The engagement team generally should not finalize the audit plan or issue a commitment letter until it has done initial testing and reviewed existing information about the data and the system that produces the data.
The engagement team should finalize the audit plan without doing any prep work. 