“Week 3’s change evidence pack stopped our team from screenshot-hoarding. We still wanted more industry verticals, yet the core drills stuck.”
Flagship course
ITGC Trace Lab
Six weeks of structured practice for operating an IT general controls financial audit app without losing the risk story.
Learning outcomes
- Translate entity-level IT risks into testable control objectives inside the application
- Build access and change evidence packs that survive second review
- Document operations monitoring with restore and incident linkages
- Write exception narratives that separate design gaps from operating misses
Informational pricing
Controls Desk seating from RM 1,890 per learner. Audit Floor team packs from RM 7,400 for five seats. No checkout on this site — contact us to enroll. Full tier notes on Pricing.
Modules
Week 1 — Risk framing in the app
Map financial statement assertions to ITGC folders, naming conventions, and ownership fields.
Week 2 — Logical access populations
Extract, filter, and sample user access with explicit judgment notes.
Week 3 — Change & migration evidence
Ticket completeness, approvals, and post-implementation checks that match ticket systems.
Week 4 — Operations & resilience proof
Jobs, backups, restores, and incident bridges without theatrical severity language.
Week 5 — Exceptions & aggregation
When a miss becomes a finding, and how to roll up without burying context.
Week 6 — Partner-ready memo lab
Compress the file into a short ITGC narrative with linked artifacts.
Instructor
Priya Raman
Former IT audit manager who spent nine years across KL and Singapore engagements. Priya now designs Devstack Tools labs with an emphasis on application-native evidence language and calm review craft.
FAQ
Do I need a specific audit platform license?
No. Labs run in our Audit Studio sandbox that mimics common IT general controls financial audit app patterns. You do not upload client data.
Is this only for IT auditors?
Financial audit seniors who own ITGC reliance decisions attend often. Mixed pairs learn faster.
What is a real limitation of the course?
We do not teach deep ERP configuration. If your findings live mostly in SAP security roles or Oracle configs, you will still need specialist enablement after Trace Lab.
Can we customize screens to our tool names?
Audit Floor and Assurance Circle seats include a vocabulary overlay. Open cohorts stay on the shared sandbox.
Course reviews
★★★★☆
“Dense but fair. The limitation FAQ about ERP depth matched our experience — good that they say it outright.”