I suggest to go with the SPACEDIRT approach - you can find a good description in this article: http://intosaiitaudit.org/intoit_articles/19_12_SPACEDIRT.pdf
What information should you include in a viable test plan?
What information needs to be included in a viable test plan?