Auditing and Ethics · Audit Strategy, Audit Planning and Audit Programme

Audit Strategy and Overall Audit Plan (SA 300) for CA Intermediate

Updated 4 October 2026 · Fact-checked

Under SA 300, the overall audit strategy sets the scope, timing and direction of the audit and guides the detailed audit plan. The audit plan then lists the specific procedures: risk assessment, further audit procedures and other procedures. To answer questions, define both, give contents, show the link, and mention documentation and updates.

Understand Audit Strategy and Overall Audit Plan

Planning an audit means the auditor thinks before doing. You decide what the audit is about, when and how it will be done, and who will do it. SA 300, Planning an Audit of Financial Statements, deals with this. Planning is not a one-time phase. It is a continual and iterative process that starts soon after the previous audit ends (or with acceptance of the engagement) and runs until the audit is complete.

The overall audit strategy is the big picture. It sets the scope, timing and direction of the audit. It is the starting point for the detailed plan. Think of it as the decision on what resources and approach the audit needs.

The audit plan is more detailed. It spells out the nature, timing and extent of the planned risk assessment procedures, the planned further audit procedures at the assertion level, and other planned procedures needed so that the audit complies with the SAs. Think of it as the working instructions that follow from the strategy.

The two are closely linked. A change in one (for example, because a new risk appears) can need a change in the other. So the auditor may update and change the strategy and plan during the audit. The auditor also documents the strategy, the plan, and any significant changes with the reasons.

Good planning helps the auditor give appropriate attention to important areas, find and resolve problems on time, organise and manage the engagement, select team members and assign work, direct and supervise them, review their work, and coordinate with component auditors and experts where relevant.

Key rules to remember

Overall audit strategy: Overall audit strategy = scope + timing + direction of the audit; It guides the development of the detailed audit plan.
Audit plan: Audit plan = risk assessment procedures + further audit procedures + other procedures required by SAs (each with nature, timing and extent); It is more detailed than the strategy.
Planning is continual: Planning is iterative: strategy and plan can be updated during the audit; Document significant changes and the reasons for them.
Documentation requirement: Document: overall audit strategy, audit plan, and significant changes with reasons; This is the SA 300 documentation requirement.
Engagement partner involvement: Engagement partner and key team members take part in planning; This includes discussion among the team (SA 315 team discussion).

How to solve Audit Strategy and Overall Audit Plan questions

Use this method for any theory or scenario question on SA 300.

1Read the question and decide what is asked: definition, difference, contents, documentation, or a case where plan changes.
2Define the overall audit strategy first: scope, timing, direction. Then define the audit plan: nature, timing, extent of procedures.
3State the link: the strategy guides the plan, and planning is continual and iterative.
4List the relevant contents under the right heading. Strategy: characteristics of the engagement, reporting objectives and timing, significant factors and preliminary activities, nature, timing and extent of resources. Plan: risk assessment, further audit procedures, other procedures.
5For a scenario, pick facts from the case (new client, IT system, group audit, deadline) and tie each to a strategy or plan item.
6Add documentation: strategy, plan, and significant changes with reasons.
7Close with a one-line conclusion, such as updating the plan when circumstances change.

Quickest way: Strategy = Big picture, Plan = Detail

When to use it: Use under time pressure for MCQs and for 4 to 6 mark written answers.

MCQs: if the option talks about scope, timing, direction or resources, it is the strategy. If it talks about specific procedures and their nature, timing and extent, it is the plan.
MCQs: reject any option saying planning is only a phase before fieldwork or that it cannot change. Planning is continual and iterative.
Written: use a two-column difference with 4 points: meaning, level of detail, sequence (strategy first), and what each contains.
Written: end with documentation and changes. This often earns the last mark.
Write in short points with SA 300 headings so the examiner can spot each step mark.

Common mistakes in Audit Strategy and Overall Audit Plan

Treating the strategy and the plan as the same thing.
Both are about planning and the words sound alike.
Fix: Remember: strategy is scope, timing, direction; plan is the detailed procedures. The strategy guides the plan.
Saying planning is a phase that ends before fieldwork.
Students think of planning as a first step only.
Fix: State that planning is continual and iterative and can be revised throughout the audit.
Listing procedures such as inspection or confirmation as contents of the strategy.
Students mix the levels of detail.
Fix: Put specific procedures and their nature, timing and extent in the audit plan, not in the strategy.
Forgetting to mention documentation of changes.
Students stop after contents and the difference.
Fix: Always add that the auditor documents the strategy, the plan, and significant changes with reasons.
Giving generic answers in a scenario question.
Students recite the theory without using case facts.
Fix: Link each case fact, such as a new IT system or a tight deadline, to a specific strategy or plan item.

Worked examples

Example 1

Distinguish between the overall audit strategy and the audit plan as per SA 300. (5 marks)

Show the solution

Meaning of strategy: it sets the scope, timing and direction of the audit and guides the development of the audit plan.
Meaning of plan: it is more detailed and covers the nature, timing and extent of planned risk assessment procedures, further audit procedures and other procedures.
Sequence: the strategy is developed first; the plan follows from it.
Detail: the strategy deals with the overall approach and resources; the plan deals with specific procedures.
Change: both are linked, and a change in one may need a change in the other. Both can be updated during the audit.

Answer: The overall audit strategy is the broad approach covering scope, timing and direction, and it guides the audit plan. The audit plan is the detailed set of procedures (nature, timing and extent) that follows from the strategy. The strategy is prepared first, the plan gives detail, and both may be updated as the audit proceeds. Both, and significant changes with reasons, must be documented.

Example 2

You are the auditor of a new client that has just implemented a new accounting software and has a tight reporting deadline. How would this affect the audit strategy and plan? (5 marks)

Show the solution

Identify the facts: new client (no prior knowledge), new software, tight deadline.
Strategy, characteristics of the engagement: the new IT system is a significant factor, so the scope must include understanding it and its controls.
Strategy, reporting and timing: the tight deadline means the timing of work and communications must be planned early, with interim work where possible.
Strategy, resources: assign team members with IT knowledge, consider using an IT expert, and plan more direction and supervision.
Plan: add risk assessment procedures to understand the entity and the system, and design further audit procedures for risks arising from system implementation, such as data migration.
Documentation: record the strategy, the plan, and later changes with reasons.

Answer: The new software and new client increase the risk of misstatement and the need for understanding the entity. The strategy should cover scope including IT controls, early timing because of the deadline, and suitable resources including IT expertise. The plan should include the risk assessment procedures and further audit procedures for data migration and system controls. All should be documented and revised if circumstances change.

Exam tips

Expect a 'distinguish' or 'state the contents' question. Use headings and short bullets.
In MCQs, watch for options that say the plan cannot be changed. They are wrong.
In scenario questions, quote case facts and map each to strategy or plan.
Do not forget the engagement partner and key team members' involvement in planning, and the documentation requirement.
Link to SA 315 and SA 230 in one line when relevant, but do not go into detail.

Practice questions from Audit Strategy, Audit Planning and Audit Programme

Audit Strategy and Overall Audit Plan in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Audit Strategy and Overall Audit Plan: frequently asked questions

What is the difference between audit strategy and audit plan?

The overall audit strategy sets the scope, timing and direction of the audit. The audit plan is more detailed and sets the nature, timing and extent of procedures. The strategy guides the plan.

Is the audit plan prepared before the audit strategy?

No. The overall audit strategy is established first, and the audit plan is developed from it. In practice the two are linked, and the auditor may revise either as the audit proceeds.

Can the auditor change the plan during the audit?

Yes. Planning is continual and iterative. If circumstances or unexpected events change, the auditor updates the strategy and plan and documents significant changes with reasons.

What must be documented under SA 300?

The auditor documents the overall audit strategy, the audit plan, and any significant changes made to them during the audit, along with the reasons for those changes.