In this phase, the auditor also aims to make a preliminary risk assessment with regard to the compilation of the report and/or the data collection process, so that he can make use of the knowledge gained when laying down what the audit should include, for example, the scope of random sampling.