Execution
Audit engagements
Every engagement has a scope, an engagement letter, a program, tests, workpapers, findings, a management response and report approval. The advisory engagement is tagged and does not count as assurance. GRC-REQ-011 ENT-GRC-036..038 UX-BR-005 UX-REQ-008 NFR-REQ-003
Audit universe coverage
High-risk areas against the plan