The engagement work program is primarily based on the scope and audit objectives of the engagement. The work program outlines the specific procedures to be followed during the audit to achieve the defined objectives within the scope of the engagement. It serves as a detailed plan that guides the audit team in their work, ensuring that all necessary areas are covered.
IIA References:
* IIA Standard 2240: Engagement Work Program states that internal auditors must develop and document work programs that achieve the engagement objectives. These work programs are directly tied to the scope and objectives of the audit, which determine the nature and extent of audit procedures.
* The Practice Guide on Engagement Planning explains that the work program should be designed to address the key risks and objectives identified during the planning phase, ensuring that the audit is comprehensive and focused on the most critical areas.

Best practices for assurance engagement communication activities include defining the methods and timing of engagement communications during the "communicate" phase. This ensures that all stakeholders are aware of how and when they will receive information about the engagement, facilitating clear and effective communication. While it is important to communicate significant observations to relevant parties, including the audit committee if necessary, and to escalate issues as appropriate, the method and timing of these communications are crucial for maintaining clarity and coordination throughout the engagement. References:
* The IIA's International Standards for the Professional Practice of Internal Auditing (Standards), specifically Standard 2420 - Quality of Communications.
* The IIA's Practice Guide on Communicating Assurance Engagement Results.