Typically an audit plan will include sections dealing with business understanding, risk assessment procedures, planned audit procedures ie the responses to the risks identified and other mandatory audit procedures. The audit strategy and audit plan are not fixed once the planning stage of the audit is complete.