Periodic audit plans are developed using information from assurance programs and processes supporting performance incentive plans, regulatory obligations, relevant Sarbanes-Oxley (SOX) deficiencies, and business plan results.