audit-sampling
audit-sampling
• Decide which 100 items to select from the population. 2. Select the sample and
• Perform the audit procedure for each of the 100 items and perform the tests
determine that three exceptions exist.
• Reach conclusions about the likely exception rate in the 3. Evaluate the results
total population when the sample exception rate equals
percent.
November 26, 2024 By: Gizachew S. 15-7
Statistical sampling applies mathematical rules so that the auditor can
quantify (measures) sampling risk in planning the sample (step 1) and
evaluating results (step 3).
Non statistical sampling does not quantify sampling risk, but a
properly designed non statistical sample can provide effective results in
audits.
The three phases of sampling are identical for both statistical and
nonstatistical sampling:
1. Plan the Sample
2. Select the Sample and Perform the Audit Procedures
3. Evaluate the Results
There are 14 well-defined steps that fall under the three phases. The
terms used in audit sampling are detailed in Table 15-1.
• Unless each attribute is carefully defined in advance, the staff person who
performs the audit procedures will have no guidelines to identify exceptions.
• Nine attributes of interest and exception conditions for the Hillsburg audit are shown in
Table 15-3.
4. Define the Population: The items which the auditor wishes to generalize.
• The auditor defines the population consistent with the objectives of the tests.
5. Define the Sampling Unit: The sampling unit is defined based on the population
and the sample selection method. The sampling unit is the physical unit that
corresponds to the random numbers the auditor generates.
November 26, 2024 By: Gizachew S. 15-27
November 26, 2024 By: Gizachew S. 15-28
APPLICATION OF NONSTATISTICAL AUDIT SAMPLING (CONT.)
Phase 1 - Plan the Sample (cont.):
6. Specify the Tolerable Exception Rate: The tolerable exception rate (TER) for each attribute
requires the auditor’s professional judgment. The TER can significantly affect the sample
size. Figure 15-2 on page 494 shows the TER on a sampling data sheet.
7. Specify Acceptable Risk of Overreliance: Sampling always has a risk of incorrect
conclusions about the population.
• Auditors are concerned with the risk of overreliance because it impacts the effectiveness of
the audit. Underreliance affects the efficiency of the audit.
• The acceptable risk of overreliance (ARO) measures the risk the auditor is willing to take of
concluding that a control is effective when the true population exception rate is greater than
TER.
Guidelines for establishing TER and ARO are illustrated in Tables 15-4 and 15-5.
November 26, 2024 By: Gizachew S. 15-29
November 26, 2024 By: Gizachew S. 15-30
November 26, 2024 By: Gizachew S. 15-31
APPLICATION OF NONSTATISTICAL AUDIT SAMPLING (CONT.)
Phase 1 - Plan the Sample (cont.):
8. Estimate the Population Exception Rate: Auditors should make an estimate of the
population exception rate to plan the appropriate sample size. If the estimated
population exception rate (EPER) is low, a relatively small sample will satisfy the
auditor’s tolerable exception rate (TER).
9. Determine the Initial Sample Size: Four factors determine the initial sample size:
population size, TER, ARO, and EPER.
• It is called an initial sample size because the exceptions in the initial sample must be
evaluated before an auditor can decide if the sample is sufficient to achieve the
objectives of the test.
Factors that affect the sample size are shown in Table 15-6.