---
title: ORA Planning [1] Audit Planning
description: "ORA: Audit Planning"
---

[Operational Resilience Audit](https://blog.bcm-institute.org/operational-resilience-audit)

# [ORA Planning \[1\] Audit Planning](https://blog.bcm-institute.org/operational-resilience-audit/ora-audit-planning)

 Written by [Moh Heng Goh](https://blog.bcm-institute.org/operational-resilience-audit/author/moh-heng-goh) | Jan 11, 2024 5:58:16 AM

#### Operational Resilience Audit Planning Step

#### Audit Planning

 

|   Preparation for Audit When conducting audit planning during an operational resilience audit, it is essential to ensure thorough preparation to achieve the audit objectives effectively. The following are detailed steps for the conduct of audit planning: Define Audit Objectives Determine Audit Scope Identify the Audit Team and Assign Roles Conduct Preliminary Research Develop an Audit Plan Conduct Risk Assessment Plan Data Collection Methods Establish Communication Channels Develop an Audit Schedule Conduct Entrance Meeting Prepare Audit Documentation Obtain Necessary Permissions and Access Finalise Audit Plan Define Audit Objectives Establish the specific objectives of the operational resilience audit. Outline what the audit aims to achieve. This includes identifying the key areas to be assessed, such as: The effectiveness of operational resilience measures Identify vulnerabilities Ensure compliance with established standards Preparedness, response and recovery plans Prepare testing mechanisms Provide governance and monitoring/reporting Determine Audit Scope Define the boundaries and extent of the audit. Identify the departments, processes, systems, or locations included in the audit. Consider any regulatory requirements, industry standards, or internal policies that should be considered. Identify the Audit Team and Assign Roles Assemble an audit team comprising individuals with relevant expertise and knowledge in operational resilience. Assign specific roles and responsibilities to team members, including an audit lead, subject matter experts, and support staff. Conduct Preliminary Research Gather background information about the organisation's operational resilience framework, previous audits, incident reports, and relevant policies and procedures. This research will provide a foundation for understanding the organisation's context and identify potential focus areas. Develop an Audit Plan Create a comprehensive audit plan that outlines the approach, timelines, and resources required. The plan should include specific audit procedures, sampling methodologies, data collection methods, and analysis techniques. Ensure that the plan aligns with the audit objectives and scope. Conduct Risk Assessment Perform a risk assessment to identify and prioritise areas of potential concern within the operational resilience framework. This assessment helps determine which areas require more in-depth scrutiny and guides the allocation of audit resources accordingly. Plan Data Collection Methods Determine the appropriate methods for collecting relevant data during the audit. This may involve document reviews, interviews with key personnel, observation of processes, or analysis of incident records. Develop data collection templates or checklists to guide the audit team. Establish Communication Channels Set up communication channels with key stakeholders, including senior management, process owners, and relevant staff members. Communicate the purpose and scope of the audit, expected timelines, and the level of cooperation required from stakeholders. Develop an Audit Schedule Create a detailed schedule that outlines the timing and duration of audit activities. Consider the availability of key personnel and any potential disruptions to operations. Allow sufficient time for on-site visits, interviews, and data analysis. Conduct Entrance Meeting Arrange an entrance meeting with key stakeholders to: Introduce the audit team formally Discuss the audit objectives, scope, and expectations and address any questions or concerns. This meeting helps establish a collaborative and transparent approach to the audit. Prepare Audit Documentation Develop standardised templates or tools to consistently document audit procedures, findings, and recommendations. Ensure the documentation aligns with regulatory requirements, industry standards, and internal audit protocols. Obtain Necessary Permissions and Access Ensure that the audit team has the required permissions, access rights, and security clearances to perform the audit effectively. Coordinate with relevant departments or IT personnel to obtain necessary access to systems, databases, and facilities. Finalise Audit Plan Review and finalise the audit plan based on any additional insights or feedback received during the preliminary stages of audit planning. Obtain approval from relevant stakeholders before proceeding with the execution of the audit.   Following these detailed steps for audit planning, the operational resilience audit can be conducted systematically and efficiently, setting the stage for a comprehensive assessment of the organisation's resilience capabilities.   Operational Resilience Audit Planning Steps     Find out more about Blended Learning ORA-5000 \[BL-ORA-5\] & ORA-300 \[BL-ORA-3\] |
| --- |

|  |  |  |
| --- | --- | --- |
|  |  |  |
|  | Please feel free to send us a note if you have any of these questions. |  |

[View full post](https://blog.bcm-institute.org/operational-resilience-audit/ora-audit-planning)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Moh Heng Goh"
  },
  "dateModified" : "2024-01-11T10:39:04.471Z",
  "datePublished" : "2024-01-11T05:58:16Z",
  "headline" : "ORA Planning [1] Audit Planning",
  "image" : {
    "@type" : "ImageObject",
    "height" : 400,
    "url" : "https://3893111.fs1.hubspotusercontent-na1.net/hubfs/3893111/Operational%20Resilience%20Audit/CTA%20ORA%20Morepost/ORA%20Planning%20Level/CTA_ORA_Planning%20Level_Planning%20Stage%201.png",
    "width" : 296
  },
  "mainEntityOfPage" : "https://blog.bcm-institute.org/operational-resilience-audit/ora-audit-planning",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Operational Resilience Audit"
  }
}
```