Control Deficiency Practitioner
A six-week live cohort for reviewers who need a repeatable way to score, evidence, and close control gaps — practiced inside our control deficiency review app.
Learning outcomes
- Write findings that separate observation, impact, and root-cause hypothesis
- Apply a severity rubric with a written rationale every time
- Assemble evidence packs that survive hand-offs to audit and the board
- Assign ownership and track ageing without masking stalled work
- Run a short calibration huddle with peers using the review app
Modules
Two live sessions per week, plus async work in the app. Expect three to four hours weekly outside class.
1 · Framing the deficiency
Control references, observation discipline, and what does not belong in a finding title.
2 · Severity without theatre
Impact and likelihood trade-offs, compensating controls, and documenting dissent.
3 · Evidence Pack Studio
Question-led artefact lists, redaction habits, and export for GRC tools.
4 · Ownership & remediation paths
Realistic dates, escalation language, and when to reopen a closed item.
5 · Board and partner readiness
Summarising open items for non-specialists without losing precision.
6 · Capstone review
Full finding lifecycle in the app, peer critique, and personal rubric tweaks.
Instructor
Amira Holden
Former second-line risk lead for a UK insurer, Amira has facilitated control review programmes since 2018. She focuses on borderline severity calls and the writing habits that keep findings usable six months later.
Informational pricing
Review Cohort seats are listed at £1,850 per person. Team Licence pricing bundles two cohorts per year — see pricing. No payment is taken on this website.
FAQ
Do I need prior SOX or ICAEW experience?
No. You should already review controls in some capacity. We assume you can read a control description and a process map.
Is the review app available after the course?
Sandbox access continues for ninety days. Team Licence clients keep a shared workspace for the licence year.
What is a real limitation of this programme?
We do not integrate with your live GRC platform. Export is manual (CSV or structured notes). If your firm needs connectors, treat this as training — not systems implementation.
Can we bring our own deficiencies?
Yes, with redaction. Team Licence cohorts often load anonymised firm cases in week one.
Reviews from this course
Module 3 changed how we file screenshots. We still argue about severity in Module 2 — that is partly the point.
★★★★☆Capstone week is intense if your day job is busy. The instructor’s written feedback on rationales was the strongest part for me.