Build the integrated audit plan

Objectives

Encode the approved engagement and sampling decisions. Keep assurance boundaries separate and assign competent independent testing.

Use the exact case labels in the fixture. The field checks validate this structured record, not the full quality of an audit or an external assurance opinion.

{
  "plan": {
    "company": "Tern Quay Payments and Hosting",
    "audit_type": "internal combined audit",
    "period": "2026-01-01 to 2026-03-31",
    "criteria": [
      "ISO 27001:2022",
      "PCI DSS v4.0.1",
      "ISO 20000-1:2018",
      "ISO 22301:2019"
    ],
    "scope": [
      "CDE",
      "managed hosting",
      "shared management processes"
    ],
    "grants_certification": false
  },
  "sample": {
    "population": 120,
    "emergency_cde": 12,
    "normal_cde": 3,
    "hosting": 3,
    "method": "targeted nonstatistical",
    "reconcile_deployments": true
  },
  "execution": {
    "days": 2,
    "payment_tester": "payments specialist",
    "independent": true,
    "expand_on_exception": true,
    "escalate_limits_to": "audit committee"
  },
  "mapping": {
    "change": [
      "ISO 27001 A.8.32",
      "PCI DSS 6.5",
      "ISO 20000-1 8.5.1"
    ],
    "recovery": [
      "ISO 22301 8.5",
      "ISO 20000-1 8.7.2"
    ],
    "separate_conclusions": true
  }
}

Step-by-step hints

The guided walkthrough, in full. It is free: no XP cost, and it does not touch the paid hint ladder or the reveal gate.

1. Step 1

   Preserve assurance boundaries

   Transfer the relevant case facts from the fixture into these fields. Compare each assertion with the scope, evidence and engagement rules before submission.

   Preserve assurance boundaries

2. Step 2

   Record populations and targeted selection

   Transfer the relevant case facts from the fixture into these fields. Compare each assertion with the scope, evidence and engagement rules before submission.

   Record populations and targeted selection

3. Step 3

   Assign independent testing and escalation

   Transfer the relevant case facts from the fixture into these fields. Compare each assertion with the scope, evidence and engagement rules before submission.

   Assign independent testing and escalation

4. Step 4

   Map process evidence to distinct criteria

   Transfer the relevant case facts from the fixture into these fields. Compare each assertion with the scope, evidence and engagement rules before submission.

   Map process evidence to distinct criteria

Rules summary

• XP on pass

  60 bonus XP the first time every check goes green.

• Paid hints

  1 available. Each costs 25% of the lab XP (about 15 XP).

• Reveal solution

  Scores 0 XP and unlocks only after 3 check runs.

• Attempt cap

  60 check runs per learner. The runner warns you in the last 10.

• Drafts

  Your editor content is saved in this browser, so a reload will not lose work.

• Walkthrough

  Always free and never penalised: use it before spending a hint.