The standard mandates that organizations establish an audit plan for a specified timeframe. Typically, organizations create an annual audit schedule, indicating which functions or areas of the standard will be audited at specific times. Internal audits should align with this audit schedule.