Certification courses teach you what auditors should know. They don't teach you how to plan an audit, write findings management actually accepts, or get remediation to happen. That's the gap I've spent 45 years learning to close — as a security consultant, an internal auditor at HP Canada, NAV Canada, and Shared Services Canada, and for the last eight years, as an instructor. Everything on this site comes from work I've actually done, not from a textbook.
You passed the exam. Now learn to actually do the work.
CISSP since 2005, CISA since 2012. 45 years experience. 8 years teaching.
Practical, experience-based training and advice from Phil Irving: audit skills for newly certified CISA, CISM, and CISSP holders.
Start here:
See my free courses → YouTube Channel @pisecaudit for short videos that help Auditors. You can see my teaching style and what I have to offer, before you sign up for in a paid course.
Download my free PDF on Fact Sheets.
Book a free 15-minute call via calendly. I will schedule your next course.
If the calendar doesn't appear, open the booking page in a new tab, or email me and we'll find a time.
Paid courses vary in price. If you pay for the course yourself, you get a lower price. For example, you can pay $150 USD for a 90-minute course, or your employer will be invoiced $200 USD. You can claim CPE hours after completing the course.
Testimonials
- Phil is incredibly knowledgeable. He explained complex concepts plainly to me and related it to his real-world experience working in IT. He is down to Earth and made the class enjoyable. He had videos to show and also elaborated on how this course stacks up against the real world. Best instructor I have had. - Michael, Sep 2025, CompTIA A+ with Phil Irving
- Phil definitely had additional information that helped tie some things together; his added slides and personal site with extra available definitely added value. - Stephen, Sep 2025, CISSP with Phil Irving
- Instructor: Phil Irving : Great course & a lot to take in such a small time but the instructor had lots of real world examples he discussed. - Happy Customer, Nov 2021, Virtual CISSP 5 Day Course
- The CISSP online course was well presented by Phil, who as a subject matter expert provided loads of industry examples to re-enforce what we had just learned. It was real quality. - Tee, Nov 2021, CISSP online course
- Good real-life practical sharing. Thanks to Phil Irving who goes the extra mile to explain concepts clearly and professionally delivered the training with great commitment. - Steven, updated Nov 2021, CCSP
Courses and Books
Courses: Audit Findings That Land and the rest of the course catalogue — instructor-led, online, built on real audit experience.
Book: Audit Reports Reference Guide — the course content and reference material in one place, on Kindle.
You can contact me if you have suggestions or questions or want to book an appointment with me.
Why trust me?>
My approach is grounded in decades of hands-on experience, beginning with early personal computing and evolving with modern enterprise environments. From implementing practical access controls in shared systems to advising on governance and risk, my focus has remained consistent: understand systems at a fundamental level, and apply that understanding to solve real-world problems — the kind the Body of Knowledge (BOK) doesn't cover.
I have been teaching certification courses, including CISA, CISM, CISSP and related subjects. The course material is taken from the BOK sources for these credentials, plus my own experiences (24 years as a security consultant, 10 years as Internal Auditor, 5 years as systems administrator & programmer, 6 years as instructor) — but the BOKs stop short of showing how to actually put the credentials into practice. A newly certified professional can pass the exam and still have no idea how to write an audit report that survives management scrutiny. A new manager can receive that report and have no idea what to do with it. That gap is what my work fills.