An audit plan is a step-wise approach to be followed to conduct an audit. It helps to establish the overall audit process in an effective and efficient manner. An audit plan should be aligned with the audit charter of the organization. To plan an audit, the IS auditor is required to have a thorough understanding of business processes, business applications, and relevant controls. Audit planning includes both short- and long-term planning.
The following topics will be covered in this chapter:
- The content of an audit charter
- Audit planning
- Business process applications and controls
- Types of controls
- Risk-based audit planning
- Types of audit and assessment
