Start a conversation ↗

Description

Internal Control: Mapping Risks, Formalising and Sustaining the Framework

Build a proportionate internal control framework and keep it alive beyond the procedures binder

  • 2 days — 14 h
  • In-person or virtual
  • Foundation
  • Up to 6 participants

Many organisations operate an internal control framework that is formal yet ineffective. Procedures exist but no longer reflect actual practice. The risk map is updated once a year and then filed away. Controls are performed without leaving any usable evidence. On audit day, the framework proves nothing.

These two days provide a construction method. You identify risks from processes as they are genuinely executed. You distinguish first-line controls from second-line controls. You draft testable control sheets and organise the escalation of exceptions. You leave with a deployment plan proportionate to your organisation.

Learning objectives

  • Position internal control in relation to internal audit and risk management
  • Map the risks of a process based on how it actually runs
  • Design proportionate first-line and second-line controls
  • Draft a control sheet that is usable and traceable
  • Organise the follow-up of exceptions and action plans

What makes this programme different

Mapping of a process brought in by the participants
Control sheets drafted and then tested between participants
Phased deployment plan built at the end of the session

Programme

1Framing the Control Environment

Internal control, internal audit and risk management

  • Objectives and scope of internal control
  • Roles of the lines of defence
  • Responsibilities of executives and managers
  • Proportionality according to size and activity

2Identifying and Assessing Risks

Starting from the process, not from the framework document

  • Process description and breakpoints
  • Identification of gross risks
  • Rating of impact and likelihood
  • Consideration of existing controls

3Designing the Controls

Few controls, but genuinely performed

  • First-line controls embedded in the role
  • Second-line controls and sampling
  • Drafting the control sheet
  • Control evidence and traceability

4Keeping the Framework Alive

From documentation to active management

  • Planning controls across the year
  • Handling exceptions and action plans
  • Indicators and reporting to management
  • Updating the framework and periodic review

Who is it for

Internal control managers and officers, internal auditors, process owners and executives of organisations formalising their framework.

Prerequisites

No prerequisites

Dates & locations

36 scheduled dates between November 2026 and December 2027. Seats are confirmed in the order enquiries are received.

November 2026

December 2026

January 2027

February 2027

March 2027

April 2027

May 2027

June 2027

September 2027

October 2027

November 2027

December 2027

None of these dates suit you? We open additional sessions on request, and any programme can be run privately for your team.

Practical details

Before the programme
Online positioning questionnaire. Your development objectives are shared with the trainer, who tailors the practical case studies to your context.
Teaching methods
Theoretical input, workshops and practical case studies. Digital course materials and method sheets provided.
Assessment
Multiple-choice tests and role-play exercises. Assessment of learning at the start and end of the programme, with immediate and 60-day follow-up evaluations.
After the programme
One year of access to the e-learning platform. Self-assessment of the skills acquired and a 30-day follow-up session with your trainer.
How to register
Registration online or on the basis of a quotation.
Lead time
11 working days after confirmation of registration.
Accessibility
Accessible to people of determination. Contact our accessibility coordinator to design a suitable solution: contact@mpf-academy.ae
Start dates
Rolling intake: in addition to the scheduled sessions, this programme can start on request.