Internal Auditor of Fraud Control Management Systems (ISO 37003)
The course “Internal Auditor of Fraud Control Management Systems (ISO 37003)” is designed to prepare professionals responsible for planning, organizing, conducting, and documenting internal audits of fraud control management systems (FCMS).
Participants will study the requirements of ISO 37003:2025, including fraud risk assessment, verification of the conformity of policies and procedures, analysis of fraud indicators, evaluation of audit evidence, preparation of audit conclusions and reports, as well as monitoring of corrective and preventive actions. The course also covers the requirements of ISO 19011 for planning, conducting, documenting, and evaluating the effectiveness of internal management system audits. A separate module is dedicated to the updates to ISO 19011:2026 for internal audit practice, including the key changes to the standard and the application of remote audit methods.
Duration
54 hours
Language
English/Ukrainian
Format
100% online
Course objective
The objective is to train internal auditors capable of professionally planning, conducting, documenting, and evaluating internal audits of an implemented FCMS (in accordance with ISO 37003), taking into account the guidelines of ISO 19011, as well as formulating well-founded audit conclusions and recommendations for improving the FCMS.
Target audience
The course is intended for professionals responsible for the operation, maintenance, and improvement of an FCMS, risk management, security, and internal control professionals, as well as personnel involved in conducting internal audits in accordance with the requirements of ISO 37003:2025 and ISO 19011:2018.
Document on completion
Upon successful completion of the course, participants are awarded a certificate conferring the qualification “Internal Auditor of Fraud Control Management Systems”, listed in the international SIC register.
Thematic plan
The course has a total duration of 54 hours and consists of 3 training modules.
Objectives
Module 1 — Description of the requirements of ISO 37003:2025 “Fraud control management systems. Guidance for organizations managing the risk of fraud”. SIC.MODULE.ISO37003:2025
| # | Тopic | Hours |
| 1 | Introduction to the FCMS | 5 |
| 2 | Context of the organization as a fundamental basis of the FCMS | 3 |
| 3 | Leadership, culture and fraud control policy | 3 |
| 4 | Risk-based planning of the FCMS | 2 |
| 5 | Resources and documentation of the FCMS | 3 |
| 6 | Operational activities and processes of the FCMS | 4 |
| 7 | Evaluation and analysis of the effectiveness of the FCMS | 1 |
| 8 | Corrective actions and improvements to the FCMS | 2 |
| 9 | Testing | 1 |
| Hours total | 24 |
Module 2 — Conducting internal audits of management systems in accordance with ISO 19001. SIC.MODULE.ISO19011
| # | Topic | Hours |
| 1 | Audit classification and objectives | 3 |
| 2 | Audit terminology and principles | 4 |
| 3 | Audit program management | 3 |
| 4 | Audit conducting and reporting | 4 |
| 5 | Competence and personal qualities of the auditor | 2 |
| 6 | Testing | 1 |
| 7 | Case-reviews | 1 |
| Hours total | 18 |
Module 3 — ISO 19011:2026 – updates for internal auditors. SIC.MODULE.ISO19011:2026
| # | Topic | Hours |
| 1 | Key changes in ISO 19011:2026 for internal audit practice | 2 |
| 2 | Remote audit methods: selection of audit methods, evaluation of audit locations, and on-site auditing | 1 |
| 3 | Audit programme: a risk-based approach | 1 |
| 4 | Audit planning and organization using remote and hybrid audit methods | 2 |
| 5 | Methods for obtaining audit evidence | 1,5 |
| 6 | Evaluation of digital evidence and documented information | 1 |
| 7 | Competence of the internal auditor | 1 |
| 8 | Updating the internal auditor’s working tools | 1 |
| 9 | Case studies | 1 |
| 10 | Testing | 0,5 |
| Hours total | 12 |
© 2026 - sic.academy