CORAA

SIA 310 — Planning the Internal Audit Assignment

ICAI Internal Audit Standards Board · October 2022 compendium · 300 series
Reviewed 1 October 2026

SIA 310 covers the plan for an individual assignment. That plan has to fit the overall plan, give scope, coverage and methodology that support reasonable assurance, allocate time, people and skills, and lead to efficient procedures.

This page covers SIA 310 as it stands in ICAI’s October 2022 compendium. ICAI’s February 2026 compendium, applicable from 1 April 2026, renumbers the standards, so check the current number and text in that compendium before citing it in a report.

Same number, different title in the current set
In ICAI’s February 2026 compendium, the current set, SIA 310 is titled Presentation and Communication of Internal Audit Report. This page covers SIA 310 as it stands in the October 2022 compendium: Planning the Internal Audit Assignment. Only the titles of the February 2026 set are listed here; its text is not summarised on this site. See both title lists side by side.

What the internal auditor has to do

  • Prepare a comprehensive written plan for the auditable unit.
  • Get it approved by the Chief Internal Auditor, or by the Engagement Partner where the work is outsourced.
  • Carry out an independent risk assessment of the unit and identify the key controls to test.
  • Write the testing procedures into an internal audit programme.
  • Tell the auditee the elements of the plan before fieldwork starts.

Key requirements of SIA 310

Paragraph numbers refer to SIA 310 as it appears in ICAI’s Compendium of Standards on Internal Audit (as on 1 October 2022). The points below are close paraphrases, not quotations.

  • The output is the Internal Audit Assignment Plan, prepared for each auditable unit.(para 1.2(g))
  • The plan is comprehensive and written.(para 3.1)
  • The plan is approved by the Chief Internal Auditor, or by the Engagement Partner if the internal audit is outsourced.(para 3.2)
  • Planning draws on knowledge of the auditable unit, discussions with management and process owners, and an exchange of information with the statutory auditor in line with SA 610.(para 3.3, 4.2, 4.3)
  • An independent risk assessment of the unit identifies the key risk-mitigating controls to test. A control that is missing is a design gap, to be validated and reported.(para 3.4, 4.4)
  • Methodology and depth of work are documented in an Internal Audit Programme, which sets out the testing procedures for each audit objective.(para 3.5, 4.5)
  • The elements of the plan are communicated to the auditee before fieldwork starts.(para 3.6)

How SIA 310 shows up in the internal audit file

  • The assignment plan for the auditable unit, with the approval of the Chief Internal Auditor or Engagement Partner.
  • The risk assessment for the unit and the list of key controls selected for testing.
  • The internal audit programme, with procedures set against each audit objective.
  • Design gaps recorded where an expected control does not exist.
  • The communication to the auditee sent before fieldwork began.

Common mistakes in practice

  • Re-using last year's programme without a fresh risk assessment of the unit.
  • An assignment plan with no recorded approval.
  • Testing only the controls that exist and saying nothing about a control that should exist and does not.
  • Starting fieldwork before the auditee has been told the scope and approach.

The file checklist and the mistakes above are practice points drawn from the requirements of the standard. They are not text from the standard.

Related standards

SIA 220 · Conducting Overall Internal Audit PlanningSIA 320 · Internal Audit EvidenceSIA 330 · Internal Audit DocumentationSIA 360 · Communication with Management

How this relates to global frameworks

The IIA's Global Internal Audit Standards (effective 9 January 2025) are a separate set from a different body, and there is no paragraph-for-paragraph match. The closest IIA principle is Plan Engagements Effectively.

Status and source

This standard is described here as it stands in the October 2022 compendium, which is the earlier set. ICAI's Internal Audit Standards Board lists its Compendium of Standards on Internal Audit (as on February 2026) as applicable from 1 April 2026 (source: the Board's compendium page, checked on 1 October 2026). That compendium renumbers the standards, so check the current number and text there before citing this standard in a report. ICAI's compendium page does not say whether the standards are mandatory or recommendatory, so we do not describe any standard as mandatory. The effective-date clause in each 2019 standard said it applied to internal audits beginning on or after a date to be notified by the Council of ICAI.

These pages summarise each standard as it stands in ICAI's Compendium of Standards on Internal Audit (as on 1 October 2022), working from an extract of that document. They are summaries and close paraphrases, not the text of the standards. ICAI's Internal Audit Standards Board lists its Compendium of Standards on Internal Audit (as on February 2026) as applicable from 1 April 2026 (source: the Board's compendium page, checked on 1 October 2026). For that current set we have only the titles, taken from the Board's 2025-26 annual report; its text is available from ICAI through a registration form on the compendium page and is not summarised here. ICAI's compendium page does not say whether the standards are mandatory or recommendatory, so we do not describe any standard as mandatory. Before you cite a number, a paragraph or a status in a report, check the February 2026 compendium. internalaudit.icai.org

Free working files for SIA 310

Take the working versions with you

Editable formats and tools from CORAA’s internal audit library that put SIA 310 into practice. Free to use.

Internal Audit Risk Assessment Matrix →Internal audit scope of work generator →Internal audit programme generator →Risk and control matrix builder →Kickoff pack generator →Data request list generator →

SIA 310 — frequently asked

What is SIA 310?

SIA 310, Planning the Internal Audit Assignment, is a Standard on Internal Audit issued by the Internal Audit Standards Board of ICAI. SIA 310 covers the plan for an individual assignment. That plan has to fit the overall plan, give scope, coverage and methodology that support reasonable assurance, allocate time, people and skills, and lead to efficient procedures.

What is an internal audit programme under SIA 310?

It is the document that records the methodology and depth of the work for an assignment. SIA 310 paras 3.5 and 4.5 require an Internal Audit Programme that sets out the testing procedures for each audit objective. SIA 320 para 4.4(b) then expects the evidence to be cross-referenced to it.

Is SIA 310 mandatory?

ICAI's compendium page does not say whether the Standards on Internal Audit are mandatory or recommendatory, so we do not describe SIA 310 as mandatory. ICAI's Internal Audit Standards Board lists its Compendium of Standards on Internal Audit (as on February 2026) as applicable from 1 April 2026 (source: the Board's compendium page, checked on 1 October 2026). SIA 310 as described on this page is from the earlier October 2022 compendium. The February 2026 compendium renumbers the standards, so check the current number and text there before citing it in a report.

What should the internal audit file show for SIA 310?

The assignment plan for the auditable unit, with the approval of the Chief Internal Auditor or Engagement Partner. The risk assessment for the unit and the list of key controls selected for testing. The internal audit programme, with procedures set against each audit objective. Design gaps recorded where an expected control does not exist. The communication to the auditee sent before fieldwork began.

Is SIA 310 the same standard in the February 2026 compendium?

The number is the same but the title is not. In ICAI's February 2026 compendium, which ICAI lists as applicable from 1 April 2026, SIA 310 is titled "Presentation and Communication of Internal Audit Report". This page covers SIA 310 as it stands in the October 2022 compendium, titled "Planning the Internal Audit Assignment". Only the titles of the February 2026 set are listed here; check its text in that compendium before citing it.

← Previous
SIA 250 — Communication with those Charged with Governance
Next →
SIA 320 — Internal Audit Evidence