What should be done with the contingency audit plan?

Keeping the contingency audit plan in a secure offsite location is crucial for several reasons. First, it ensures the safety and availability of the plan in case of unforeseen circumstances that may affect the primary location, such as natural disasters, fire, or other emergencies. By storing the plan offsite, organizations can ensure that vital information is preserved and accessible when needed, even if the main facilities are compromised.

Additionally, securing the plan offsite limits access to unauthorized individuals, thus maintaining the confidentiality and integrity of sensitive information included in the audit plan. This practice aligns with risk management principles, as it protects critical organizational resources.

While it is also important to regularly review the contingency audit plan to keep it current and effective, storing it securely offsite takes precedence in terms of preparedness. Sharing it with all staff members may not be advisable due to the sensitive nature of the information, and storing it only in a digital format may expose it to cybersecurity risks if not properly protected.