A5 Flashcards
What are the rules to audit sampling?
- Bell-shaped
- Samples have to be unrestricted and randomly selected
- Every item in the population must have an absolutely equal chance of being selected
- CPA cannot use “bias” in deciding which items will be selected. No substitute items may be used
- If the sample is large enough and is randomly selected it will be representative of the population
- Standard deviation is the measure of “variability” which refers to the range of values within the population
What is sampling risk?
Risk that the sample is not representative of the population and that the auditor’s conclusion will be different from the conclusion had the auditor examined 100% of the population
What are the types of sampling?
Attribute sampling- testing characteristics, flagging errors for IC
Variable sampling - substantive testing of acct bal - est of $ value of the population
What is audit risk and what does it include?
Is the uncertainty inherent in applying audit procedures
- uncertainties due to sampling; and
- uncertainties due to factors other than sampling
In performing substantive tests of details, the auditor is concerned with two aspects of sampling risk:
- Risk of incorrect acceptance - ineffective
- Risk of incorrect rejection - inefficient
In performing test of controls, the auditor is also concerned with two aspects of sampling risk:
- Risk of assessing control risk too low (Over reliance) -Ineffective
- Risk of assessing control risk too high (under reliance)- Inefficient
What percentage of risk does an auditor typically accept?
5%-10%. the auditor is 95% (90%) confident that the sample is representative of the population
What are some nonsampling risk examples? what can the auditor do?
Examples: (1) use inappropriate audit evidence (2) improperly evaluating the results
-The auditor can only attempt to reduce this risk to a very low level through adequate planning and supervision of the audit engagement and quality control of all firm practices
What is attribute sampling?
Is a statistical sampling method used to estimate the rate (%) of occurrence (exception) of a specific characteristic (attribute). Samples taken to test the operating effectiveness of controls are intended
When planning a particular audit sample for test of controls, the auditor applies professional judgment in considering:
- Objective of the test of controls
- Tolerable Deviation Rate/Mistakes
- Auditor’s allowable risk of assessing control risk too low
- Characteristics of the population
What is deviation rate?
The deviation rate in the sample is the auditor’s best estimate of the deviation rate in the population from which it was selected
The auditor performs the following steps when conducting an attribute sampling application
- Define the objective of the test
- Define the population
- Define the sampling unit
- Define the attributes of interest
- Determine Sample Size
Determine the sample size - the auditor must specify the following factors:
- Risk of assessing control risk too low
- Tolerable deviation rate
- Expected deviation rate
- Population size
What is the most common technique in selecting the sample?
Random selection
What is systematic selection?
Is also acceptable, but a disadvantage is that results may be skewed if errors occur in a systematic pattern
What is block (cluster) sampling?
Where groups of adjacent items are selected - is not acceptable
What happens if the upper deviation rate is less than or equal to the auditor’s tolerable deviation?
The auditor may rely on the control
What happens if the upper deviation rate exceeds the auditor’s tolerable deviation rate?
The auditor may not rely on the control
What are the three commonly used classical variables sampling plans?
- Mean-per-unit estimation
- Ratio Estimation
- Difference estimation
The auditor must perform the following steps when conducting a variables sampling application
- Define the objective of the test
- Define the population
- Define the sampling unit
- Determine the sample size
- Select the sample
Variable Sampling - The auditor uses the following parameters, in conjunction with tables or formulas, to determine sample size
- Tolerable misstatement
- Expected misstatement
- Audit Risk
- Characteristics of the population
- Assessed risk of material misstatement and assessed risk for other substantive procedures related to the same assertions
Variable sampling: Sample size will increase as the following increase: (direct relationship)
- Expected misstatement
- Standard Deviation (population variability)
- Assessed level of risk
Variable sampling: Sample size will decrease as the following increase: (inverse relationship)
- Tolerable misstatement
- Acceptable level of risk
What is Probability-Proportional-to-size sampling (PPS)?
Is the technique where the sampling unit is defined as an individual dollar in a population – is considered to be a hybrid method, because it uses attribute sampling theory to express a conclusion in dollar amounts rather than as a rate of occurrence
What are the advantages of PPS?
- PPS automatically emphasizes larger items by stratifying the sample. The chance of an item being selected is proportionate to its dollar amt
- If no errors are expected, PPS sampling generally requires a smaller sample than other methods
What is the disadvantage of PPS?
Is that zero balances, negative balances, and understated balances generally require special design considerations
What is tolerable misstatement?
Is the maximum dollar error that may exist in the account without causing the FS to be materially misstated
How is sampling interval and sampling size determined?
Sampling Interval = Tolerable misstatement / Reliability factor (from table)
Sampling Size = Recorded amt of the population / sampling interval
What is a control deficiency?
Exists when the design or operation of a control does not allow management or employees, in the normal course of performing their assigned functions, to prevent, or detect and correct misstatements on a timely basis.
When does a deficiency in design happen?
When a necessary control is missing or when an existing control does not achieve the desired objective
When does a deficiency in operation happen?
When a properly designed control does not operate as designed, or is performed by an inappropriate person
What is a significant deficiency?
A deficiency, or a combination of deficiencies, in IC that is less severe than a material weakness, yet important enough to merit attention by those charged with governance
Examples of Deficiencies in the design
- Inadequate design IC over preparation of FS
- Control Consciousness
- Segregation of duties or safeguarding assets
- IT controls
- Qualifications or training
- Monitoring
Failure in the operation of controls
- Lack of objectivity
- Misrepresentation
- Management Override
- Failure of an application control caused by a deficiency of a general control
- Deviation rate that exceeds the auditor’s expected rate
- Failure of the info and communication