HC-5.4.9
The CBB would expect to see in place a formal audit plan that:
  (a) Is reviewed and approved at least annually by the Board;
  (b) Is risk-based, with an appropriate scoring system; and
  (c) Covers all material areas of a licensee's  operations over a reasonable timescale.
  April 2016