Learn IT Audit from the fundamentals to real-world application.

IT auditing is about more than understanding risks and controls. Effective IT auditors need to understand how technology works, what can go wrong, what controls should exist, and how to test whether those controls are actually working.

That's what this course is designed to teach.

We'll start with the foundations of IT Audit, including risks and controls, walkthroughs, controls testing, audit evidence, and evaluating control effectiveness.

From there, you'll learn how to audit two critical areas: Change Management and Access Management. We'll first cover the core concepts and then apply them in Azure DevOps, where you'll see how auditors evaluate repositories, branches, pull requests, build and release pipelines, privileged access, approvals, segregation of duties, and production deployments.

We'll then step inside the world of Datacenter Auditing, covering the operations and physical infrastructure that keep technology running, including power and cooling, infrastructure resiliency, hardware repairs, datacenter technicians, logistics, inventory, and data-bearing devices.

Finally, you'll learn how to turn your audit work into a clear and impactful audit report, including how to develop audit issues, assess risk, determine report ratings, and communicate results through executive summaries and key insights.

This course is designed for aspiring IT auditors, internal and external auditors, technology risk professionals, and experienced auditors looking to strengthen their technical and practical auditing skills.

No coding, Azure DevOps, or prior IT audit experience is required. Technical concepts are explained from an auditor's perspective.

The goal isn't to give you a checklist to memorize. It's to teach you how to think like an IT auditor, so you can walk into a technology environment, understand how it works, identify what could go wrong, determine which controls matter, and know how to test them.

What you'll learn

Understand the fundamentals of IT Audit, risks, controls, and controls testing

Audit Access Management and Change Management

Apply audit concepts hands-on within Azure DevOps

Understand and audit datacenter operations and infrastructure

Evaluate audit evidence and identify control issues

Assess risk and report ratings

Write clear, executive-ready audit reports

Understand IT audit as a career and what the profession looks like in practice

Who this course is for:

Aspiring IT auditors who want to understand what IT auditing actually looks like in practice and build the skills needed to enter the profession.
Students and early-career professionals interested in careers in IT audit, technology risk, internal audit, cybersecurity, or related fields.
Current IT auditors who want to strengthen their practical and technical auditing skills, particularly across modern technology environments.
Internal and external auditors looking to better understand how to audit Access Management, Change Management, Azure DevOps, software development processes, and datacenter operations.
Risk, compliance, and technology professionals who want to better understand how auditors identify technology risks, evaluate controls, perform testing, and communicate audit results.
Anyone preparing to transition into IT audit from accounting, finance, technology, cybersecurity, compliance, or another professional background.