Practitioners who understand the audit room
AAA is a specialist education provider for internal audit, risk, compliance, and assurance teams. Our faculty brings banking, quantitative, technology, and governance experience into every program.
IIA Authorized CPE Sponsor #84920
In-person and live virtual seminars
Executive Seminars on Data Analytics and Artificial Intelligence for Banking Internal Audit.
Audit Analytics Academy helps internal audit teams at commercial banks, investment institutions, and financial service providers apply modern data science and AI with confidence. Build capability through practical Python, machine learning, private LLM, risk, and full-population testing programs.
12,000+
Bank Auditors Trained
19
Seminar programs
All Prices in USD
Corporate program pricing
Accredited by and Aligned with Premier Global Audit Bodies
Academic Curriculum Portfolio • 19 Programs
Seminars for Banking Internal Audit
Practical masterclasses for internal auditors in banking and financial services, spanning data, AI, financial crime, technology risk, treasury, ESG, and audit leadership. In-person programs run as intensives; virtual programs are structured as 2–3 hour sections across several days.
Technological Impact Statement
The Transformation of Internal Audit Through Data & AI
Modern banking operations generate terabytes of digital footprints every day. Audit Analytics Academy equips internal auditors to replace manual sample testing with continuous computational assurance and AI analytics.
| Audit Dimension | Traditional Audit Testing | The Data & AI Audit Paradigm |
|---|---|---|
| Audit Population Coverage | Manual sample testing (25–50 transactions selected from Excel spreadsheets). Huge statistical blind spots. | 100% Full-Population Testing. High-performance Python and SQL scripts evaluating every single general ledger and transaction record in seconds. |
| Anomaly & Outlier Detection | Basic spreadsheet sorting and static threshold filters that miss subtle, complex patterns. | Machine Learning Outlier Detection. Unsupervised algorithms (Isolation Forests, Autoencoders) identifying multi-dimensional fraud and unauthorized activity. |
| Document & Covenant Analysis | Manual reading of sample loan covenants, derivative contracts, and operational guidelines. | Private Generative AI Ingestion. Sovereign enterprise LLMs parsing hundreds of contracts simultaneously, extracting terms and flagging deviations automatically. |
| Process & Workflow Verification | Walk-through interviews with process owners and review of static Visio diagrams. | Empirical Process Mining. Extracting digital transaction timestamps from SAP and Temenos to reveal actual unauthorized bypasses and SoD violations. |
| Workpaper Documentation | Manual cut-and-paste into Word documents and fragmented spreadsheet exhibits. | Automated Code-Driven Workpapers. Python scripts auto-generating structured 5-attribute findings with reproducible mathematical proof. |
Institutional Diagnostic Tool
Audit Data & AI Maturity Benchmark
Evaluate where your internal audit department ranks on the data and AI maturity curve across five core technical dimensions.
Institutional Heritage
About Audit Analytics Academy
Established in 2012 by Chief Audit Executives and quantitative finance professors, the Institute serves as the leading academy for independent assurance in an algorithmic economy.
Vision
Definitive International Benchmark
To establish the definitive international standard for data-driven financial assurance—empowering internal audit professionals to operate with equal technical authority and statistical rigor as the systems they inspect.
Mission
Upskilling Internal Audit in Data and AI
To advance the practice of internal audit in banks and financial institutions through hands-on seminars, applied data science training, and evidence-led assurance techniques aligned with IIA expectations.
Audit Ethics in the AI Era
The FASTR-Audit Ethical Principles
In accordance with the IIA Code of Ethics, internal auditors are trained to adhere to five core ethical principles when deploying and evaluating data & AI:
F
Fairness
Ensuring transactional audit algorithms and data analysis procedures remain objective, unbiased, and statistically sound.
A
Auditability
Demanding that every script, query, and AI-generated workpaper can be independently reproduced with timestamped datasets.
S
Sovereignty
Enforcing strict bank secrecy and confidentiality by deploying local, private AI models without external data leakage.
T
Transparency
Requiring explainability for all analytical exceptions so finding descriptions are easily understood by Audit Committees.
R
Robustness
Rigorous validation of audit data pipelines to prevent false positives and verify data integrity before reporting.
The AAA Difference
A Specialist Partner for Financial Services Audit
Like established financial-services academies, AAA combines practitioner faculty, applied casework, and flexible delivery for regulated institutions.
Turn complex topics into repeatable practice
We teach teams how to plan risk-based audits, interrogate data, challenge models, review financial crime controls, and communicate findings through guided labs and realistic bank case files.
Built capability across global banking teams
Professionals from JPMorgan, Citibank, Bank of America, Deutsche Bank, BNP Paribas, and Commerzbank have joined AAA seminars. Participation references and employee quotations are shared only with the institution’s permission.
Institutions represented in participant groupsJPMorgan · Citibank · Bank of America · Deutsche Bank · BNP Paribas · Commerzbank
We welcome approved client references and attributed employee feedback where written permission has been provided.
Corporate Team Training
In-House Seminars for Banking Audit Teams
Upskill your entire internal audit department with dedicated cohorts tailored to your bank's specific technology architecture, risk profile, and core banking systems. Choose on-site delivery or a live virtual classroom.
Tailored to Your Core Banking Systems
Exercises and virtual labs customized around your institution's specific database schemas (Temenos T24, Avaloq, SAP, Finacle, Murex).
Dedicated Practice Environments
On-site workshops and live virtual cohorts with isolated environments, allowing team members to practice safely on realistic banking cases.
Group Invoicing & Pricing in USD
Corporate volume discounts (15% to 25% off) for audit departments with straightforward PO and Net-30 corporate invoicing.
Professional Credentials
Certifications & CPE Accreditations
The recognized international credential for practical data and AI application in internal audit, authorized under the standards of the Institute of Internal Auditors (IIA).
Professional Designation
Certified Financial AI Auditor (CFAIA)®
The CFAIA® designation is the definitive credential validating an internal auditor's hands-on proficiency in utilizing Python, machine learning, and Generative AI within banking internal audit operations.
- Comprehensive testing of hands-on data analytics, exception detection, and automated audit workpapers.
- Practical capstone project: Executing an automated full-population transaction audit in Python.
- Satisfies up to 72 CPE hours authorized by the IIA, ISACA, and NASBA.
Online Registry Credential Verification
Verify the authenticity and active standing of an issued AAA Certificate or CFAIA® credential.
Forward-Looking Research
Three Briefings on the Future of Internal Audit Work
These research briefings consider how current developments may gradually influence internal audit practice. They are deliberately exploratory: the pace and practical significance of each trend will differ by institution, regulatory environment, and audit mandate.
The Gradual Shift from Periodic Review to More Continuous Assurance
Internal audit has traditionally organised much of its work around discrete assignments, defined fieldwork windows, and reporting cycles. That model is unlikely to disappear, but the operating environment around it is becoming more continuously observable. Transaction platforms, cloud services, customer channels, and control-monitoring tools produce larger and more frequent streams of operational information. As these streams become easier to access, audit departments may increasingly use them to identify changes in risk between formal audit cycles.
This does not necessarily mean that every control will be monitored in real time or that every exception will become an audit finding. A more realistic development is a gradual layering of additional signals around the existing audit plan. A department might use selected indicators to notice unusual access patterns, changes in approval routes, emerging backlogs, or shifts in customer and transaction behaviour. Those signals could inform scoping, timing, and follow-up without replacing professional judgement or detailed testing.
The practical impact on internal auditors may be a change in the rhythm of their work. Planning could become more iterative, with risk assessments revisited when operational data suggests a meaningful change. Fieldwork may begin with a wider population view before narrowing toward explanations and evidence. Follow-up work could also become more structured as remediation indicators are reviewed between formal reports. The likely challenge will be maintaining a clear distinction between monitoring, management responsibility, and independent assurance. Internal auditors will need to document how signals were selected, how false positives were handled, and when a data pattern was sufficiently relevant to justify human investigation.
Over time, this may encourage a hybrid audit model: periodic assignments supported by carefully governed, recurring analytics. The value would not come from constant activity for its own sake, but from better timing and a more informed view of how risk changes. Audit leaders may therefore focus less on promising universal coverage and more on choosing a small number of reliable indicators that improve judgement, prioritisation, and conversations with management.
Artificial Intelligence as a New Layer of Audit Evidence and Audit Risk
Artificial intelligence is moving into ordinary business processes, including customer support, credit operations, document handling, fraud screening, software delivery, and internal reporting. For internal audit, the important question is not only whether an organisation uses an AI model. It is also how model-supported decisions are embedded in a process, what evidence remains available, and who is accountable when the output is incomplete, biased, or simply unsuitable for the decision being made.
In the near future, audit teams may encounter a broader range of AI arrangements rather than one standard technology. Some institutions will use external services, while others will deploy controlled models within private environments. Some applications will produce recommendations that a person reviews; others may quietly influence prioritisation, routing, or the wording of communications. This variety makes simple checklist approaches less useful. Auditors may need to understand the purpose of a model, the data and assumptions around it, the points at which people can intervene, and the records retained for later review.
The effect on audit work could be two-sided. AI-supported tools may help auditors organise documents, compare policies, identify unusual transactions, or draft initial lines of enquiry. At the same time, those tools introduce questions about confidentiality, reproducibility, hallucination, access rights, vendor dependency, and the possibility that an apparently efficient process is difficult to explain. A sensible audit response is likely to remain measured: use technology where it improves the search for evidence, but preserve independent validation and do not treat a generated explanation as evidence in itself.
This may gradually expand the skills expected of internal auditors. Technical specialists will remain important, but non-specialists may also need a working vocabulary for data lineage, model limitations, human oversight, and change management. Audit documentation may include more explicit statements about the boundaries of an AI-assisted procedure. The future opportunity is therefore less about turning every auditor into a data scientist and more about enabling audit teams to ask disciplined questions of systems that increasingly shape operational decisions.
The Expanding Assurance Perimeter: Resilience, Third Parties, and Connected Risk
Internal audit departments are increasingly asked to look beyond the boundaries of a single legal entity or internal process. Cloud platforms, outsourced operations, software providers, data exchanges, payment networks, and shared group services can all influence whether a control objective is achieved. At the same time, regulatory attention is placing greater emphasis on operational resilience, cyber preparedness, data protection, and the ability to recover from disruption. These trends are likely to make the relationship between internal controls and external dependencies more visible in audit planning.
The future change may be gradual rather than dramatic. Audit teams may not receive unlimited access to every supplier environment, and third-party assurance reports will continue to have limitations. Nevertheless, audit work could place more emphasis on understanding service maps, important business services, concentration risk, contractual responsibilities, incident escalation, and the quality of evidence available when a provider is involved. The question may shift from “Does the internal control operate?” toward “What combination of internal and external controls allows the business outcome to remain reliable?”
This broader perimeter also affects how findings are framed. A weakness in vendor oversight, recovery testing, identity management, or data transfer may not create an immediate loss, yet it can increase the time and uncertainty involved in responding to an incident. Auditors may therefore spend more time connecting technical observations to service continuity, customer impact, regulatory obligations, and management decision-making. That connection will require restraint: a plausible scenario is not the same as evidence of an actual failure, and risk communication should distinguish clearly between observed conditions, reasonable exposure, and possible consequences.
Over the coming years, internal audit may become a more important interpreter of connected risk for boards and senior management. The department’s contribution will not be to guarantee that disruption is impossible, but to provide a reasoned view of dependencies, preparedness, evidence quality, and unresolved uncertainty. This may encourage more cross-functional audit teams and more deliberate coordination with risk, compliance, security, procurement, and technology functions while preserving the independence that gives internal audit its assurance value.
Distinguished Instruction
Faculty & Practical Instructors
Our instructors are seasoned banking internal audit leaders and experienced data practitioners with extensive hands-on experience applying analytics in financial institutions.
Dr. Daniel Hartmann, CIA, CISA
Head of AI Audit Practice • Ex-Deutsche Bank
Former Head of Internal Audit Methodology with 18 years in banking. Specializes in enterprise private LLMs and automated workpaper pipelines.
Marcus Lindner, PhD, CFAIA
Director of Model Risk Auditing • Quant Fellow
Doctorate in Quantitative Finance. Former lead model validation auditor at UBS. Pioneer of SHAP/LIME algorithmic fairness auditing frameworks.
Sarah Al-Mansoor, CIA, CPA
Lead Instructor, Computational Assurance
14 years in internal audit leadership at Standard Chartered and Barclays. Trained over 4,000 auditors in Python and automated data analytics.
Thomas Berglund
Core Banking Forensics Lead
Specialist in direct relational database interrogation, Change Data Capture audit trails, and core banking system data pipelines.
Corporate Seminar Order Desk
Order a Seminar for Your Employees
Use this official form to register employees from your financial institution for an upcoming cohort. All prices are in US Dollars ($ USD); a registrar will confirm the selected delivery format and location.
Billing, invoicing & VAT: Seminar checkout and billing are facilitated by Digistore24 for customers in the United States, the United Kingdom, the EU-27 member states, Switzerland, and Norway. Applicable taxes or VAT, payment processing, and billing documents are presented through the Digistore24 checkout process.