An audit provides reasonable assurance about the coverage of material items. The initial step in designing an audit plan is to determine the audit universe for the organization. The audit universe is the list of all the processes and systems under the scope of the audit. Once the audit universe is identified, a risk assessment is to be conducted to identify the critical processes and systems.
In the next chapter, we will have a look at project management techniques, sampling methodology, and audit evidence collection techniques.