Advanced Auditing, Assurance and Professional Ethics · Audit Planning, Strategy and Execution

Overall Audit Strategy and Audit Plan under SA 300

Updated 5 October 2026 · Fact-checked

The overall audit strategy sets the scope, timing and direction of the audit and guides the detailed audit plan. The audit plan then lists the nature, timing and extent of risk assessment and further procedures. To answer a question, state the provision, apply the case facts, and conclude. Update both when circumstances change.

Understand Overall Audit Strategy and Audit Plan

Planning means the auditor decides how the audit will be done before doing the main work. It helps the auditor give proper attention to important areas, find problems early, organise the work, and choose and direct team members. It also helps coordinate work done by auditors of components and experts.

The overall audit strategy is the big picture. It sets the scope, timing and direction of the audit. It deals with questions such as: what is the reporting framework, what is the reporting timetable, which areas are high risk, how many resources are needed, and what is the nature of the team and its supervision.

The audit plan is more detailed. It turns the strategy into action. It covers the nature, timing and extent of planned risk assessment procedures, the nature, timing and extent of planned further audit procedures at the assertion level, and other procedures needed so the audit complies with the SAs.

Planning is not a one-time step. It is a continuous and iterative process. The auditor often starts soon after the previous audit ends and continues until the current audit is complete. New information, such as a changed risk assessment or an unexpected event, may require changes to the strategy, the plan and the procedures. The auditor should record these changes and the reasons for them.

The engagement partner and key team members should be involved in planning. This includes the planning discussion among the team members. The auditor may also discuss elements of planning with the entity's management to improve effectiveness, but the auditor must keep responsibility for the strategy and plan. Do not let management dictate the procedures, as this weakens independence and the audit's effectiveness.

Key rules to remember

Overall audit strategy: Strategy = scope + timing + direction of the audit; It guides the development of the detailed audit plan.
Audit plan: Plan = risk assessment procedures + further audit procedures + other procedures, each with nature, timing and extent; It is more detailed than the strategy and sets out the procedures to be performed.
Order of work: Establish strategy → develop plan → perform and update both as needed; Both are changed as necessary during the audit, and significant changes and reasons are documented.
Direction, supervision and review: Plan the nature, timing and extent of direction and supervision of team members and the review of their work; This depends on factors such as the entity's size and complexity, the areas of audit, assessed risks and the capabilities of the team members.
Documentation required: Document: overall audit strategy + audit plan + significant changes to either during the audit + reasons for those changes; Documentation of planning must be sufficient to support the auditor's work.

How to solve Overall Audit Strategy and Audit Plan questions

Use this method for scenario-based and descriptive questions on SA 300. Keep your answer in provision, facts, conclusion form.

1Identify what the question asks: strategy, plan, a specific content item, or a change during the audit.
2State the relevant SA 300 requirement in one or two plain sentences.
3Pick the facts from the case that matter, such as new risks, changed timelines, team changes or a new business line.
4Link each fact to a planning element: scope, timing, direction, resources, or nature, timing and extent of procedures.
5State whether the strategy, the plan, or both need revision, and what specifically changes.
6Mention involvement of the engagement partner and key team members, and the planning discussion, if relevant.
7Mention documentation of the strategy, plan, changes and reasons.
8Close with a clear conclusion that answers the question in one line.

Quickest way: Strategy versus plan test

When to use it: Use when a question asks you to distinguish the two, or to classify a listed item under one of them.

Ask: is this about the whole audit (scope, timing, direction, resources)? Then it belongs to the strategy.
Ask: is this a specific procedure with its nature, timing and extent? Then it belongs to the plan.
If an event changes risk, say both documents may need updating and the changes must be documented with reasons.
Finish with one line: strategy guides, plan details.

Common mistakes in Overall Audit Strategy and Audit Plan

Treating strategy and plan as the same document or as identical in detail.
Both are planning outputs and the words sound alike.
Fix: Remember that the strategy is the high-level scope, timing and direction, and the plan is the detailed set of procedures that follows it.
Saying planning is a one-time phase done before fieldwork.
Students read planning as a stage in a sequence.
Fix: State that planning is continuous and iterative, and that changes are made during the audit as new information arises.
Forgetting to mention documentation of changes and their reasons.
Students focus on the action taken and skip the record.
Fix: Always add that significant changes to the strategy or plan, and the reasons, must be documented.
Letting management decide the audit procedures after a planning discussion.
Students misread that the auditor may discuss planning with management.
Fix: Say the auditor may discuss elements with management but remains responsible for the strategy and plan, and must keep the audit's effectiveness and independence.
Listing only procedures in the answer and ignoring team direction, supervision and review.
Students think the plan is only about tests of controls and substantive tests.
Fix: Include the nature, timing and extent of direction and supervision of team members and review of their work.
Writing generic answers that do not use the case facts.
Students recall the theory but do not apply it.
Fix: Quote at least two facts from the case and show which planning element each affects.

Worked examples

Example 1

Case: Sundar & Co. is the statutory auditor of Veda Foods Ltd. During planning, the engagement team assumed that the company's inventory was held at three locations. In month two of fieldwork, the team learns that the company has opened two more warehouses and that a new ERP system will go live midyear. The engagement partner wants to continue with the original plan. Advise whether this is appropriate.

Show the solution

Provision: Planning is continuous and iterative. The auditor must update and change the overall audit strategy and the audit plan as necessary during the audit.
Facts: Two new warehouses and a new ERP system change the locations to be covered and the IT-related risks.
Link to strategy: The scope (more locations), timing (stock counts at more places and ERP cutover dates) and resources (IT skills, additional team members) may need revision.
Link to plan: The nature, timing and extent of risk assessment and further procedures need revisiting, for example the inventory observation coverage and testing of ERP data migration and controls.
Documentation: The changes and the reasons must be recorded.
Conclusion: Continuing with the original plan unchanged is not appropriate.

Answer: Not appropriate. The auditor must revise the strategy and the plan for the new locations and the ERP change, and document the significant changes and the reasons.

Example 2

Case: For the audit of Rudra Textiles Ltd., the audit senior prepared a document listing the reporting framework, the expected reporting timetable, the high-risk areas and the number of team members needed. A separate document lists specific procedures for receivables, with sample sizes and dates of confirmation. State which document is the overall audit strategy and which is the audit plan, and explain.

Show the solution

Provision: The overall audit strategy sets the scope, timing and direction of the audit. The audit plan details the nature, timing and extent of procedures.
First document: It covers the reporting framework, timetable, high-risk areas and resources. These are scope, timing and direction matters.
Second document: It lists specific procedures for receivables with sample sizes and confirmation dates. These are the nature, timing and extent of further audit procedures.
Relationship: The strategy guides the development of the plan, so the plan should be consistent with it.
Documentation: Both must be documented, and significant changes and the reasons recorded.

Answer: The first document is the overall audit strategy. The second is the audit plan, because it sets out the detailed nature, timing and extent of procedures that follow from the strategy.

Exam tips

For a distinction question, write two short columns in prose: scope, timing, direction for the strategy versus nature, timing, extent of procedures for the plan.
In case questions, always say planning is continuous and iterative, and link the case event to a change in the strategy, the plan or both.
Add one line on documentation of the strategy, plan, significant changes and reasons. It is an easy mark.
For MCQs, read for the word that signals level of detail. High-level scope and direction points to strategy. Specific procedures point to plan.

Practice questions from Audit Planning, Strategy and Execution

Overall Audit Strategy and Audit Plan in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Overall Audit Strategy and Audit Plan: frequently asked questions

What is the difference between overall audit strategy and audit plan?

The overall audit strategy sets the scope, timing and direction of the audit and guides the plan. The audit plan is more detailed and sets out the nature, timing and extent of the procedures to be performed. The plan follows from the strategy.

Can the auditor change the audit plan during the audit?

Yes. Planning is continuous and iterative. The auditor must update and change the strategy and the plan as necessary if circumstances or new information require it. Significant changes and the reasons should be documented.

Can the auditor discuss the plan with management?

The auditor may discuss elements of planning with management to help coordinate procedures. However, the auditor remains responsible for the overall audit strategy and the audit plan, and must not allow the discussion to reduce the audit's effectiveness.

Who should be involved in planning the audit?

The engagement partner and key members of the engagement team should be involved in planning, including the planning discussion among team members. This helps the team understand the risks and direct the work properly.