Building an Internal Audit Program: Best Practices and Foundations

Internal audit is a critical control function, but many organizations build programs reactively, after something goes wrong. This webinar covers how to build or mature an internal audit program with the right structure and scope from the start. Using real-world examples, we’ll illustrate common program gaps, how regulators and boards assess audit function maturity, and what separates a program that provides genuine assurance from one that checks a box.

We’ll also cover what happens after the audit: structuring findings, escalation, and remediation tracking so the program drives real accountability, evidenced by a real example of how our Internal Audit and Enterprise Compliance partner on third-party oversight.

Walk away with a practical framework for scoping your audit universe, prioritizing risk, and building a program that earns credibility with leadership and external stakeholders.

Discussion topics

• Common internal audit program gaps and what they signal to regulators and leadership
• Core program components: audit universe, risk-based planning, and annual cadence
• Structuring findings, escalation paths, and remediation tracking for real accountability
• Partnering with Enterprise Compliance on third-party oversight audits
• Best practices for elevating your program from a checkbox activity to the organizations internal trusted advisor

AHIMA Certification

Eligibility: Both live and on-demand attendees are eligible to receive an AHIMA-accredited CEU for attending this webinar.

Requirement: Attend for a minimum of 45 minutes to qualify, live or on-demand.

‍CEU Policy & Process Notes:

• No exceptions can be made.
• CEU-eligible participants will receive an email with a link to download their CEU within one (1) business day from [email protected].
• The participant must ensure that their name and email address are entered correctly at the time of registration.
• The participant is responsible for ensuring that their organization’s email settings do not block emails from [email protected].