Are your internal auditors present?
The audit plan should reflect reality, not ivory tower beliefs. How confident are you that your audit plan addresses the risks as they appear in the front lines? Is that acceptable? If not, what are you doing about it?