CISSP: Certified Information Systems Security Professional

Planning is a high-level audit phase in which the audit scope, objectives, approach, resources, and relevant risks are established. Risk assessment is typically a planning activity, while requirements are an SDLC phase rather than an audit phase.