Audit strategy

1.   The audit authority shall, after consulting the managing authority, prepare an audit strategy based on a risk assessment, taking account of the management and control system description provided for in Article 69(11), covering system audits and audits of operations. The audit strategy shall include system audits of newly identified managing authorities and authorities in charge of the accounting function. Such audits shall be carried out within 21 months of the decision approving the programme or the amendment of the programme identifying such an authority. The audit strategy shall be prepared in accordance with the template set out in Annex XXII and shall be updated annually following the first annual control report and audit opinion provided to the Commission. It may cover one or more programmes.
2.   The audit strategy shall be submitted to the Commission upon request.