Audit Plan
What is Audit Plan?
A document that describes the activities and arrangements for an audit, including scope, objectives, timing, and resource requirements. Audit plans ensure systematic and efficient audit execution.
Terms that appear alongside audit plan
Each of these is named in at least one of the same controls as audit plan. The number is how many controls name both.
- audit committee 5 shared controls
- internal audit 4 shared controls
- governance 3 shared controls
- remediation 3 shared controls
- soc 2 2 shared controls
- due diligence 2 shared controls
- it audit 2 shared controls
Frameworks that govern audit plan
What the standards actually require on audit plan
Requirements naming audit plan across 6 standards, quoted from the control text.
Internal audit, which in addition to Appendix A should ensure the framework complies with the Guidelines and suits the bank's size, complexity and risk profile, should establish and adhere to an audit plan, periodically reviewed and updated, that reflects the...
occ-heightened-standards-12-cfr-part-30-appendix-d::II.C.3.(b) · II.C.3.(b) Internal audit: Risk-based audit plan →Beyond ISO/IEC 17021-1:2015, 9.2.3, the ISMS audit plan takes account of the controls the client has determined; it identifies the network-aided or remote techniques to be used (such as teleconference, web meeting, interactive web-based communication and remot...
iso-iec-27006-1-2024::9.2.3 · Audit plan →The certification body prepares an audit plan for each AIMS audit under ISO/IEC 17021-1:2015, 9.2.3, covering the objectives, criteria, scope, sites, dates, activities and team roles, and identifying the AI systems, life cycle processes and Annex A controls to...
iso-iec-42006-2025::9.2.3 · Audit plan →IT Audit Plan. The third line of defence, IT audit, should provide the audit committee of the board (or equivalent) with independent assurance over the cyber risk programme through a risk-based IT audit plan (para 23).
BMA-7 · Information Technology Audit Plan →The report should go out within the period agreed. If it is late, the auditee and the programme manager should be told why. The report should carry a date and be reviewed and, where appropriate, accepted as the programme lays down.
iso-19011-2026::6.5.2 · Distributing the audit report →Guidance: those managing the programme should ensure evaluation of whether schedules are met and objectives achieved, of the performance of team members including leaders and technical experts, of the teams' ability to implement audit plans, of feedback from c...
iso-19011-2018::5.6 · Monitoring audit programme →Questions people ask about audit plan
What is Audit Plan?
Why is Audit Plan important for compliance?
Which compliance frameworks address Audit Plan?
Where can I learn more about Audit Plan?
See how Audit Plan applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.