Forty-five years in IT security and internal audit later, here's everything I wish someone had told me on day one.
Your first audit report was rejected? Mine was too.
Learn the 5 C's framework and the Fact Sheet process that turns findings management actually argues for, not against — built from 45 years of real fieldwork, not theory. In 90 minutes, you'll know exactly why most findings get filed and forgotten, and how to make sure yours never do.
Available on Thinkific
Resources
Your finding is solid — so why did the report still get pushback?
Go from individual findings to a complete, submission-ready audit report — the nine-component structure, the executive summary that actually gets read, and the scorecard approach that turns your report from a list of problems into a tool management wants to engage with.
Coming soon on Thinkific
Before you can write a finding, you have to know what you're testing — and why.
Build the System Description and Risk Summary that make every finding that follows faster, sharper, and harder to dispute. This is where good audits actually begin.
Coming soon on Thinkific
Most audit reports get filed and forgotten — not because the findings were wrong, but because the report did not obtain management's buy-in when it was submitted.
This quick-reference guide gives you the two tools that change that. The 5 C's framework structures every finding so it holds up under scrutiny — Criteria, Condition, Cause, Consequence, and Correction. The Fact Sheet process gets management's agreement during fieldwork, before the report is written, so most disputes never reach the final draft at all.
Inside, you'll find the complete structure of an effective audit report, a plain-language writing style that earns five-second comprehension from busy executives, common mistakes that quietly undermine otherwise solid audits, and a real before-and-after case study showing the exact difference these principles make on a real finding.
Written from 45 years of hands-on experience in IT security and Internal Audit, this guide is based on two courses that explore this material in greater depth. It is built for auditors, audit managers, and anyone responsible for turning audit evidence into action that actually gets taken.
Available on Kindle, $9.99
Many professionals need targeted support— whether preparing for certification,
strengthening weak areas, or building a clearer understanding of core concepts.
These courses run about 20 to 30 minutes so you can focus on the particular topic.
Coming on Thinkific