An audit program shall be planned, taking into consideration the status and importance of the processes and areas to be audited, as well as the results of previous audits.