Keamanan Bersama.

IIA INDONESIA TRAINING CATALOGUE


40
\ aDDit iOnal S E R iE S

Risk Control Self-Assessment (RCSA):


Metode dan Penerapan Sesuai ISO 31010 Risk Assessment Techniques
dalam Rangka Penerapan Enterprise Risk Management
SinOpSiS 5. Memahami metode, konsep dan elemen trol dengan berbasis ISO 31010 (disertai
Risk Control Self Assessment adalah salah RCSA serta pelaksanaannya sesuai ISO dengan contoh kertas kerja)
satu teknik ‘risk assessment’ yang dapat di- 31010 dan IIA CCSA 4. Pengembangan metode review atas hasil
gunakan untuk membangun kultur kepedu- 6. Memahami penerapan fasilitator RCSA RCSA (disertai contoh kertas kerja)
lian terhadap risiko serta sekaligus melaku- dalam organisasi. 5. Perancangan Manual/Prosedur Penerapan
kan pengukuran terhadap risiko dan kontrol RCSA.
yang mulai dari level yang paling rendah SilabuS
(bottom-up) untuk memastikan apakah risiko HARI:1 HARI:2
telah teridentifikasi dengan lengkap dan kon- I. Pengenalan dan Latar Belakang RCSA III. Pelatihan Menjadi Fasilitator RCSA
trol telah diterapkan dengan efektif. 1. Peranan RCSA dan hubungannya de- 1. Teknik Perencanaan RCSA
RCSA adalah salah satu teknik yang di- ngan audit internal 2. Identifikasi sumber daya & penanggung-
akui dalam penerapan ISO31000 Risk Man- 2. Peranan Auditor dalam RCSA jawab risiko dan kontrol
agement Standard dan ISO31010 Risk As- 3. Manfaat dan tantangan dari RCSA 3. Teknik pengumpulan & validasi data de-
sessment, selain itu Institute of Internal Au- 4. Alasan penerapan dan bagaimana RCSA ngan kuesioner menggunakan Ms. Excel
ditor (IIA) juga telah memberikan panduan dapat berdampak organisasi 4. Teknik Client Feedback Mechanism (In-
pelaksanaan sertifikasi Control Self Assess- 5. Pentingnya mengidentifikasi tujuan bis- terview, Survey)
ment yang di dalamnya terdapat metode serta nis/organisasi dalam RCSA 5. Teknik fasilitasi & penyelenggaraan dis-
teknik merancang metode dan penerapan 6. Hubungan antara tujuan, risiko, & kontrol kusi (facilitated workshop)
fasilitator RCSA yang sangat penting dalam di RCSA 6. Penggunaan teknologi dalam RCSA
menunjang keberhasilan RCSA dalam rangka 7. Teori & model kerangka kerja manajemen (sentral database, electronic voting/email
penerapan Enterprise Risk Management. risiko sesuai ISO 31000 voting, project management software) di-
8. Teknik dokumentasi dan perancangan sertai demo penerapannya menggunakan
manFaat yang akan DipEROlEH kontrol (hard/soft, formal/informal) tools Ms.outlook dan Ms. Project
1. Memahami tujuan bisnis dan kinerja or- 9. Fraud awareness dalam penerapan RCSA 7. Teknik persiapan presentasi dan sosial-
ganisasi (red flags/symptom fraud) isasi RCSA
2. Memahami konsep manajemen risiko se- 10. Standar dan kerangka kerja RCSA (ISO 8. Teknik pelaporan hasil RCSA
suai ISO 31000 31010 dan IIA CCSA) 9. Teknik motivasi dan monitoring terhadap
3. Mampu mengidentifikasi risiko dan me- 11. Faktor yang mempengaruhi implemen- tindak lanjut hasil RCSA.
lakukan analisa risiko sesuai ISO 31010 tasi RCSA dan penilaian keberhasilan/
4. Memahami teknik perancangan & peng- efektifitas RCSA. Group discussion: Praktik Penerapan RCSA
ukuran kontrol sesuai COSO 2013 Faciliator dan Pengisikan kuesioner Risk &
II. Perancangan Metodologi RCSA Control dalam rangka memberikan simulasi
1. Perancangan dan pengukuran tingkat ke- pelaksanaan RCSA
TRAINING
PERIOD: DAYS2 matangan risiko dalam organisasi (Risk
Maturity Profile) Keterangan: Semua sample kertas kerja akan
2. Perancangan Control Framework dengan diberikan kepada peserta. Peserta diharapkan
menggunakan COSO 2013 (disertai den- membawa Laptop karena konten workshop
gan contoh kertas kerja) yang lebih mengutamakan praktik dan pe-
3. Pengembangan kuesioner Risk & Con- nerapan.

IIA INDONESIA TRAINING CATALOGUE


41
\ availablE O n R E q uE S t

intERnal auDit ESSEntial SkillS


1. Financial Auditing for Internal Auditors
2. Leadership Skills for Auditors
3. Communication Skills for Auditors
4. Consulting: Activities, Skills, Attitudes
5. Operational Auditing: Evaluating Procecurement and Sourcing
6. Operational Auditing: Evaluating The Supply Chain.

intERnal cOntROl anD RiSk managEmEnt SERiES


1. Assesing Risk: Ensuring Internal Audit’s Value
2. Value-Add Business Controls: The Right Way to Manage Risk
3. Control Self-Assesment: An Introduction
4. Control Self-Assesment: Facilitation Skills.

auDit managERial SERiES


1. Evaluating Organizational Ethics
2. Coorporate Governance: Strategics for Internal Audit
3. Coorporate Social Responsibility: Opportunities for Internal Audit
4. Performing An Effective Quality Assesment
5. Performance-Based Auditing in The Public Sector.

IIA INDONESIA TRAINING CATALOGUE


42
\ Ou R ac t iv itiE S

General Membership Meeting

Awareness Month National Conference

Chief Auditor Executive Forum Training and Workshop

Professional Auditor Forum Advocacy

IIA INDONESIA TRAINING CATALOGUE


43
\ tEntang iia in D O n E S ia THE INSTITUTE OF INTERNAL AUDITOR INDONESIA (IIA Indonesia) adalah organisasi
profesional non-profit yang didedikasikan untuk kemajuan dan pengembangan profesi audit
internal di Indonesia. Didirikan pada tahun 1989 sebagai bagian dari The Institute of Internal
Auditors Inc, USA dan ditingkatkan statusnya menjadi National Institute pada tahun 2008
ketika jumlah anggota kami telah mencapai lebih 500 orang.
“Progress Through Sharing”. IIA Indonesia mempertahankan moto “Progress Through
Sharing” dan sesuai dengan semangat berbagi, kami merasa bertanggung jawab untuk berbagi
informasi dengan anggota kami seputar tren terbaru, teknik audit internal terbaru, peraturan
dan hukum, dan isu-isu yang muncul yang mempengaruhi profesi .
Afiliasi ke The IIA, USA. IIA Indonesia berafiliasi dengan The Institute of Internal Auditor Inc
(The IIA), USA, badan dunia yang didirikan pada tahun 1941 oleh sekelompok kecil auditor
internal berdedikasi yang menginginkan suatu organisasi yang dapat mewakili profesi mereka
dan dapat memberikan pendidikan dan standar profesi untuk praktik audit internal. Melalui
afiliasi anggota kami dapat berbagi bermacam hal secara kolektif dengan lebih dari 170.000
anggota di lebih dari 165 negara dan wilayah.

\ viS i, miS i Da n tuj ua n Visi Menjadi wadah nasional profesi audit internal: melakukan advokasi nilai-nilai,
mempromosikan praktik terbaik, dan menyediakan layanan yang terbaik kepada
para anggotanya. Misi Memberikan kepemimpinan yang dinamis bagi profesi global
audit internal. Kegiatan dalam mendukung misi ini akan mencakup:
1. Advokasi dan mempromosikan nilai profesional audit internal yang dapat memberikan
nilai tambah bagi organisasi mereka;
2. Memberi pendidikan profesional yang komprehensif dan kesempatan untuk pengem-
bangan; standar dan bimbingan praktik profesional lainnya; dan program sertifikasi;
3. Meneliti, menyebarkan, dan mempromosikan kepada para praktisi dan pemangku
kepen-tingan pengetahuan mengenai audit internal dan peran yang tepat dalam kon-
trol, manajemen risiko, dan tata kelola;
4. Menginformasikan kepada praktisi dan pihak lain yang relevan tentang praktik-praktik
terbaik dalam audit internal; dan
5. Mengajak seluruh auditor internal untuk berbagi informasi dan pengalaman.

Tujuan strategis IIA Indonesia adalah tanggap terhadap isu-isu penting yang diha-
dapi audit internal di Indonesia saat ini dan di masa depan. Tujuannya adalah:
l Prioritas Strategis No 1 –– Meningkatkan Kesadaran
Meningkatkan kesadaran audit internal di Indonesia baik dari swasta maupun pemerintah,
dan mendorong auditor internal untuk dapat memberikan nilai tambah yang signifikan
bagi organisasinya.
l Prioritas Strategis No 2 –– Meningkatkan Jumlah Anggota IIA Indonesia
Meningkatkan jumlah anggota IIA Indonesia melalui promosi seputar IIA dan audit internal.
l Prioritas Strategis No 3 –– Meningkatkan Jumlah Pemegang CIA
Meningkatkan jumlah pemegang Certified Internal Auditor (CIA) di Indonesia dengan
membantu anggota IIA-Indonesia dan auditor internal lainnya dalam mempersiapkan diri
menghadapi ujian sertifikasi CIA.
l Prioritas Strategis No 4 - Memberikan Pelatihan Dan Pendidikan
Memberikan pelatihan dan pendidikan di Indonesia untuk anggota IIA dan auditor internal
lainnya, bersama-sama dengan produk pendidikan lainnya.

IIA INDONESIA TRAINING CATALOGUE


44
THE INSTITUTE OF INTERNAL AUDITORS INDONESIA (IIA Indonesia) is a non-profit pro- a b O u t i i a i n D O n ESia /
fessional organisation dedicated to the advancement and the development of the internal audit
profession in Indonesia. Established in 1989 as a Chapter of The Institute of Internal Auditors
Inc, USA and elevated to the status of a National Institute in 2008 when our membership
exceeded 500.
“Progress Through Sharing”. The Institute maintains its motto “Progress Through Shar-
ing” and in keeping with the spirit of sharing, we make it our responsibility to share with our
members information on new trends, latest internal audit techniques, regulatory and statutory
requirements and the emerging issues affecting the profession.
Affiliation to The IIA Headquarter, USA. IIA Indonesia is affiliated to The Institute of Internal
Auditors Inc (The IIA), USA, a worldwide body founded in 1941 by a small group of dedi-
cated internal auditors who wanted an organization that would represent their profession and
provide educational activities and standards for the professional practice of internal auditing.
Through our affiliation our members are able to share in a collective wisdom of more than
170,000 members in over 165 countries and territories.

Vision To be the national voice of the internal audit profession: Advocating its value, vi Si On , m i SS i O n a nD /
promoting best practice, and providing exceptional service to its members. Mission O b j E c t i vES
To provide dynamic leadership for the global profession of internal auditing. Activi-
ties in support of this mission will include:
1. Advocating and promoting the value that internal audit professionals add to their
organisations;
2. Providing comprehensive professional educational and development opportunities;
standards and other professional practice guidance; and certification programmes;
3. Researching, disseminating, and promoting to practitioners and stakeholders know-
ledge concerning internal auditing and its appropriate role in control, risk manage-
ment, and governance;
4. Educating practitioners and other relevant audiences on best practices in internal
auditing; and
5. Bringing together internal auditors to share information and experiences.
Strategic The IIA’s strategic objectives are in response to the most important issues
facing internal auditing in Indonesia today and in the future. The objectives are:
l Strategic Priority No. 1 – Raise Awareness.
Raise awareness of internal auditing in Indonesia with both private and government
organizations, and promote internal auditors as
adding significant value to these organizations.
l Strategic Priority No. 2 – Increase Number Of IIA-Indonesia Members.
Increase number of IIA-Indonesia members through promotion of the IIA and internal
auditing.
l Strategic Priority No. 3 – Increase Number Of CIAs.
Increase number of Certified Internal Auditors (CIAs) in Indonesia by assisting IIA-
Indonesia members and other internal auditors in
successfully completing the CIA exam.
l Strategic Priority No. 4 – Provide Training And Education.
Provide training and education in Indonesia to IIA members and other internal audi-
tors, together with other educational products.

IIA INDONESIA TRAINING CATALOGUE


45
IIA INDONESIA TRAINING CATALOGUE
46
IIA INDONESIA TRAINING CATALOGUE
47
The Institute of Internal Auditors Indonesia
Gedung Bina Sentra, 1st Floor, Suite 103
Komplek Bidakara, Jl. Jend. Gatot Subroto Kav. 71-73
Jakarta 12870 - Indonesia
Telephone : +62 21 8378 2174
Facsimile : +62 21 8378 2175
Mobile : +62 812 8805 7901
Email : info@iia-indonesia.org
Website : www.iia-indonesia.org

IIA INDONESIA TRAINING CATALOGUE


48

Anda mungkin juga menyukai