Auditing and Ethics · Risk Assessment and Internal Control

Audit Planning and Strategy (SA 300) for CA Intermediate

Updated 4 October 2026 · Fact-checked

Audit planning under SA 300 means setting up the audit so it is done effectively. The auditor generally fixes an overall audit strategy first (scope, timing, direction), which guides a detailed audit plan (nature, timing and extent of procedures). To answer questions, define the term, list contents, then link to risk.

Understand Audit Planning and Strategy

Audit planning is the work the auditor does before and during the audit to make sure it is done in an effective and efficient way. SA 300, Planning an Audit of Financial Statements, deals with this duty. Planning is not a one-time step. It is a continuous and iterative process that starts soon after the previous audit ends, or with acceptance of the engagement, and goes on until the audit is complete.

Why plan? Good planning helps the auditor give proper attention to important areas, find and resolve potential problems on time, and organise the work well. It helps in choosing team members with the right skills and in directing and supervising them. It also helps in coordinating work done by auditors of components and by experts.

SA 300 asks for two linked documents. The overall audit strategy sets the scope, timing and direction of the audit and guides the detailed plan. The audit plan is more detailed. It lists the nature, timing and extent of the risk assessment procedures, the further audit procedures at assertion level, and other procedures needed to comply with the SAs.

Think of the strategy as the map of the whole journey and the plan as the turn-by-turn directions. The strategy is generally established first and guides the plan. But SA 300 notes that the two are closely inter-related and not necessarily discrete or sequential processes. Changes in one may need changes in the other.

The engagement partner and other key team members should be involved in planning, including discussion among the team. The auditor must revise the strategy and plan as needed during the audit, and document any significant changes and the reasons for them.

Key rules to remember

Overall audit strategy: Overall audit strategy = scope + timing + direction of the audit; It sets the framework and guides the detailed audit plan. It is generally established first, but the two are closely inter-related.
Audit plan: Audit plan = risk assessment procedures + further audit procedures + other procedures required by SAs; For each, state nature, timing and extent. Plan is more detailed than strategy.
Strategy contents (SA 300, para 8): (a) Characteristics of the engagement that define its scope; (b) reporting objectives, timing of the audit and nature of communications; (c) significant factors that determine the direction of the team's efforts, including, as applicable, determining appropriate materiality and preliminary identification of areas of higher risk of material misstatement, preliminary activities and knowledge gained on other engagements; (d) nature, timing and extent of resources; Use these four heads from SA 300 para 8 to organise any 'contents of overall audit strategy' answer.
Documentation under SA 300: Document: overall audit strategy, audit plan, significant changes made during the audit and reasons; Missing this point loses easy marks.
Nature of planning: Planning = continual and iterative process; It is not a discrete phase after the engagement is accepted.

How to solve Audit Planning and Strategy questions

Use this method for any theory question on SA 300, whether it asks for objectives, contents, differences or a scenario.

1Read the question and mark the exact ask: definition, contents, difference, benefits, or a case-based judgment.
2Start with one line stating the SA 300 requirement: the auditor shall plan the audit so it is performed in an effective manner.
3If the question is on strategy, group points under the four heads of SA 300 para 8: characteristics of the engagement; reporting objectives, timing and communications; significant factors in directing the team's efforts (including, as applicable, materiality and preliminary identification of higher-risk areas), preliminary activities and knowledge from other engagements; and nature, timing and extent of resources.
4If the question is on the plan, state the three parts: risk assessment procedures, further audit procedures at assertion level, and other required procedures, each with nature, timing and extent.
5For a difference question, write two columns of points: purpose, level of detail, sequence, and what it contains. Keep each point to one line.
6For a scenario, apply the facts: name what in the facts affects planning (new client, IT system, risk area) and state the planned response.
7Close with the link to risk: planning is continuous, so strategy and plan are updated and changes are documented.

Quickest way: Strategy-then-plan shortcut

When to use it: Use when time is short, in both MCQs and descriptive answers.

For MCQs, remember: strategy is broad and generally comes first; plan is detailed and follows. But the two are closely inter-related, so do not rely on sequence alone to pick an answer.
Judge each option against SA 300: planning is continual and iterative. An option that treats planning as a one-time phase conflicts with this. Treat absolute words like 'only' with caution and check them against the standard rather than rejecting them automatically.
Eliminate options saying the auditor need not document changes to the plan. Changes and reasons must be documented.
In written answers, use a short intro line, then bullets under the four strategy heads or the three plan parts.
Add one scenario-specific line to earn the application mark, then a one-line conclusion.

Common mistakes in Audit Planning and Strategy

Treating overall audit strategy and audit plan as the same thing.
Both are prepared in the planning stage and their contents overlap.
Fix: Say strategy sets scope, timing and direction. Say plan details the nature, timing and extent of procedures. Keep them in separate paragraphs.
Saying planning is done only at the start of the audit.
Students link planning with a one-time pre-audit step.
Fix: Write that planning is continual and iterative, and the strategy and plan are updated as the audit proceeds.
Saying the strategy and plan are strictly separate, sequential steps.
Students learn the map and directions comparison as a rigid order.
Fix: Write that the strategy is generally set first and guides the plan, but SA 300 says the two are closely inter-related and not necessarily discrete or sequential. Both can be revised as needed.
Giving random points for strategy contents with no structure.
Students memorise a long list without heads.
Fix: Use the four heads from SA 300 para 8 and place each point under one of them so the answer looks complete.
Forgetting documentation and revision requirements.
Students focus only on what to plan.
Fix: End with: the auditor documents the strategy, the plan and any significant changes with reasons.

Worked examples

Example 1

Distinguish between overall audit strategy and audit plan under SA 300.

Show the solution

State the link: both arise from planning, and the strategy guides the plan. They are closely inter-related and not necessarily discrete or sequential.
Purpose: the strategy sets the scope, timing and direction of the audit. The plan sets out the detailed procedures to carry out the strategy.
Level of detail: the strategy is broad and general. The plan is more detailed.
Contents: the strategy covers engagement characteristics; reporting objectives, timing and communications; significant factors (including, as applicable, materiality and higher-risk areas), preliminary activities and knowledge from other engagements; and resources. The plan covers nature, timing and extent of risk assessment procedures, further audit procedures and other required procedures.
Sequence: the strategy is generally developed first and the plan follows. Both are updated if circumstances change.
Documentation: both, and significant changes with reasons, are documented.

Answer: The overall audit strategy is the broad framework (scope, timing, direction), generally set first. The audit plan is the detailed set of procedures, with nature, timing and extent, that implements it. The two are closely inter-related, both are revised as needed, and changes are documented.

Example 2

You are the engagement partner for a manufacturing company that has newly introduced an ERP system this year. Explain how this fact affects the planning of the audit under SA 300.

Show the solution

Identify the planning link: the new ERP is a significant factor under the overall audit strategy and affects risk assessment.
Strategy: decide the resources. Assign team members or an expert with IT skills, and plan more supervision and review.
Strategy: set the timing. Allow earlier work on IT general controls and data migration, and plan for interim testing.
Plan: add risk assessment procedures to understand the ERP, its controls and the migration of opening balances.
Plan: set further audit procedures. Include testing of IT controls where relied on, and more substantive procedures where controls are not reliable.
Revise as needed: if testing finds control weaknesses, update the strategy and plan, and document the changes and reasons.

Answer: The new ERP is a significant factor for the strategy. It calls for IT-skilled resources, earlier timing and more review. The plan adds procedures on ERP controls and data migration. The auditor revises the plan if weaknesses appear and documents the changes.

Exam tips

Short notes on SA 300 are common. Open with the objective, then give contents under heads, then close with documentation.
For difference questions, give at least four clear points and keep both sides parallel.
In case-based questions, name the fact from the scenario and say whether it affects strategy, plan or both.
In MCQs, treat words like 'only', 'never' or 'one-time' about planning with caution. Check the option against SA 300 (planning is continual and iterative) instead of rejecting it automatically.
Link planning to risk in every answer, because it shows you understand why the auditor plans.

Practice questions from Risk Assessment and Internal Control

Audit Planning and Strategy in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Audit Planning and Strategy: frequently asked questions

What is the main objective of audit planning under SA 300?

The auditor must plan the audit so that it is performed in an effective manner. Planning helps focus on important areas, spot problems early and organise the team. It also supports proper direction, supervision and review.

What is the difference between audit strategy and audit plan?

The overall audit strategy sets the scope, timing and direction of the audit and guides the plan. The audit plan is more detailed and sets out the nature, timing and extent of procedures. The strategy is generally established first, but SA 300 notes the two are closely inter-related and not necessarily discrete or sequential.

Is audit planning a one-time activity?

No. SA 300 treats planning as continual and iterative. It begins soon after the previous audit ends or the engagement is accepted, and the strategy and plan are updated as the audit proceeds.

Does the auditor need to document planning?

Yes. The auditor documents the overall audit strategy, the audit plan, and any significant changes made during the audit with the reasons for them.