1 · Evidence as a promise
What a reviewer is actually asking for, and how over-collection hides gaps.
Flagship course
Evidence Collection Foundations
Six weeks to turn scattered artefacts into a pack you can defend — using an audit evidence collection app as the working surface, not a dumping ground.
Learning outcomes
- Define intake rules so new evidence lands with owner, period, and control ID.
- Link samples to source systems without losing the “why this item” note.
- Prepare export packages that remain intelligible outside your tool.
- Respond to reviewer comments with precise updates rather than new folder chaos.
Informational pricing
Custody Circle seating for this course is listed at £1,150 per learner. No checkout on this site — contact us to enrol. See also pricing paths.
Modules
2 · Ownership maps
Assign control owners, deputies, and escalation paths before the rush starts.
3 · App intake hygiene
Configure fields and folders in an audit evidence collection app so incomplete uploads are obvious.
4 · Sampling and exceptions
Record rationale, substitutions, and known limitations beside each sample.
5 · Export and narrative
Build a pack that survives download, email, and a sceptical second reader.
6 · Live critique
Swap packs with peers, fix findings, and close with a personal playbook.
Instructor
Amira Holt
Amira spent a decade in internal audit and cloud assurance across UK mid-market firms before designing Securecloudinfra’s curricula. She still reviews anonymised packs for private ateliers.
From recent learners
“Week three’s incomplete ticket set mirrored our real backlog a little too well — which is why the method stuck.”
Jonah P. · Security operations · Edinburgh
★★★★☆
Solid on custody; the vendor-export appendix felt thin if you are on a niche GRC tool.
Anonymous client in healthcare technology
FAQ
Do you provide the audit evidence collection app itself?
No. We teach methods that transfer across common tools. Labs use a neutral mock structure so you can map lessons onto your stack.
What is a real limitation of this course?
We cannot certify that your live pack will pass a specific external auditor’s idiosyncratic requests. Frameworks differ, and some reviewers will still ask for formats we have not rehearsed. The course reduces avoidable confusion; it does not eliminate professional judgement calls.
Can my whole team join?
Yes — see Assurance Atelier on the pricing page for private facilitation, or request multiple Custody Circle seats.