Five-day professional programmes in 14 citiesClassroom, online and in-house info@aractech.com +31 85 7444446

Course AGRC-055

Auditing Cloud Services and Outsourced Operations

Organisations increasingly rely on cloud platforms, software services and outsourced providers for critical processes an... The outline covers Cloud and Outsourcing Fundamentals, Governance, Contracts and Service Levels,...

  • 5 daysClassroom or online
  • 49Upcoming dates
  • 12Cities
  • €1,825Fees from

Choose your format and date

  • 5 days
  • 09:00–14:00
  • Certificate of attendance

Classroom sessions

  1. 7–11 Dec 2026

    London

    Next date
    €2,915 + VAT
    Register
  2. 14–18 Dec 2026

    Barcelona

    €2,275 + VAT
    Register
  3. 21–25 Dec 2026

    Frankfurt

    €2,175 + VAT
    Register
  4. 4–8 Jan 2027

    Madrid

    €3,400 + VAT
    Register
  5. 11–15 Jan 2027

    London

    €2,915 + VAT
    Register
  6. 18–22 Jan 2027

    Barcelona

    €2,275 + VAT
    Register
  7. 25–29 Jan 2027

    Frankfurt

    €2,175 + VAT
    Register
  8. 1–5 Feb 2027

    Frankfurt

    €2,175 + VAT
    Register
  9. 8–12 Feb 2027

    Munich

    €2,425 + VAT
    Register
  10. 15–19 Feb 2027

    London

    €2,915 + VAT
    Register
  11. 22–26 Feb 2027

    Barcelona

    €2,275 + VAT
    Register
  12. 1–5 Mar 2027

    Barcelona

    €2,275 + VAT
    Register
  13. 8–12 Mar 2027

    Frankfurt

    €2,175 + VAT
    Register
  14. 15–19 Mar 2027

    Paris

    €2,810 + VAT
    Register
  15. 22–26 Mar 2027

    London

    €2,915 + VAT
    Register
  16. 5–9 Apr 2027

    London

    €2,915 + VAT
    Register
  17. 12–16 Apr 2027

    Barcelona

    €2,275 + VAT
    Register
  18. 19–23 Apr 2027

    Frankfurt

    €2,175 + VAT
    Register
  19. 26–30 Apr 2027

    Rome

    €2,830 + VAT
    Register
  20. 3–7 May 2027

    Vienna

    €3,425 + VAT
    Register
  21. 10–14 May 2027

    London

    €2,915 + VAT
    Register
  22. 17–21 May 2027

    Barcelona

    €2,275 + VAT
    Register
  23. 24–28 May 2027

    Frankfurt

    €2,175 + VAT
    Register
  24. 7–11 Jun 2027

    London

    €2,915 + VAT
    Register
  25. 14–18 Jun 2027

    Barcelona

    €2,275 + VAT
    Register
  26. 21–25 Jun 2027

    Frankfurt

    €2,175 + VAT
    Register
  27. 5–9 Jul 2027

    Barcelona

    €2,275 + VAT
    Register
  28. 12–16 Jul 2027

    Frankfurt

    €2,175 + VAT
    Register
  29. 19–23 Jul 2027

    Cape Town

    Lowest fee
    €1,825 + VAT
    Register
  30. 26–30 Jul 2027

    London

    €2,915 + VAT
    Register
  31. 2–6 Aug 2027

    London

    €2,915 + VAT
    Register
  32. 9–13 Aug 2027

    Barcelona

    €2,275 + VAT
    Register
  33. 16–20 Aug 2027

    Frankfurt

    €2,175 + VAT
    Register
  34. 23–27 Aug 2027

    Dubai

    €2,845 + VAT
    Register
  35. 6–10 Sep 2027

    London

    €2,915 + VAT
    Register
  36. 13–17 Sep 2027

    Barcelona

    €2,275 + VAT
    Register
  37. 20–24 Sep 2027

    Frankfurt

    €2,175 + VAT
    Register
  38. 4–8 Oct 2027

    Frankfurt

    €2,175 + VAT
    Register
  39. 11–15 Oct 2027

    Istanbul

    €2,825 + VAT
    Register
  40. 18–22 Oct 2027

    London

    €2,915 + VAT
    Register
  41. 25–29 Oct 2027

    Barcelona

    €2,275 + VAT
    Register
  42. 1–5 Nov 2027

    Barcelona

    €2,275 + VAT
    Register
  43. 8–12 Nov 2027

    Frankfurt

    €2,175 + VAT
    Register
  44. 15–19 Nov 2027

    Kuala Lumpur

    €2,425 + VAT
    Register
  45. 22–26 Nov 2027

    London

    €2,915 + VAT
    Register
  46. 6–10 Dec 2027

    London

    €2,915 + VAT
    Register
  47. 13–17 Dec 2027

    Barcelona

    €2,275 + VAT
    Register
  48. 20–24 Dec 2027

    Frankfurt

    €2,175 + VAT
    Register
  49. 27–31 Dec 2027

    Madrid

    €3,400 + VAT
    Register

Online / Live sessions

  1. 7–11 Dec 2026

    Live virtual classroom

    Next date
    €1,625 + VAT
    Register
  2. 14–18 Dec 2026

    Live virtual classroom

    €1,625 + VAT
    Register
  3. 21–25 Dec 2026

    Live virtual classroom

    €1,625 + VAT
    Register
  4. 4–8 Jan 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  5. 11–15 Jan 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  6. 18–22 Jan 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  7. 25–29 Jan 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  8. 1–5 Feb 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  9. 8–12 Feb 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  10. 15–19 Feb 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  11. 22–26 Feb 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  12. 1–5 Mar 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  13. 8–12 Mar 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  14. 15–19 Mar 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  15. 22–26 Mar 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  16. 5–9 Apr 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  17. 12–16 Apr 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  18. 19–23 Apr 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  19. 26–30 Apr 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  20. 3–7 May 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  21. 10–14 May 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  22. 17–21 May 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  23. 24–28 May 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  24. 7–11 Jun 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  25. 14–18 Jun 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  26. 21–25 Jun 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  27. 5–9 Jul 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  28. 12–16 Jul 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  29. 19–23 Jul 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  30. 26–30 Jul 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  31. 2–6 Aug 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  32. 9–13 Aug 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  33. 16–20 Aug 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  34. 23–27 Aug 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  35. 6–10 Sep 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  36. 13–17 Sep 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  37. 20–24 Sep 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  38. 4–8 Oct 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  39. 11–15 Oct 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  40. 18–22 Oct 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  41. 25–29 Oct 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  42. 1–5 Nov 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  43. 8–12 Nov 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  44. 15–19 Nov 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  45. 22–26 Nov 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  46. 6–10 Dec 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  47. 13–17 Dec 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  48. 20–24 Dec 2027

    Live virtual classroom

    €1,625 + VAT
    Register
  49. 27–31 Dec 2027

    Live virtual classroom

    €1,625 + VAT
    Register

Introduction

Course overview

Organisations increasingly rely on cloud platforms, software services and outsourced providers for critical processes and data. While these arrangements bring flexibility and efficiency, they also shift risks outside the organisation's direct control, raising questions about security, resilience, data location, regulatory compliance and contractual protection.

This Auditing Cloud Services and Outsourced Operations training course prepares auditors to provide assurance over third-party delivered services. Participants learn about cloud service and deployment models, the shared responsibility model, governance of outsourcing, contract and service level review, reliance on independent assurance reports and testing of the controls retained by the organisation.

The course combines technical explanation in clear language with practical audit programmes and exercises that can be applied immediately.

View full course outline

What you will achieve

Learning objectives

  • Explain cloud service and deployment models and their risks
  • Apply the shared responsibility model to audit scoping
  • Evaluate governance and risk assessment of outsourcing decisions
  • Review contracts and service levels for key protections
  • Assess security, identity and data protection in cloud environments
  • Use independent assurance reports appropriately
  • Audit resilience, exit planning and concentration risk
  • Report findings on cloud and outsourced services

Who should attend

Target audience

  • Internal auditors and IT auditors
  • Information security professionals
  • Vendor and outsourcing managers
  • Risk and compliance professionals
  • IT managers responsible for cloud services
  • External auditors reviewing service organisations

Methodology

Learning approach

  • The course uses sample contracts, assurance reports, cloud configuration evidence and outsourcing case studies. Participants scope a cloud audit, review an assurance report for gaps, assess contract clauses and design tests of retained controls. Discussion covers regulatory expectations in different sectors.

Complete course outline

Five focused days of learning and application

The timings provided are estimates and may vary depending on the number of participants and the discussions taking place during the sessions. They are indicative only and do not constitute a binding commitment.

Day 1

Cloud and Outsourcing Fundamentals

  1. Infrastructure, platform and software as a service explained
  2. Public, private and hybrid deployment models
  3. Business drivers and risks of cloud and outsourcing
  4. The shared responsibility model and its audit implications
  5. Coffee break
  6. The shared responsibility model and its audit implications (continued)
  7. Regulatory expectations for outsourcing and cloud
  8. Mapping critical outsourced services and data flows
  9. Exercise: scoping an audit of a cloud service

Day 2

Governance, Contracts and Service Levels

  1. Outsourcing policies, approvals and risk assessment
  2. Due diligence on cloud and outsourcing providers
  3. Contract clauses for audit rights, data and security
  4. Service level agreements and performance reporting
  5. Coffee break
  6. Service level agreements and performance reporting (continued)
  7. Subcontracting and fourth-party risk
  8. Ongoing oversight and relationship management
  9. Exercise: reviewing a cloud services contract

Day 3

Security and Data Protection in the Cloud

  1. Identity and access management in cloud environments
  2. Configuration management and security baselines
  3. Encryption, key management and data location
  4. Logging, monitoring and incident response
  5. Coffee break
  6. Logging, monitoring and incident response (continued)
  7. Data protection obligations for outsourced processing
  8. Testing cloud security configurations with evidence
  9. Exercise: assessing sample cloud configuration evidence

Day 4

Using Independent Assurance Reports

  1. Types of service organisation assurance reports
  2. Understanding scope, period and exceptions in reports
  3. Complementary user entity controls and their testing
  4. Identifying gaps when reports do not cover key risks
  5. Coffee break
  6. Identifying gaps when reports do not cover key risks (continued)
  7. Bridging letters and period gaps
  8. Other certifications and their limitations
  9. Exercise: evaluating a service organisation report

Day 5

Resilience, Exit and Reporting

  1. Business continuity and disaster recovery for outsourced services
  2. Concentration risk and dependence on a few providers
  3. Exit planning and data portability
  4. Cost management and financial controls in cloud
  5. Coffee break
  6. Cost management and financial controls in cloud (continued)
  7. Writing findings for cloud and outsourcing audits
  8. Building a continuous assurance approach for third parties
  9. Personal action plan for auditing cloud and outsourcing

Ready to book?

Auditing Cloud Services and Outsourced Operations

Next session: 7 - 11 December 2026, London

Course FAQs

Questions about this course

What participants and training managers usually ask before booking Auditing Cloud Services and Outsourced Operations. Can't find your answer?

WhatsApp
What does Auditing Cloud Services and Outsourced Operations (AGRC-055) cover?

This course covers Auditing and Governance Risk and Compliance through a structured five-day outline focused on practical application, discussion, and implementation planning.

When is the next available session?

The next scheduled session starts on 7 - 11 December 2026. See the course schedules section for the available dates and delivery formats.

Who should attend this course?

Internal auditors and IT auditors, Information security professionals, Vendor and outsourcing managers

Is bilingual course delivery available?

Yes. All course materials and presentations are provided in English, while bilingual explanation and discussion support may be available depending on the selected location and trainer availability. For example, when attending a course in Istanbul, you may request a Turkish-speaking trainer to explain the English course content in Turkish. Arabic explanation support may also be requested at this location. Other languages are available in selected cities. You can choose your preferred language support as an optional preference during registration.

How can I register for a session?

Use any Register button next to the available course dates to open the participant registration page and submit your booking request for the selected session.

Is this course available online as well as classroom-based?

Check the course schedules section for currently published classroom and Online / Live sessions.

Where are classroom sessions delivered?

Current classroom venues include London, Barcelona, Frankfurt, Madrid, Munich, Paris, Rome, Vienna, Cape Town, Dubai, Istanbul, Kuala lumpur.

How long is the training programme?

The programme runs for five days from 09:00 to 14:00, which gives 25 contact hours, including a daily 30-minute break (22.5 hours of instruction).