Continuing Professional Education · Self-Study
IT Audit & Analytics
Built from primary sources · statutes, standards & official guidance
- CPE credits
- 8 CPE credits
- Lessons
- 8 lessons
- Field of study
- Auditing
- Pass requirement
- 70% to pass
Lessons
0 of 8 completed- The IT Audit Risk ApproachNot started~88 min
- IT General Controls — Access, Change & OperationsNot started~88 min
- Application controls & automated business rulesNot started~88 min
- SOC 1 & SOC 2 reports: reading them like an auditorNot started~88 min
- Data analytics in audit planning & risk assessmentNot started~87 min
- Audit data tooling: extraction, cleaning & testingNot started~89 min
- Continuous auditing & monitoringNot started~88 min
- Cybersecurity considerations for the financial-statement auditorNot started~89 min
Progress is saved in this browser. Each lesson's final exam requires a score of 70% or higher to earn that lesson's CPE credit.
Course details
Program information
- Delivery method
- QAS Self-Study
- Program level
- Intermediate — Intermediate-level: the course assumes foundational audit knowledge and builds the IT-audit and analytics toolkit — the AU-C 315 IT risk approach, ITGC testing across the three pillars, application-control reliance, SOC report evaluation, analytics design in planning, hands-on data tooling, continuous auditing models, and cybersecurity's touchpoints with the financial-statement audit.
- Prerequisites
- Foundational audit knowledge.
- Advance preparation
- None
- Final exam
- 70% to pass · Unlimited retakes; each lesson's final exam allows repeated attempts. · Questions and answer options are presented in fixed order on every attempt.
- Content last reviewed
- 2026-09-22
- Accessibility
- Slide decks are text-based HTML. Voice narration (where produced) is accompanied by its full written script on the Listen tab. Worksheet keyboard operability and screen-reader behavior have not been formally tested.
- Refund policy
- Draft — pending attorney and CPA review. Full refund within 30 days of enrollment, provided you have not passed the final assessment and have not been issued a CPE certificate. Once a certificate is issued, the enrollment is non-refundable.
- Complaint resolution
- Draft — pending attorney and CPA review. Email support with your full name, contact information, course title, and a description of the issue, including relevant dates and supporting detail.
CPE credit basis
NASBA word-count formula: (words ÷ 180 + questions × 1.85) ÷ 50, rounded down. Narration of the text adds no separate minutes. Claimed credit never exceeds computed credit.
| Lesson | Words | Questions | Computed | Claimed |
|---|---|---|---|---|
| 1. The IT Audit Risk Approach | 9,095 | 20 | 87.5 min · 1.5 credits | 1 credit |
| 2. IT General Controls — Access, Change & Operations | 9,224 | 20 | 88.2 min · 1.5 credits | 1 credit |
| 3. Application controls & automated business rules | 9,212 | 20 | 88.2 min · 1.5 credits | 1 credit |
| 4. SOC 1 & SOC 2 reports: reading them like an auditor | 9,100 | 20 | 87.6 min · 1.5 credits | 1 credit |
| 5. Data analytics in audit planning & risk assessment | 9,079 | 20 | 87.4 min · 1.5 credits | 1 credit |
| 6. Audit data tooling: extraction, cleaning & testing | 9,293 | 20 | 88.6 min · 1.5 credits | 1 credit |
| 7. Continuous auditing & monitoring | 9,184 | 20 | 88 min · 1.5 credits | 1 credit |
| 8. Cybersecurity considerations for the financial-statement auditor | 9,263 | 20 | 88.5 min · 1.5 credits | 1 credit |
Please read
Educational material only. This course is for continuing professional education and does not constitute legal advice, audit guidance beyond the professional standards, or authoritative interpretation of those standards. Verify all requirements against the current primary authorities: the AICPA Professional Standards (AU-C 315, 330, 402, 500, 520, 530), the AICPA Audit Data Analytics Guide, the NIST Cybersecurity Framework 2.0, and the SEC's cybersecurity disclosure rules. Standards change; this course reflects research conducted in September 2026.