Path B puts you in the auditor's seat — independent, sceptical, and evidence-driven. You plan audits, execute ITGC tests in a live SAP system, write professional findings, and communicate results to management. You graduate with 20 audit documents and the experience of one complete IT audit engagement.
Path B follows the full IT audit engagement lifecycle — from planning through fieldwork, findings, reporting, and follow-up. Every lesson advances the engagement. Every deliverable is a real audit document.
Path B is set inside NovaTech S.A. — the same fictional NYSE-listed energy company used in Path A. But while Path A trainees work inside the controls team, Path B trainees sit in the seat of Sofia Andrade, IT Audit Lead — and you are auditing their work.
You are independent. You do not operate the controls — you test them. You receive evidence from the controls team (your Path A colleagues in the scenario), evaluate it against professional standards, and determine whether it is sufficient. When it isn't, you request more. When controls fail, you write findings.
This creates a remarkably realistic training environment. The NovaTech scenario includes real characters (Marcus Obi, IT Security; Daniel Ferreira, Controls Manager), real access control findings (terminated employees, self-approved transports, SoD conflicts), and real management pushback scenarios — llcluding a CFO asking you to downgrade a finding.
Path B follows the IIA audit engagement lifecycle. Every module advances the NovaTech audit from initial planning through fieldwork, findings, reporting, and follow-up. Every lesson produces a document that would exist in a real audit file.
Every document you produce in Path B is a real audit deliverable — the kind that would exist in a Big 4 or internal audit working paper file. When an interviewer asks "have you conducted an IT audit?" you answer with specifics.
Plus the SAP Risk Assessment Summary (M6-L1). Full portfolio inventory available to enrolled students in the Career Intelligence Library.
Path B is taught by a Managing Partner and Principal Consultant with over 37 years of Big 4 SAP GRC practitioner experience. Every worked example in the programme reflects what an experienced IT audit senior would produce — and what they would expect from a junior on their team.
Feedback is specific and professional. When you submit a finding, you are told what would survive management pushback and what would be questioned. When you submit a workpaper, you are told whether it meets the "sufficient for a stranger" standard — the same test used in Big 4 quality reviews.
Both tracks cover the same 8-module curriculum and produce the same 20 portfolio documents. The difference is live access and cohort pace.
"The worked examples in Path B are the most valuable thing. Seeing exactly what a gold standard finding looks like — Condition, Criteria, Cause, Consequence, Corrective Action — and then writing mine against that benchmark changed how I think about documentation."
"The management pushback simulation in Module 7 was uncomfortable in the best possible way. When a CFO tells you your finding is too harsh, you need to know how to respond. Practicing that response before it happens on a real engagement is invaluable."
Path B trainees access the same live SAP S/4HANA 2023 sandbox as Path A — but from the auditor perspective. You are not building controls; you are testing them. You extract populations, run audit queries, evaluate what the system tells you, and determine whether the evidence you see supports or contradicts the controls team's assertions.
The key audit transactions in SAP — SUIM for population extraction, SM20 for security audit log review, RZ11 for parameter testing — are tools that IT auditors use in every engagement. Path B gives you live practice with all of them before your first real client engagement.
Based on analysis of 50+ live IT Audit Analyst job descriptions across USA, UK, UAE, Australia, and India from TIB-MKT-JOB-003 (June 2026).
| Skill Demanded in Job Descriptions | Frequency | Path B Coverage | Lesson |
|---|---|---|---|
| Audit methodology (IIA Standards) | 94% of postings | ✦ Full module | M1 |
| Risk assessment / audit risk model | 88% of postings | ✦ Dedicated module | M2 |
| ITGC testing (access, change, ops) | 92% of postings | ✦ End-to-end lab | M3-L4 |
| Sampling methodology | 76% of postings | ✦ Dedicated lesson | M3-L2 |
| Evidence standards / SARA | 71% of postings | ✦ Dedicated lesson | M3-L3 |
| Walkthroughs (auditor perspective) | 83% of postings | ✦ Full module | M4-L1 |
| Audit findings writing (5 C's) | 89% of postings | ✦ 3 complete findings | M5-L2 |
| SAP access controls testing | 78% of postings | ✦ Live SAP lab | M6-L2 |
| Audit report writing | 85% of postings | ✦ Full report produced | M7-L2 |
| Communication to management / Audit Committee | 79% of postings | ✦ Dedicated lesson | M7-L3 |
Path B is for professionals who want to ask the questions — not answer them. If you want to test controls rather than run them, Path B is your track.
Both tracks cover the identical 8-module curriculum and produce the same 20-document portfolio. Same price as Path A — same value commitment.
4-month programme · enrol and start within 48 hours
4-month programme · cohort-based · live sessions
Enrol in Path B today. Within 48 hours you will have access to the NovaTech S.A. SAP system, your Audit Planning Memo template, and your first Lab Guide. By the end of Week 1 you will have produced your first professional audit document.