Audit Sampling Flashcards
There are two types of Audit sampling
1) Attribute sampling in Tests of Controls
2) Variable Sampling in Substantive Tests of Details
Define audit sampling:
is a selection of less than 100% of the population of audit relevance, and the evaluation of that sampel, such that the selected items will be representative of the Pop.
a rep. sample is one that will result in conclusions that, subject to the limitations of sampling risk, are similiar to what would have been if the whole pop was tested.
AICPA Audit and ACcounting Guide, Audit Sampling, lists procedures that do not invole sampling as follows:
1) Inquiry and obersvation
2) anlytical procedures
3) procedures applied to every item in the pop.
4) tests of contorls where application is not documented
5) procedures from which the auditor does not intend to extend a conclusion to the remaining items in the account.
6) untested balnaces
Audit sampling - nonstatistical and statistical
a) both involve judgment in planning, executing the mspaling plan, and eval. the results.
b) both can provide suficent appropriate audit evidence
c) statistcal sampling helps the auditor to:
1) design an efficient smaple
2) measure the sufficiency of the audit evidence obtained.
3) evaluate the sample results.
- auditor cna qnatify smapling risk to a limitit to a level considerd acceptable.
Costs of sampling:
1) training auditors
2) designing samples
3) selecting items to be tested.
Audit risk:
is a combination of the risk that a material misstatement will occur and not be detected.
AR = IR X CR x DR
Now DR can equal AP x TD
AP = Analytical procedure risk and other relevant substantive tets
TD = Test of details allowable risk of incorrect acceptance for this substantive test.
Nonsampling risk
incldues all aspects of audit risk that are not due to sampling. It is controlled by adequate planning and supervision of aduit work and proper adherence to quality contorl standards. Ex.
1) the failure to select appropriate audit procedures
2) The failure to recognize missatements in documents ex.
3) misinterpreting the results of audit tests.
Think of human type errors
Sampling risk:
is the risk that auditor’s conclusion, based on a sample, might be different from the conclusion that would be reached if the test wer eapplied to the entire thing.
A) tests of contorls smapling risk include risk of assesing control risk too high and control risk too low.
B) Substantive test sampling risks including the risk of incorrect rejection and the risk of incorrect acceptance.
Types of Audit Tests in which sampling may be used
A) Test of controls
B) Substantive Tests
C) Dual purpose tests - when chosen, auditors select the sample size as the higher of that required for the two purposes. Ex. if the test of control test required 45 items, and the substantive test required 40, both tests would be perforemd using the 45 items.
Types of statistical sampling plans:
1) Attributes sampling - used in tests of controls - reaches a conclusion in terms of a rate of occurence 0 discsused in section B.
2) Variable sampling - reaches a conclusion in dollar amounts.
1) probability -proportional-to-size (PPS) sampling
2) classical variables sampling techniques
Sampling in Tests of Controls- Sampling Risk - 1) Risk of assessing control risk too high (alpha risk, type 1 error) -
is the risk that the assessed level of control risk based on the sample is greater than the true operating effectiveness of the contorl structure policy or procedure. This risk relates to AUDIT EFFICIENCY. If the audtior assess contorl risk too high, substantive tests will consequently be expended beyong the ncessary level, leading to audit inefficency.
Risk of assesing control risk too low (beta risk, type II error)
is the risk that the assessed level of control risk based on the sample is less than the true opearting effectiveness of the contorl structure policy or procedure. Know that his risk relates to AUDIT EFFECTIVENESS. If the auditor asesses contorl risk too low, subsatntive tests will not be expanded to the ncessary level to ensure effective audit.
Statistical (Attributes) sampling for Test of Controls
A. Steps involved in attributes sampling.
1. Determine the objectives of the test - remember that tests of contorls are designed to provide reasonable assurance that internal contorl is operating effectively. For ex., attirubtes sampling might test contorls for voucher procesing, billing sytmes. etc.
Uusally use when there’s a trail of documentary evidence.
Define the deviation conditions -
An auditor should identify characteristics (attributes) that would indicate opeartion of the internal control procedures. The auditro next defines the possible deviation conditions. A divation is a depature from the prescribed IC policy and procedure.
ex. If the prescribed procedure to be tested requires the cancellation of each paid voucher, a paid but uncanceled voucher would constitute a deviation.
Define a pop. -
For tests of controls, the population is the class of tranactions being tested. Conclusions based on sample results can be projected only to the pop. from which the smaple was seleceted.
Three steps to defining a pop.
1) Define the period covered by the test- ideally, tests of controls should be applied to tranactions executed during the netier period under audit. In some cases it is more efficient to test tranactions at an interim date and use supplemental procedures to obtain reasonble assurance regarding the remaining period.
2) Define the sampling unit - the sampling unit is one of the indivudal elements constituting the population. IN our earlier example, the sampling unit si the voucher.
3) Consider the completeness of the population - the auditor actually selects sampling units
Method to selecting the sample -
1) Random number sampling - every sampling unit has the same probability of being selected, and every combination of sampling units of equal size has the same probability of being selected. Ranodm numbers can be generated.
2) Systematic sampling - every nth (pop. size/sample size) item is selected after a random start. When a random starting point is used, this method provides every sampling unit in the pop an equal cahnce of being selected.
3) Haphazard sampling - a sample consisting of units selected without any conscious bias, that is, without any special reason for including or omitting items form the smaple.
4) block sampling 0 a sample consisting of a group of units. <–least desirable method.
Determine the sample size
1) Allowable risk of asessing contorl risk too low. A low allowable risk is normaly selected.
- Risk levels between 1% and 10% are normally used.
2) There is an inverse relationship (e.g., as one increases the other decreases) between the risk of asessing contorl risk too low and smaple size.
B. Tolerable rate - The maximum rate of deviation from a prescribed control structure policy or procedure that an auditor is willing to accept without modifying the planned assessed level of contorl risk.
- The auditor’s detrmination of the tolerable deviation rate is a function of
a) the palnned assesed level of control risk.
b) the degree of assurance desired by the sample.
2) When the adutiro’s planned assessed level of cnotrol risk is low, and degree of assurance desired from the smaple is high, the tolerable rate shoudl be low.
A. this will be the case for ex., when the audtiro does not perform other tests of control.
C. Expected pop deviation rate (expected rate of occurence)- an estimate of the deviation rate in the entire pop.
1) If expeceted pop. deviation rate exceeds the tolerable rate, tests will not be performed.
2) Although the risk of assessing control risk too high is often not explicitly controlled when determining attributes sample size, it can be controlled to some extent.
3) There is a direct relationsihp between the expected deviation rate and sample size.
4) the expected pop. deviation rate is
typically determined by using last year’s deviation rate adjusted judgmentally for curent year changes in contorl proceudres.
b. used only to detmeirne smaple size and not to evaluate sample results.
5) Deviation from a contorl procedure does not ncessarily result in a missatement, the rate of missatements is generally lower than the deviation rate.
Population effect
Increases in the size of the pop. nromally increase the sample size. However, it is generally appropriate to treat any pop. of more than 5000 sample units as if it were infinite.
Fixed vs. sequential sample size approach
Audit samples may be designed using either a fixed or a sequential sample size approach. Supplmenting traditional attributes (fixed size) sampling approaches are
1) Sequential (stop or go) sampling - a sampling plan or which the sample is selected in several steps, with the need to perform each step conditional on the results of the preivous steps. That is, the results may either be so poor as to indicate that the contorl may not be relied upon, or so good as to justify reliance at each step.
2) Discovery sampling - a procedure for determining the sample size required to have a stipulated probability of observing at least one occurrence when the expected pop. deviation rate is at a deisgnated level. Most appropriate hwen expected deviation rate is zero or near zero. If deviation is detected, the auditor must either 1 ) use an alternate approach, 2 ) if the deviation is of sufficent importance, audit all tranactions.
Perform the sampling plan:
Each deviation should be analyzed to detmerine whether it is an isolated or recurring type of occurence.
A) The auditor should select extra sample items so that voided, unused, or inaplicable documents can be excluded.
B) If the auditor is unable to examine a selected item, it should be consdiered a deviation from evaluation purposes. Consider the reasons for the limitation and it’s implications.
C) If early indication that control cannot be relied upon, no need to continue the test.
Evaluate the sample results
Once audit procedures have been perfoermed on all sample items, the sample results must be evaluated and proejcted to the entire pop. from which sample was selected.
A) calculate the sample deviation rate:
1. Deviation rate = Number of observed deviation/ sample size.
- the deviation rate is the auditor’s best estimate of the true deviation rate in the pop.
For the risk of asessing contorl risk too low, determine the upper deviation limit:
1) the auditor uses the numbero f deviations noted, and the sampling table to calculate the upper deviation limit.
a. This upper deviation limit represents the sample deivation rate PLUS an allowance for sampling risk.
Compare the upper deviation limit to the tolerable rate specified in designing the smaple.
- If the upper deviation limit is less than or equal to the tolerable rate, the smaple results suppoert reliance on the contorl procedure tested.
Attributes sampling plan:
Population size: over 5000 units
Allowable risk of assessing contorl risk too low: 5%
Tolerable deviation rate: 6%
Estimated population deviation rate: 2.5%
Reference the sample size table. the audtiro conludes the required sample size is 150 units. Auditor applied appropriate audit procedures to the 150 and found 8 deviations!
a. To calculate sample deviation rate: 8/150 = 5.3%
b. The upper deviation limit found from the table for a 5% risk of assessing control risk too low and 8 deviations = 9.5%
c. The allowance for sampling risk= 9.2-5.3=4.2%
d. the conclusions that can be drawn include
i. there is a 5% cahnce of the true pop. deviation rate being greater than or equal to 9.5%.
ii. the upper deviation limit 9.5% exceeds the tolerable deviation rate 6%, the smaple results indicate that contorl risk for hte contorl procedure being tesed is higher than planned, and therefore, the scope of resulting substantive tests must be increased.
The auditor should consider the qualitative aspects of each deviation:
1) nature an cuase of each deviation should be analyzed.
2) the possible relationship of the deviations to other phases of hte aduit.
Conclusion on sampling results:
1) If all evidence obtained, including sample results, supports the aduitor’s planned assessed level of contorl risk, the auditor generally does not need to modify planned substnative tests.
2. If the planned level is not supported, the auditor will
a. test other related controls.
b. modify the related substantive tests to relfect increased control assesment.
Document the sampling procedure