First, the auditor must obtain a thorough understanding of the company and its environment as well as the internal control.
After that, the auditor develops an audit strategy and audit plan in order to produce helpful evidence in establishing and supporting an opinion on the financial statements. This strategy and audit plan is constantly review and can even be modify during the audit process to adapt it to the need of the business.