Auditing for Business Transparency and Integrity Training Course

Course overview

Every company publishes a code of conduct. Far fewer can show evidence that it changes behavior. Integrity is asserted in the annual report, then contradicted by a procurement file with a single bidder, an expense policy nobody enforces at senior level, or a speak-up channel that has received no reports in two years and is treated as good news. Auditing for transparency and integrity is the work of testing the gap between what an organization says about itself and what its records show.

This course covers governance and compliance auditing, fraud and misconduct risk, ethical and cultural assessment, and integrity reporting to the board and to external stakeholders. It draws on the COSO control environment, the IIA International Professional Practices Framework, ISO 37001 for anti-bribery management systems, and disclosure expectations under sustainability reporting standards.

Why integrity has become an audit subject

Reputational damage now arrives faster than any control cycle. A supplier's labor practices, an undisclosed conflict of interest, a misleading sustainability claim: each is a governance failure that surfaces publicly before the audit function has looked at it. Investors and regulators have responded by asking for evidence rather than assertion, particularly on non-financial disclosures, where anti-greenwashing scrutiny has sharpened considerably.

Culture is the awkward part. It is not directly auditable, but its symptoms are. Exception approvals concentrated in a handful of managers, a rising rate of policy waivers, exit interviews that repeat the same complaint, tone-at-the-top statements that no middle manager can recall: these leave traces, and an auditor who knows where to look can report them without pretending to have measured the unmeasurable.

Course objectives

By the end of the course, participants will be able to:

• Design an audit around what stakeholders accept as evidence.
• Scope disclosure obligations and voluntary reporting commitments.
• Challenge conflicts of interest declared once and never revisited.
• Probe payments routed through third-party agents.
• Sample journal entries and vendor records for fraud signals.
• Detect retaliation that followed a report of misconduct.
• Evaluate incentive targets that reward what the code prohibits.
• Report integrity findings the board must act on.
• Verify that a fix was still in place a full cycle later.

Course outline

Unit 1: Foundations of business transparency and integrity

• Transparency, integrity and accountability as tested claims.
• The COSO control environment evidencing tone at the top.
• Stakeholder expectations and the evidence each group seeks.
• Sustainability disclosure standards and who checks them.

Unit 2: Governance and compliance auditing

• Board minutes that record challenge or unanimous consent.
• Delegated authority, approval limits and the split payment.
• Sampling ISO 37001 due diligence and facilitation payments.
• Related party transactions and a stale gifts register.

Unit 3: Fraud and misconduct risk audits

• Fraud risk assessment across payroll and journal entries.
• Duplicate vendors, out-of-hours postings and Benford tests.
• Auditing a whistleblowing line that receives no reports.
• Stopping an audit for evidence preservation and counsel.

Unit 4: Ethical and cultural audits

• Waiver rates, override frequency and survey trends.
• Designing interviews that surface behavior, not agreement.
• Testing incentive structures against the code of conduct.
• Reporting cultural findings and stating their limits.

Unit 5: Reporting and sustaining integrity

• Writing a board finding: exposure, root cause and decision.
• Remediation that changes incentives, not policy wording.
• Public claims the sampled evidence does not fully support.
• Reassessing integrity indicators through independent review.

How the course is delivered

The course runs on documented case material: enforcement actions, published investigation reports, conflict registers and audit findings that participants examine and debate. Worked examples take a set of transaction data through the analytics that expose misconduct patterns. Discussion is central, since integrity questions rarely have one correct answer, and participants are encouraged to bring their own situations. The course is educational, does not certify participants or organizations, and is not legal advice. Those who want the legal accountability angle in more depth should look at Corporate Ethics and Legal Accountability.

Who should attend

• Internal auditors extending their coverage into governance, ethics and culture.
• Compliance, ethics and integrity officers responsible for codes of conduct and speak-up channels.
• Governance and company secretariat professionals supporting the board.
• Risk managers and executives accountable for conduct and reputational risk.

About EuroQuest International Training

EuroQuest International Training was founded in 2015 by a team with more than 25 years of experience in professional development. We deliver over 1,000 courses and have trained more than 15,000 participants, with a head office in Bratislava, Slovakia, and hubs in Dubai, London, Barcelona, Istanbul, Vienna, Paris and Geneva. Courses are developed and reviewed by practitioners from the fields they teach.

Frequently asked questions

Can culture really be audited?

Not directly, and the course is careful about that. What can be tested are the traces culture leaves in data and records: waivers, overrides, incentives, complaints, and how the organization responded to them. The reporting language has to stay within what that evidence supports.

Is this course about ESG reporting?

Sustainability disclosure appears where it touches transparency and assurance, but the course is about integrity across governance, conduct and fraud, not a technical course on ESG reporting standards.

Does the course provide legal guidance for a misconduct case?

No. It explains how auditors should preserve evidence and escalate, but investigations with legal consequences need qualified counsel. The course is educational and is not legal advice.

Related courses

• Creating a Culture of Compliance and Accountability
• Developing Audit Reports with Impact
• Fraud Detection and Prevention Strategies
• Corporate Compliance and Internal Audit Best Practices

Register for this course

Select a city and date from the schedule above and register, or contact the EuroQuest team about delivering the course in-house for an audit, compliance or governance team.