Auditing Cloud Services and Outsourced Operations (AGRC-055) Training Course

Auditing Cloud Services and Outsourced Operations

Organisations increasingly rely on cloud platforms, software services and outsourced providers for critical processes and data. While these arrangements bring flexibility…

5 daysClassroom or online

49Upcoming dates

12Cities

£2,250Fees from

Course overview

Introduction

Organisations increasingly rely on cloud platforms, software services and outsourced providers for critical processes and data. While these arrangements bring flexibility and efficiency, they also shift risks outside the organisation's direct control, raising questions about security, resilience, data location, regulatory compliance and contractual protection.

This Auditing Cloud Services and Outsourced Operations training course prepares auditors to provide assurance over third-party delivered services. Participants learn about cloud service and deployment models, the shared responsibility model, governance of outsourcing, contract and service level review, reliance on independent assurance reports and testing of the controls retained by the organisation.

The course combines technical explanation in clear language with practical audit programmes and exercises that can be applied immediately.

Course Objectives

By the end of this training course, participants will be able to:

Explain cloud service and deployment models and their risks
Apply the shared responsibility model to audit scoping
Evaluate governance and risk assessment of outsourcing decisions
Review contracts and service levels for key protections
Assess security, identity and data protection in cloud environments
Use independent assurance reports appropriately
Audit resilience, exit planning and concentration risk
Report findings on cloud and outsourced services

Target Audience

This training course is suitable for a wide range of professionals, including:

Internal auditors and IT auditors
Information security professionals
Vendor and outsourcing managers
Risk and compliance professionals
IT managers responsible for cloud services
External auditors reviewing service organisations

Training Methodology

The course uses sample contracts, assurance reports, cloud configuration evidence and outsourcing case studies. Participants scope a cloud audit, review an assurance report for gaps, assess contract clauses and design tests of retained controls. Discussion covers regulatory expectations in different sectors.

Target Competencies

Cloud risk understanding
Outsourcing governance review
Contract and service level evaluation
Assurance report reliance
Cloud security control testing
Exit and resilience assessment

Course outline

1Day One: Cloud and Outsourcing Fundamentals

Infrastructure, platform and software as a service explained
Public, private and hybrid deployment models
Business drivers and risks of cloud and outsourcing
The shared responsibility model and its audit implications
Regulatory expectations for outsourcing and cloud
Mapping critical outsourced services and data flows
Exercise: scoping an audit of a cloud service

2Day Two: Governance, Contracts and Service Levels

Outsourcing policies, approvals and risk assessment
Due diligence on cloud and outsourcing providers
Contract clauses for audit rights, data and security
Service level agreements and performance reporting
Subcontracting and fourth-party risk
Ongoing oversight and relationship management
Exercise: reviewing a cloud services contract

3Day Three: Security and Data Protection in the Cloud

Identity and access management in cloud environments
Configuration management and security baselines
Encryption, key management and data location
Logging, monitoring and incident response
Data protection obligations for outsourced processing
Testing cloud security configurations with evidence
Exercise: assessing sample cloud configuration evidence

4Day Four: Using Independent Assurance Reports

Types of service organisation assurance reports
Understanding scope, period and exceptions in reports
Complementary user entity controls and their testing
Identifying gaps when reports do not cover key risks
Bridging letters and period gaps
Other certifications and their limitations
Exercise: evaluating a service organisation report

5Day Five: Resilience, Exit and Reporting

Business continuity and disaster recovery for outsourced services
Concentration risk and dependence on a few providers
Exit planning and data portability
Cost management and financial controls in cloud
Writing findings for cloud and outsourcing audits
Building a continuous assurance approach for third parties
Personal action plan for auditing cloud and outsourcing

Frequently asked questions

How long is the Auditing Cloud Services and Outsourced Operations course?

The course runs over 5 days of classroom training, usually Monday to Friday.

When is the next Auditing Cloud Services and Outsourced Operations course?

The next public date is 7 - 11 Dec 2026 in London. There are 49 upcoming dates in total.

Where is this course held?

Upcoming sessions run in London, Barcelona, Frankfurt, Madrid, Munich, Paris, Rome, Vienna, Cape Town, Dubai, Istanbul, Kuala Lumpur.

Can I take Auditing Cloud Services and Outsourced Operations online?

Yes. Every date can also be joined live online in a virtual classroom with the trainer, for £1,280 per participant. Choose "Live online" in the dates table when you register.

How much does the course cost?

Fees start from £2,250 per delegate, depending on the city. Fees include tuition and course materials.

Do participants receive a certificate?

Yes. Delegates who complete the course receive a London Leadership Management Innovation certificate of completion.

Can this course be delivered in-house for our team?

Yes. LLMI can tailor and deliver this course privately for your organisation at your premises or in one of our training cities.

Course information last updated 14 November 2026.

Auditing Cloud Services and Outsourced Operations

Course overview

Introduction

Course Objectives

Target Audience

Training Methodology

Target Competencies

Course outline

Dates and fees

Frequently asked questions

More Auditing and Governance Risk and Compliance courses

Adding Value in Internal Audit

Advanced Project Economics, Risk & Decision Analysis

Advanced Risk, Reliability & Safety Management Techniques

Training a team?