Plan drawn up is the assessment of the risk that is mutually agreed between the internal audit, senior management and audit committee determines the frequency with which particular audits take place.