The engagement team generally should not finalize the audit plan or issue a commitment letter until it has done initial testing and reviewed existing information about the data and the system that produces the data.