Control risk is considered to be high where the audit entity does not have adequate internal controls to prevent and detect instances of fraud and error in the financial statements. Control Risk is the risk of a material misstatement in the financial statements arising due to absence or failure in the operation of relevant controls of the entity. Sample items should be selected in such a way that the sample can be expected to be representative of the population. Ideally, the auditor should use a selection method that has the potential for selecting items from the entire period under audit.

Selecting a Sampling Approach

The Financial Reporting Council (FRC)’s thematic review of audit sampling made key recommendations for all audit firms and offered insights into sampling methods and methodologies. Here we explore what the findings mean for smaller firms and https://www.bookstime.com/ highlight some opportunities to enhance audit sampling. Sampling risk is the risk that the auditor’s conclusions based on a sample may be different from the conclusion if the entire population were the subject of the same audit procedure.

Professional development and skills

However, candidates must appreciate that 100% examination is highly unlikely in the case of tests of controls; such sampling is more common for tests of detail (ie substantive testing). An auditor must apply audit procedures to detect material misstatements in the financial statements whether due to fraud or error. Misapplication or omission of critical audit procedures may result in a material misstatement remaining undetected by the auditor. Some detection risk is always present due to the inherent limitations of the audit such as the use of sampling for the selection of transactions. Audit sampling is the use of an audit procedure on a selection of the items within an account balance or class of transactions.

Sample selection

In table 2 it is assumed, for illustrative purposes, that the auditor has chosen an audit risk of 5 percent for an assertion where inherent risk has been assessed at the maximum. Table 2 incorporates the premise that no internal control can be expected to be completely effective in detecting aggregate misstatements equal to tolerable misstatement that might occur. The table also illustrates the fact that the risk level for substantive tests for particular assertions is not an isolated audit risk model decision. Rather, it is a direct consequence of the auditor’s assessments of inherent and control risks, and judgments about the effectiveness of analytical procedures and other relevant substantive tests, and it cannot be properly considered out of this context. The sufficiency of audit sample sizes, whether nonstatistical or statistical, is influenced by several factors. Table 1 illustrates how several of these factors may affect sample sizes for a substantive test of details.

• Ideally, the auditor should use a selection method that has the potential for selecting items from the entire period under audit.
• However, the person doing the selections will probably skew the selections (even if inadvertently), so the selections are not truly random.
• For example, if the auditor tests only 20% of trade receivables for existence at the reporting date by confirming after-date cash, this is hardly representative of the population, whereas, say, 75% would be much more representative.
• This method does not include the use of tables or statistical percentages, but rather it relies upon professional judgment on the part of the auditor as well as the policy implemented by the firm.
• In order to keep the overall audit risk of engagements below acceptable limit, the auditor must assess the level of risk pertaining to each component of audit risk.
• Under stratified sampling, the auditor splits the population into different sections (such as high value and low value) and then selects from each section.

Inherent Risk

If auditors take the time to carefully identify risky items, the remaining population will be lower risk and result in a smaller residual sample size. For example, if an audit requires a low detection risk to counter a high control risk, auditors may rely less on control testing and conduct extensive substantive procedures to form a valid audit opinion. The extent and nature of audit procedures is determined by the level of detection risk required to bring audit risk to an acceptable level. Though this approach may be efficient, there is a risk that a block of items will not reflect the characteristics of the entire population. When using block sampling, sampling risk can be reduced by selecting a large number of blocks of samples. Students must ensure they can discuss the results of audit sampling and form a conclusion as to whether additional work would need to be undertaken to reduce the risk of material misstatement.

The sampling method used should yield an equal probability that each unit in the sample could be selected. Audit sampling is needed when population sizes are large, since examining the entire population would be highly inefficient. There are multiple ways to engage in audit sampling, including the methods noted below.

The FRC review also highlights the importance of firms being able to understand the statistical concepts behind their sample size methodologies, particularly given requirements in the new and revised International Standards on Quality Management. Audit firms that rely on working papers from methodology providers may want to revisit this. Control risk involved in the audit also appears to be high since the company does not have proper oversight by a competent audit committee of financial aspects of the organization. The company also lacks an internal audit department which is a key control especially in a highly regulated environment.

AccountingTools

Although exercising careful judgment is crucial during every step of the sampling process, it is extremely necessary when choosing the non-statistical approach. This method does not include the use of tables or statistical percentages, but rather it relies upon professional judgment on the part of the auditor as well as the policy implemented by the firm. Under this approach, it is common practice for most accounting firms to create universal guidelines for auditors in order to determine a proper sample size. For example, if a given client’s control risk is high, a firm would typically require a high sample size when selecting records. Where the auditor’s assessment of inherent and control risk is high, the detection risk is set at a lower level to keep the audit risk at an acceptable level. Lower detection risk may be achieved by increasing the sample size for audit testing.

• The use of sampling is widely adopted in auditing because it offers the opportunity for the auditor to obtain the minimum amount of audit evidence, which is both sufficient and appropriate, in order to form valid conclusions on the population.
• Monetary balances can also be subject to varying degrees of exception – for example, a payables balance of $7,000 can be understated by $7, $70, $700 or $7,000 and the auditor will clearly be interested in the larger misstatement.
• This objective cannot be achieved if the auditor deliberately avoids items that are difficult to locate or deliberately avoids certain items.
• File reviewers often challenge firms on how samples are picked, as well as on whether sample sizes are big enough.
• Haphazard samplingWhen the auditor uses this method of sampling, he does so without following a structured technique.