Audit Institute

12:30 PM – 01:00 PM

Registration 

01:00 PM – 05:00 PM

Introduction to Bank Internal Audit

This session provides an overview of the bank internal audit function, including its role, responsibilities, and importance within corporate governance and the three lines of defense. It covers foundational concepts such as internal control definitions, control types, and methods for testing controls; introduces the COSO internal control framework; and explains how internal audit interacts with the board, audit committee, management, regulators, and external auditors.

This session also addresses internal audit charters, auditor skillsets, the internal audit lifecycle from planning through reporting, fraud risks and prevention, and key updates to the Institute of Internal Auditors’ Global Internal Audit Standards, with an emphasis on independence, objectivity, risk management, and value-added assurance.

05:00 PM – 05:30 PM

Review

08:00 AM – 12:00 PM

Introduction to Risk Assessments

This session introduces the fundamentals of risk assessment as a critical component of internal audit and bank risk management, focusing on how risks are identified, analyzed, measured, and prioritized to support risk-based audit planning. It covers core risk concepts; major risk categories including strategic, financial, operational, compliance, technology, and human capital; development of the audit and risk universe; and methodologies for assessing inherent and residual risk using impact and likelihood criteria.

This session also addresses best practices for executing and documenting risk assessments, linking results to the internal audit plan, and effectively communicating outcomes, such as heat maps and summaries, to management and the audit committee to enhance governance, resource allocation, and organizational value.

12:00 PM – 01:00 PM

Lunch

01:00 PM – 05:00 PM

Planning the Audit

This session focuses on effective planning of internal audit engagements, emphasizing how thoughtful planning drives audit quality and value. It covers key planning considerations such as understanding the engagement context, gathering information, and assessing preliminary risks; establishing clear, risk-based engagement objectives; defining and documenting an appropriate audit scope; and allocating sufficient and competent resources.

This session also highlights best practices for documenting planning activities, including planning memoranda, risk and control matrices, and approvals, to ensure audits are well-scoped, aligned with organizational objectives, responsive to key risks (including fraud), and executed efficiently in accordance with professional standards. 

05:00 PM – 05:30 PM

Review

08:00 AM – 04:30 PM

Designing and Executing the Audit Program: Bank Information Systems

This session provides a comprehensive, auditor-focused overview of IT and cybersecurity risk management within banks, covering core IT audit concepts, terminology, and methodologies, and emphasizing the auditor’s role in ensuring confidentiality, integrity, and availability of data.

This session will also address IT governance and organizational controls; risk assessment and policy frameworks; logical user access and segregation of duties; IT operations controls including backups, processing, and hardware management; physical security and environmental safeguards; business continuity, disaster recovery, and incident response planning; and vendor management, including due diligence, monitoring, and SOC report evaluation.

The content is designed to equip auditors with a practical, structured approach to understanding, testing, and assessing IT controls to support regulatory compliance, operational resilience, and effective risk mitigation. 

12:00 PM – 01:00 PM

Lunch

04:30 PM – 05:00 PM

Review

08:00 AM – 11:00 AM

Data Analytics/Auditing Assets 

This session introduces the use of data analytics as a practical and powerful tool to enhance internal audit effectiveness by analyzing large volumes of data efficiently and systematically. It covers core data concepts such as structured data and relational databases; key categories of analytics including population, people, trending, and transaction-focused analyses; and commonly used tools such as spreadsheets and data analysis software.

This session demonstrates how data analytics can be applied in real audit scenarios—including journal entries, loans, and accounts payable/employee expenditures—using techniques such as Benford’s Law, trend analysis, standard deviation, and user behavior analysis to identify anomalies, focus audit procedures, and detect potential fraud or control weaknesses. 

11:00 AM – 04:30 PM

Auditing Assets

This session provides a comprehensive overview of internal audit considerations for a bank’s asset portfolio, focusing on audit objectives, key risks, internal controls, and accounting requirements across major asset classes.

The presentation covers auditing loans and the full lending lifecycle; allowance for credit losses, including methodologies, qualitative factors, and red flags; investments and related valuation, classification, and interest rate risks; other real estate owned (OREO); cash and due from banks; and other assets such as BOLI, mortgage servicing rights, intangibles, and deferred tax assets.

Emphasis is placed on financial statement assertions, data integrity, segregation of duties, and effective use of internal control questionnaires to support sound asset governance and risk management.

12:00 PM – 01:00 PM

Lunch

04:30 PM – 05:00 PM

Review

08:00 AM – 04:30 PM

Auditing Liabilities/Other Areas

This session covers internal audit approaches for a bank’s liabilities and key operational processes, with a focus on deposits, official checks and other liabilities, borrowings, payment systems, and operational efficiency. It addresses audit objectives, inherent risks, and internal controls related to deposit accounts (including confirmations, employee and internal-use accounts, escheatment, and check kiting), official checks, safe deposit boxes, and night depository services.

This session also explores auditing other borrowings such as Federal Reserve and FHLB advances, federal funds, and repurchase agreements, as well as operational areas including remote deposit capture, wire transfers, ACH processing, regulatory examinations, and operational audits. Emphasis is placed on safeguarding assets, segregation of duties, regulatory compliance, fraud prevention, and identifying opportunities to improve profitability and operational effectiveness. 

12:00 PM – 01:00 PM

Lunch

04:30 PM – 05:30 PM

Review 

08:00 AM – 12:00 PM

Delivering Audit Results & Reporting

This session focuses on effectively communicating internal audit insights and results to drive meaningful action and improvement. It emphasizes the importance of “selling” audit outcomes by positioning internal audit as a valueadding management resource, fostering a collaborative team approach with auditees, and tailoring communication to different manager personalities and decisionmaking styles.

This session also covers best practices for presenting issues and recommendations, supporting management in decision implementation, and conducting timely and effective followup to ensure corrective actions address root causes, achieve intended results, and appropriately escalate unresolved or highrisk matters.

10:00 AM – 12:40 PM

Certification Exam

Held via ICBA Online Portal for those enrolled in the Certified Community Bank Internal Auditor (CCBIA) certification program. The certification exam will be available following the conclusion of the institute. You will be able to access and complete the exam any time after the institute adjourns. 

However, you must complete the exam no later than the exam time shown above. The exam is timed, and you will be allotted the same amount of time to complete the exam no matter when you choose to take it. 

Note - If you do not pass the exam, you will have the opportunity to retake the exam at a future retake date. The retake exam is scheduled for Thursday, May 14.