The scope of the engagement should be planned according to the internal audit activity's budget and then aligned to the risk universe.

The audit engagement objectives should be based on operational managements view of risk objectives

The planning phase of the engagement should be completed and approved before the fieldwork of the engagement begins.

The main purpose of the engagement work program is to determine the nature and timing of procedures required to gather audit evidence