Flagship course
Audit & Compliance Fundamentals
Forty-one guided hours to run a financial auditing app for data security compliance reporting — from first sample to a quarterly pack your committee can follow.
Learning outcomes
- Configure sampling windows and owner fields so exports stay attributable.
- Document encryption and access-control tests with residual risk that is neither vague nor alarmist.
- Assemble a quarterly compliance pack with clear cross-references to app evidence.
- Explain PDPO-relevant retention choices in language Hong Kong reviewers recognize.
Instructor
Hannah designs exercises from real reporting calendars — year-end crunch, interim reviews, and the awkward week after a control owner leaves.
Modules
- Module 1 — Desk setup Map your reporting calendar, roles, and the app’s evidence objects before any testing begins.
- Module 2 — Sampling that survives scrutiny Build windows, document exclusions, and keep a retraceable trail.
- Module 3 — Security control tests Encryption, access, logging — write findings that point to artifacts, not slogans.
- Module 4 — Exception narrative Turn open items into readable residual risk without hiding severity.
- Module 5 — Quarterly pack assembly Structure, cross-links, and a committee-facing summary page.
- Module 6 — Clinic & review Live critique of a redacted pack excerpt you submit.
Informational pricing
Individual Control Room enrollment is listed at HKD 3,280. Assurance Circle team cohorts and Field Notes alumni refreshers are on the pricing page. This site does not process payments.
FAQ
Do I need a specific vendor’s auditing app?
We teach patterns that transfer across common financial auditing apps. Exercises use a generic interface so you are not locked to one brand — but you should have access to whatever tool your firm already uses for practice.
Is this legal or regulatory advice?
No. Training illustrates reporting craft and evidence habits. Your firm’s counsel and policies remain authoritative.
What is a real limitation of this course?
We do not provision production audit environments or migrate your historical workpapers. If your firm’s data cannot leave the corporate network, you will need a redacted local sandbox — we can advise on structure, but we cannot host your confidential datasets.
How much live time is included?
Control Room includes four clinics plus one written review. Self-paced Ledger Path learners can add clinics later as seats allow.
Learner notes
“Module 5’s pack skeleton cut our formatting debates in half. The live clinic still felt short when three of us queued questions.”
Daniel Ng · Risk reporting, Kowloon
★★★★☆
Solid on export discipline. I wanted more screenshots for our older tool version, but the principles still applied.