Audit Plan

The AUDIT | Audit plan is to establish a structured and risk-based plan of audit engagements that directs internal audit activities over a defined period, ensuring alignment with the organisation’s risk profile, governance priorities, and emerging risks.

The objective of AUDIT | Audit plan is to maintain a structured hierarchy of auditable units that represents the organisation’s operational and governance landscape. This hierarchy forms the basis for developing risk-based audit plans.

AUDIT | Audit plan can be found on the sidebar within the AUDIT module of the IA Governance app.

The Audit plan page displays a list of audit plans created for the organisation. Each plan represents a defined planning period and serves as a container for the audit engagements that will be performed. When the page is opened for the first time, no audit plans will be displayed until a plan has been created.

Adding an audit plan

To create an audit plan, select the + button and then Audit plan.

A page will open where the required plan details must be completed:

• Name – Enter a descriptive name for the audit plan (e.g. Audit Plan 2026).
• Financial year – Select the applicable financial year for the audit plan.

Once the required fields have been completed, select Save to create the audit plan.

After saving, the audit plan is created in Draft status and a detailed view is displayed of the plan. This view displays the plan information at the top of the page and a Planned engagements section below, where audit engagements can be added and managed.

Selecting Save will save the current audit plan and return to the main screen, where all audit plans are displayed. Once audit plans exist, they are shown in a table view, but only the plan-level information is visible at this stage. Audit engagements are not displayed on this page.

Adding an Audit Engagement

Once an audit plan has been created, audit engagements can be added within the plan. In order to access the specific plan, select the Edit button to the right-hand side of the plan. To add a new audit engagement, open the relevant audit plan and navigate to the Planned engagements section. Select the + button on the right-hand side of the screen to add a new engagement.

The following dialog will open, and all relevant fields related to the engagement must be completed before the user will be able to save the Planned engagement.

Relevant details for each engagement includes:

• Title – Enter a descriptive name for the audit engagement (e.g. Procurement).
• Planned start date – Select the planned start date for the engagement.
• Planned end date – Select the planned end date for the engagement.
• Risks – Link the engagement to one or more risks identified in the Risk assessment.
• Auditable units – Select the auditable unit(s) from the audit universe that will be covered.
• Estimated hours – Enter the expected effort required to complete the engagement.

Once all required fields have been completed, select Save. The engagement will be added to the audit plan and displayed in the Planned engagements table.

Editing an Audit engagement

To edit an existing engagement, click the Edit button in the Actions column.

This opens the engagement details where updates can be made to scope, timing, resources, or other planning elements.

Deleting an Audit engagement

To remove an engagement from the plan, click the Delete button in the Actions column.

The engagement will be removed from the audit plan.

Maintaining a dynamic Audit plan ensures that the Internal Audit Function has a structured, risk-based schedule of audit engagements aligned to the organisation’s risk profile and governance priorities. By linking audit engagements to the audit universe and risk assessment, the plan enables internal audit resources to be directed toward the areas of greatest significance, supporting effective and focused audit coverage.