Professional Training

Workshops and cohorts that build audit, AI governance, and GRC skills inside your team.

Our work is advisory. We don't perform financial statement audits or provide attest services.

Build the skills inside your team.

The challenge

Frameworks and stan­dards only work when your peo­ple can apply them. Hiring for every skill gap isn't re­al­is­tic, and gener­ic cours­es rarely match the sys­tems your team ac­tu­al­ly runs.

How we help

Our pro­grams give your peo­ple the skills to test con­trols, in­ter­pret stan­dards, and make risk-based de­ci­sions long after we've gone. Sessions are built around your sys­tems and frame­works, with ex­er­cis­es drawn from real sit­u­a­tions and tem­plates your team can reuse the next day.

We teach at every level: the prac­ti­tion­ers who do the test­ing, the man­agers who re­view and re­port it, and the ex­ec­u­tives and board mem­bers who need to ask the right ques­tions.

Formats: live workshops, multi-session cohorts, and custom programs built around your team and systems.

Our train­ing builds prac­ti­cal skills. It doesn't re­place pro­fes­sion­al cer­ti­fi­ca­tion pro­grams.

Good fit if you want your own peo­ple, not out­side con­sul­tants, to carry the work for­ward.

Related topics

  • IT audit training
  • AI governance training
  • AI audit training
  • GRC training
  • Board technology risk briefings

Services in Professional Training

Select a service to see what it covers.

IT Audit Fundamentals

ITGC and application control testing for auditors and control owners, with exercises drawn from real systems.

A practical program on testing IT general controls and application controls, built around exercises from real systems. Participants leave with templates they can use on their next audit.

What's included

  • ITGC and application control testing
  • Evidence and workpaper standards
  • Hands-on exercises

Ask about this service

AI Governance for Risk and Technology Teams

AI governance for risk, compliance, and technology teams, from inventory and risk tiering to human oversight.

Covers how to inventory AI, tier its risk, design approval paths, and make human oversight meaningful. Sessions use examples from your own systems where possible.

What's included

  • AI inventory and risk tiering
  • Policy and approval design
  • Human oversight in practice

Ask about this service

AI Audit for Internal Auditors

How to plan, scope, and test AI as an internal auditor, with procedures your team can reuse.

Shows internal auditors how to scope AI risk, test AI controls and human oversight, and document their conclusions. Includes procedures your team can reuse.

What's included

  • Risk-based AI audit planning
  • Testing AI controls and oversight
  • Reusable procedures and templates

Ask about this service

GRC Program Design and Technology Risk Reporting

How to design a working GRC program and report technology risk so leaders can act on it.

Covers how to build a risk and control library that works, apply risk appetite to real decisions, and report technology risk so leaders can act on it.

What's included

  • Risk and control library design
  • Risk appetite in practice
  • Board-ready risk reporting

Ask about this service

Third-Party Risk and SOC Report Review

Vendor tiering, due diligence, and how to read a SOC report, including the user entity controls it assigns to you.

Teaches teams to tier vendors, run proportionate due diligence, and read a SOC report critically, including the user entity controls it assigns to you.

What's included

  • Vendor tiering and due diligence
  • Reading SOC reports critically
  • User entity controls

Ask about this service

Executive and Board Briefings

Focused briefings on technology and AI risk for directors and executives who need to ask the right questions.

Short, focused sessions for directors and executives on technology and AI risk in plain language, built around the questions a board should be asking.

What's included

  • Technology and AI risk in plain language
  • The questions boards should ask
  • Tailored to your organization

Ask about this service

Explore our other practice areas

IT & Cybersecurity Audit Advisory

Risk-based IT audits, ITGC and application control testing, and cybersecurity and cloud assessments, with findings owners can act on.

Learn more about IT & Cybersecurity Audit Advisory

Governance, Risk & Compliance

Risk assessments, security policies, vendor oversight, and SOC 2 and ISO 27001 readiness, run as one connected program.

Learn more about Governance, Risk & Compliance

AI Governance

AI readiness, inventory, policy, and oversight, so every use of AI is visible, valuable, and accounted for.

Learn more about AI Governance

AI Risk, Security, and Audit

Risk assessments, security control reviews, and audits that show whether your AI holds up in daily use, and not only in policy.

Learn more about AI Risk, Security, and Audit

Data Privacy

Know what personal data you hold, where it goes, and whether your controls keep the promises in your privacy notice.

Learn more about Data Privacy

Forensic Accounting & Fraud Risk

Evidence-first analysis of financial irregularities, and of the control gaps that let them happen.

Learn more about Forensic Accounting & Fraud Risk

View All Services

Ways to work with us

Project engagements

A defined scope, timeline, and deliverable, such as an IT review, an AI governance build, or a remediation plan.

Advisory support

Ongoing access to senior guidance as your program, systems, and regulators change.

Audit capacity support

Added hands and specialist skill for your internal audit or risk team, working under your direction.

Training programs

Workshops and cohorts for your team, delivered on a schedule that suits you.

How we engage

  1. Discovery

    A short call to understand your situation.

  2. Scoping

    A written scope with deliverables, timing, and fees.

  3. Delivery

    Regular check-ins and findings you can read in one sitting.

  4. Follow-up

    A review of progress, plus support for what comes next.

Common questions

Are you a CPA firm?

No. We're a risk and tech­nol­o­gy ad­vi­so­ry firm. We don't per­form fi­nan­cial state­ment au­dits or issue audit opin­ions.

Can you help us prepare for SOC 2 or a similar report?

Yes, on the readi­ness side: gap as­sess­ment, con­trol de­sign, and ev­i­dence prepa­ra­tion. The re­port it­self must come from a li­censed CPA firm.

Do you work with our internal and external auditors?

Yes. We co­or­di­nate with in­ter­nal audit, your ex­ter­nal au­di­tors, and your com­pli­ance team so work isn't du­pli­cat­ed.

How long does an engagement take?

It de­pends on scope. After a scop­ing call, you'll get a time­line in writ­ing.

What size organizations do you work with?

Mid-mar­ket and en­ter­prise or­ga­ni­za­tions across in­dus­tries.

Will you keep our information confidential?

Yes. We'll sign an NDA be­fore you share sen­si­tive de­tails.

Can you assess an AI program you helped design?

No. We don't audit or as­sess an AI pro­gram, sys­tem, or use case we de­signed for the same client. If an en­gage­ment would cross that line, we'll tell you dur­ing scop­ing.

Is this legal advice?

No. We sup­port reg­u­la­to­ry align­ment from a risk and con­trols per­spec­tive. For legal ques­tions, work with coun­sel.

Not sure which service fits?

Describe the problem. We'll tell you where to start.

Talk to an Advisor