The audit plan, where possible, should state the criteria to be used.
The criteria being used for the audit plan should ideally be stated.
The criteria being used for the audit plan should never be stated.