Audit Sampling
Audit Sampling
Audit Sampling
Red Sirug
AUDIT SAMPLING
(And Other Means of Testing)
Selecting specific items for examination does not constitute audit sampling and
therefore, not subject to sampling risk.
The results of audit procedures applied to selected specific items cannot be projected to
the entire population; accordingly, selective examination of specific items does not
provide audit evidence concerning the remainder of the population.
Audit Sampling:
Audit sampling (sampling) the application of audit procedures to less than 100% of the
items within a population of audit relevance (account balance or class of transactions) such that all
sampling units have a chance of selection in order to provide the auditor with a reasonable basis
on which to draw conclusions about the entire population
Audit sampling is the means that enable the auditor to draw conclusions about the
population on the basis of testing a sample drawn from it.
Sampling is essential throughout audits as auditors attempt to gather sufficient
appropriate evidence in a cost efficient manner.
Audit sampling is not required part of any audit procedure because when designing
audit procedures, the auditor should determine appropriate means of selecting items
for testing.
Audit sampling is used for both tests of controls (attributes sampling) and for tests of
AT Audit Sampling
Red Sirug
Page 1
Red Sirug
Page 2
f.
Statistical sampling applies the law of probability theory to aid the auditor in designing a
sampling plan and evaluating sample results.
In statistical sampling, auditors specify the sampling risk they are willing to accept and
then calculate the sample size that provides that degree of reliability. Results are
evaluated quantitatively.
Statistical sampling measures quantitatively the sampling risk (the risk from testing only
part of an audit population).
Advantages of statistical sampling: Conclusions may be drawn in more precise
ways when using statistical sampling because it enables the auditor to:
a. Measure the sufficiency of the audit evidence obtained.
b. Provide an objective basis for quantitatively evaluating sample results more
objective audit evidence
c. Design an efficient sample.
d. Quantify/measure sampling risk so as to limit it to an acceptable level.
e. Measure reliability (confidence level), precision, and sampling error (sampling risk).
Disadvantages of statistical sampling:
Danger of accepting statistical evidence at face value without sufficient skepticism
Its cost could exceed the benefits
Inappropriate it some cases (for example, test of controls that depend on segregation
fo duties or otherwise provide no audit trail of documentary evidence)
In statistical sampling, random sample selection methods should be used to give all
items in the population an equal chance to be included in the sample to be audited.
2. Non-statistical sampling a sampling approach that does not have both characteristics of
statistical sampling
Non-statistical sampling (or judgment sampling) is based solely on the auditors judgment.
The sample size is not determined mathematically. Auditors rely exclusively on subjective
judgment to determine sample size and to evaluate sample results.
A properly designed non-statistical sampling application can be as effective as statistical
sampling application.
One disadvantage is that it can misdirect an auditor to unreliable sampling units.
Additional notes on statistical and non-statistical sampling:
Statistical sampling is a mathematical approach to inference, whereas non-statistical
sampling is a more subjective approach.
Conclusions may be drawn in more precise ways when using statistical sampling
methods.
Both sampling approaches involve judgment in planning, executing the sampling plan,
and evaluating the results of the sample.
It is acceptable for auditors to use either or combination of statistical and non-statistical
sampling. The choice is based primarily on the auditors assessment of the relative
costs and benefits. Such choice is independent of the selection of audit procedures
because audit sampling is merely a means for accomplishing audit procedures.
Both sampling approaches can provide sufficient appropriate evidence.
Sampling methods are used by auditors in both control testing and substantive testing.
Auditors professional judgment:
Although statistical sampling aids the auditor in quantitative ways, it is not a substitute for
professional judgment. In other words, statistical sampling does not eliminate the need for the
auditors professional judgment.
The auditor must exercise professional judgment in both statistical and non-statistical sampling
to:
a. Define the population and the sampling unit;
b. Select the appropriate sampling method;
c. Evaluate the appropriateness of audit evidence;
d. Evaluate the nature of deviations or errors;
e. Consider sampling risk; and
f. Evaluate the results obtained from the sample and project those results to the population.
AT Audit Sampling
Red Sirug
Page 3
Ordinarily, risk assessment procedures to obtaining understanding of the entity and its
environment, including internal control, do not involve the use of audit sampling.
Audit sampling for substantive procedures applies to tests of details only.
Sampling Risk:
Sampling risk the possibility that the auditors conclusion, based on a sample may be
different from the conclusion reached if the entire population were subjected to the same audit
procedure.
The risk that the sample is not representative of the population and that the auditor's
conclusion will be different from the conclusion had the auditor examined 100% of the
population.
The possibility that even though a sample is properly chosen, it may not be
representative of the population.
Sampling risk can be reduced by increasing the sample size.
Sampling risk is an inherent part of sampling that results from testing less than the
entire population.
Two Types of Sampling Risk:
1. Risk that affects audit effectiveness and may lead to an inappropriate audit
opinion (Beta risk or Type II error) the risk the auditor will conclude that:
a. Risk of assessing control risk too low in case of a test of control, that the assessed
control risk is lower than it actually is
b. Risk of incorrect acceptance in case of a substantive test, conclusion that a material
error does not exist when in fact it does
2. Risk that affects audit efficiency as it would usually lead to additional work to
establish that initial conclusions were incorrect (Alpha risk or Type I error)
the risk the auditor will conclude that:
a. Risk of assessing control risk too high in case of a test of control, that the assessed
control risk is higher than it actually is
b. Risk of incorrect rejection in case of a substantive test, conclusion that a material error
exists when in fact it does not
Aspects of Audit Risk(Aspect of detection risk):
Audit risk is a combination of the risk that a material misstatement will occur (inherent risk
and control risk) and the risk that it will not be detected by the auditor (detection risk).
1. Sampling risk the risk or the possibility that, when a test of controls or a substantive test is
restricted to a sample, the auditor's conclusions base on a sample may be different from the
conclusions which would have been reached had the tests been applied to all items in the
population
Sampling risk is the aspect of audit risk and of detection risk that is due to sampling.
Aspects of sampling risk:
a. Substantive testing sampling risks:
1) Risk of incorrect acceptance the risk that the auditor will conclude that a material
error in an account balance (based on the sample) does not exist when in fact it does
(i.e., sample results fail to identify an existing material misstatement).
2) Risk of incorrect rejection the risk that the auditor will conclude that a material
error in an account balance exists when in fact it does not (i.e., sample results
mistakenly indicate a material misstatement).
b. Tests of controls sampling risks:
a. Risk of assessing control risk too high or the risk of under reliance (Alpha risk
or Type I error) the risk that the assessed level of control risk (based on the sample)
is greater than the true level of control risk (i.e., sample results indicate a greater
deviation rate than actually exists in the population).
AT Audit Sampling
Red Sirug
Page 4
This risk means that the auditor wrongly concludes that the control risk is higher
than it actually is.
This risk relates to audit efficiency as it would lead o additional work. If the
auditor assesses control risk too high, substantive tests will consequently be
expanded beyond the necessary level, leading to audit inefficiency.
b. Risk of assessing control risk too low or the risk of over reliance (Beta risk or
Type II error) the risk that the assessed level of control risk (based on the sample) is
less than the actual/true level of control risk (i.e., sample results indicate a lower
deviation rate than actually exists in the population).
This risk means that the auditor wrongly concludes that the control risk is lower than
it actually is.
This risk relates to audit effectiveness. If the auditor assesses control risk too low,
substantive tests will not be expanded to the necessary level to ensure an effective
audit. This would more likely lead to an inappropriate audit opinion.
Analysis of Sampling Risks:
Aspects of
sampling risks
Risk of incorrect
acceptance
Risk of incorrect
rejection
Risk
of
assessing
control risk too
low (risk of over
reliance)
Risk
of
assessing
control risk too
high
(risk
of
under reliance)
Auditors
wrong
conclusion
Not materially
misstated
when in fact
materially
misstated
Materially
misstated
when in fact
not materially
misstated
CR than actual
CR internal
control is
reliable
Additional work
(performance of
unnecessary more
extensive substantive
tests)
Performance of tests
of controls and less
extensive substantive
tests
CR than
actual CR
internal control
is not reliable
Additional work
(because nonperformance of tests
of controls would lead
to the performance of
unnecessary more
extensive substantive
tests)
Sacrificed
Effectiveness of the
audit because it may
lead to inappropriate
opinion
due
to
inappropriate
less
extensive
substantive
tests
Efficiency of the audit
because of unnecessary
additional work
Effectiveness of the
audit because it may
lead to inappropriate
opinion
due
to
inappropriate
less
extensive
substantive
tests
Efficiency of the audit
because of unnecessary
additional work
2. Non-sampling risk the risk that the auditor reaches an erroneous conclusion for any
reason not related to sampling risk
Examples of non-sampling risk:
The auditor might use/select inappropriate audit procedures (audit procedures that are
not appropriate to achieve a specific objective)
The auditor might misinterpret evidence or the results of audit tests
The auditor may fail to recognize an error (for example, failure by the auditor to
recognize a misstatement or deviation in documents examined)
Non-sampling risk pertains to all aspects of audit risk that are not due to sampling. It
refers to the possibility that auditors will arrive at an erroneous conclusion not
because of the chosen sample but due to other factors.
Non-sampling risk is always present and cannot be measured.
Non-sampling risk can be controlled by adequate planning and supervision of audit
work and proper adherence to quality control standards.
Sampling risk and non-sampling risk can affect the components of audit risk.
For example, when performing tests of control, the auditor may find no errors in a
sample and conclude that control risk is low, when the rate of error in the population is,
in fact, unacceptably high (sampling risk). Or there may be errors in the sample which
AT Audit Sampling
Red Sirug
Page 5
Red Sirug
Page 6
value by the number of items in population. MPU does not require the book value of the
population to estimate true population value.
2. Ratio estimation a sampling plan that uses the ratio of the audited (correct)
values/amount to their book values to project the true population value and an
allowance for sampling risk
Ratio estimation is a highly efficient technique when the calculated audit amounts
are approximately proportional to the client's book amounts.
3. Difference estimation a sampling plan that uses the average difference between
the audited (correct) values of items and their book values to project the actual
population value.
Difference estimation is used instead of ratio estimation when the differences are
not nearly proportional to book values.
Comparison of PPS sampling to classical variables sampling
Advantages of PPS sampling
1. Generally easier to use
2. Size of sample not based on variation of
audited amounts
3. Automatically results in a stratified
sample
4. Individually
significant
items
are
automatically identified
5. Usually results in a smaller sample size if
no misstatements are expected
6. Can be easily designed and sample
selection can begin before the complete
population is available
1.
2.
3.
4.
Red Sirug
Page 7
Risk of incorrect
rejection
Tolerable
misstatement
(error)
Expected
misstatement
(error)
Decrease
Decrease
Increase
Variation in the
population
(standard
deviation)
Increase
in
auditors
assessment
of
control
risk
or
inherent risk
Reliance on other
substantive
procedures
Increase
Increase
Decrease
Negligible
effect
Number of items in
the population
AT Audit Sampling
Red Sirug
Page 8
Tests of controls are designed to test the operating effectiveness of controls. For example,
the auditor might test controls for billing systems.
Red Sirug
Page 9
AT Audit Sampling
Red Sirug
Page 10