Document an understanding with management of the area under review regarding objectives, scope, respective responsibilities, and other expectations for all engagements.

Agree with management of the area under review regarding the nature and scope of the engagement.

Assume managerial responsibility when performing the advisory engagement.

Develop an annual advisory plan per the results of a risk assessment by internal audit function.