It is a standard that the company or clients determines what to design to perform a specific audit over specific data for a particular purpose. It is designed and agreed upon by the entity conducting the audit, as well as by any other appropriate party .