Course overview
Start hereAI for IT Auditors
START HERE

Priya's Wednesday, two ways

9 lessons · 23 prompts

A day in the life of an IT Auditor: what changes with these prompts.

Track progress as a member

Priya, an IT auditor at a mid-sized insurance company.

Priya starts her Wednesday with a client call about a new cloud access control. She opens ChatGPT and uses the 'Explain and review' prompt to get a plain-English summary of the control framework the client mentioned. She reads it quickly, then asks two follow-up questions in the chat. By the time the call starts, she feels ready.

After the call, she needs to draft an audit program for that control. She uses the 'Draft audit programs' prompt in Claude. She gives it the control objective and a few details about the client's system. The AI returns test steps and interview questions. Priya edits them to fit the client's setup and saves the program.

In the afternoon, she has a finding to write about user access reviews. She uses the 'Document findings' prompt in Gemini. She types in the condition, criteria, cause, and effect. The AI formats it into a clear finding with a recommendation. Priya checks the wording and adds a specific example from her testing.

By 4:30, she has also used the 'Write audit reports' prompt to draft an executive summary for her manager. She leaves work on time and takes her daughter to soccer practice. The hour she saved from drafting goes to studying for her CISA exam that evening.

Before

  • Drafting findings takes all afternoon
  • Client emails pile up unanswered
  • Risk ratings feel like guesswork
  • Reports get rewritten three times

After this course

  • Findings drafted before lunch
  • Client updates sent on time
  • Risk ratings backed by clear reasons
  • Reports approved on first review

What you'll learn

  • Explain and review: Get plain-English explanations of controls and standards, and compare policies to frameworks.
  • Draft audit programs: Turn a control objective into a ready-to-use audit program with test steps and interview questions.
  • Document findings: Write clear, defensible findings in the condition-criteria-cause-effect format.
  • Assess IT risks: Build a fuller risk picture and turn it into register entries with sensible ratings.
  • Test data and sampling: Justify your sample and get working scripts to test full populations.
  • Write audit reports: Turn raw findings into a polished report with an executive summary management will read.
  • Communicate with clients: Handle requests, updates, and closing-meeting prep with clear communication.
  • Learn and upskill: Keep your knowledge current and study for certifications with a plan built around your gaps.

How this course works

  1. 9 lessonsOne task of your job each, from explain controls and frameworks to learn and upskill.
  2. Ready-to-paste promptsCopy, fill in the parts in {{brackets}}, paste into ChatGPT, Claude or Gemini.
  3. Tick and completeTick the prompts you tried and mark each lesson complete.
  4. Get certifiedFinish and keep the prompts as your own library.