A tailored course, built for your situation
Deeper command of compliance control frameworks for institutional finance
Build repeatable, auditable control artefacts with full framework fluency
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Spending too much time reconciling control gaps during audit cycles
The situation this course is for
Even experienced teams waste cycles reworking control documentation because foundational framework fluency is missing. That leads to last-minute fixes, inconsistent mappings, and audit outcomes that depend too much on tribal knowledge.
Who this is for
Senior compliance or risk practitioner in institutional finance who owns control design and audit readiness
Who this is not for
Junior analysts learning controls for the first time, or executives seeking board-level summaries
What you walk away with
- Accurate control mappings across SOX, GDPR, and internal audit requirements
- Repeatable templates for control documentation that save 10+ hours per cycle
- Cold command of framework logic to defend design choices under review
- Faster sign-off cycles due to reduced rework
- Internal go-to status for control framework interpretation
The 12 modules (with all 144 chapters)
Module 1. Control framework fundamentals in institutional finance
Understand the hierarchy of standards shaping compliance at firms like the firm, SOX, GDPR, and internal audit mandates. Build fluency in how they intersect and diverge.
12 chapters in this module
- What defines institutional-grade compliance
- SOX control objectives by function
- GDPR accountability principles
- Internal audit lifecycle phases
- Regulatory vs internal control scope
- Control ownership models
- Documentation standards
- Risk-rating methodology
- Control testing thresholds
- Evidence retention rules
- Framework mapping conventions
- Audit trail expectations
Module 2. Control design from risk assessment to mapping
Turn risk assessments into properly scoped controls. Learn how to align control design with both regulatory expectations and operational reality.
12 chapters in this module
- Risk-severity scoring
- Likelihood assessment techniques
- Control sufficiency thresholds
- Preventive vs detective controls
- Automated vs manual controls
- Control owner alignment
- Process boundary definition
- Segregation of duties rules
- Control mapping to COSO
- Control integration with workflows
- Evidence collection planning
- Testing frequency rules
Module 3. SOX control specification and documentation
Document SOX controls to pass audit scrutiny. Focus on precision, completeness, and alignment with PCAOB standards.
12 chapters in this module
- SOX 404 top-down approach
- Entity-level controls
- ICFR determination
- Materiality thresholds
- Significant accounts mapping
- Key controls identification
- Control description standards
- Walkthrough requirements
- Testing documentation
- Deficiency classification
- Remediation tracking
- Management assertion drafting
Module 4. GDPR compliance control integration
Embed GDPR principles into operational controls. Focus on data subject rights, lawful basis, and cross-border data flows.
12 chapters in this module
- Lawful basis verification
- Data mapping requirements
- DPIA triggers
- Data subject access rights
- Right to erasure workflows
- International data transfers
- Processor agreements
- Breach notification timelines
- Privacy by design
- Data protection officers
- Consent management
- Record of processing activities
Module 5. Control testing and audit readiness
Prepare controls for internal and external audit. Focus on evidence completeness, sample selection, and deficiency response.
12 chapters in this module
- Testing scope definition
- Sample size calculation
- Evidence sufficiency
- Testing methodology
- Deficiency identification
- Remediation workflows
- Audit communication protocols
- Management letter response
- Internal audit coordination
- External auditor handoffs
- Testing sign-off
- Audit trail maintenance
Module 6. Control automation and tooling
Leverage technology to reduce manual effort. Focus on tool selection, integration, and change management.
12 chapters in this module
- Control automation feasibility
- RPA for control execution
- AI in anomaly detection
- GRC platform selection
- Control monitoring dashboards
- Integration with ERP
- Change control for automated controls
- User access reviews
- Logging and alerting
- False positive reduction
- Tool maintenance cycles
- Vendor oversight
Module 7. Segregation of duties design
Design SoD rules that prevent conflicts while enabling operational efficiency. Map to standard roles and exceptions.
12 chapters in this module
- SoD conflict categories
- Role-based access control
- User provisioning workflows
- Conflict detection rules
- Exception approval process
- Periodic access reviews
- SoD testing frequency
- Mitigating controls
- Segregation in ERP systems
- Finance and IT role splits
- User lifecycle management
- SoD policy enforcement
Module 8. Control ownership and accountability
Define clear ownership models that stand up under audit. Focus on handoffs, escalation paths, and documentation.
12 chapters in this module
- Control owner responsibilities
- RACI for compliance
- Handoff documentation
- Escalation procedures
- Accountability tracking
- Performance metrics
- Training requirements
- Documentation standards
- Review frequency
- Succession planning
- Cross-functional coordination
- Stakeholder communication
Module 9. Change management for compliance controls
Manage control changes due to system updates, M&A, or process redesign. Ensure continuity and audit readiness.
12 chapters in this module
- Change control process
- Impact assessment
- Control redesign triggers
- M&A control integration
- System upgrade planning
- Process change review
- Control exception logging
- Temporary control design
- Change approval workflow
- Post-implementation review
- Documentation updates
- Audit trail preservation
Module 10. Third-party control oversight
Extend control frameworks to vendors and partners. Focus on due diligence, monitoring, and contract terms.
12 chapters in this module
- Vendor risk classification
- Due diligence levels
- SOC reports interpretation
- Contractual obligations
- Ongoing monitoring
- Control gap response
- Right to audit clauses
- Subprocessor oversight
- Cybersecurity requirements
- Financial stability checks
- Performance metrics
- Termination triggers
Module 11. Documentation that compounds
Build templates and libraries that accelerate future work. Ensure consistency and reduce rework.
12 chapters in this module
- Standard control descriptions
- Reusable risk statements
- Control testing templates
- Evidence checklists
- Audit response playbooks
- Control library management
- Version control
- Searchable documentation
- Cross-referencing standards
- Knowledge transfer
- Training materials
- Internal best practices
Module 12. Fluency in framework reasoning
Develop internal logic for justifying control design. Move from checklist compliance to principled application.
12 chapters in this module
- Regulatory intent understanding
- Principle vs rule-based
- Control design tradeoffs
- Risk tolerance alignment
- Historical audit positions
- Regulator expectations
- Precedent collection
- Framework evolution tracking
- Industry benchmarking
- Internal policy alignment
- Stakeholder education
- Defensible design choices
How this maps to your situation
- Designing SOX controls for new financial systems
- Integrating GDPR compliance into operations
- Preparing for external audit with clean artefacts
- Managing control changes after M&A
Before vs. after
Before
Spending cycles reconciling control gaps and defending design choices retroactively
After
Producing auditable, defensible control artefacts with full framework fluency
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3-4 hours per module, designed to be completed in parallel with ongoing work
If nothing changes
Continuing to rely on ad-hoc control design increases audit exposure and rework burden, especially under efficiency pressure
How this compares to the alternatives
Generic compliance courses focus on awareness; this course delivers actionable fluency in control design for institutional finance environments
Frequently asked
Who is this course for?
Senior compliance, risk, and control practitioners in banking, asset management, and institutional finance who own control design and audit readiness.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Is there a certificate of completion?
Yes, a certificate is issued upon finishing all modules and passing the final checkpoint.
$199 one-time. Approximately 3-4 hours per module, designed to be completed in parallel with ongoing work.
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours