Sampling
Sampling
Sampling
AUDIT SAMPLING
Audit sampling involves the application of audit procedures to less than 100% of items within a population of
audit relevance such that all sampling units have a chance of selection in order to provide the auditor with a
reasonable basis on which to draw conclusions about the entire population (Philippine Standard on Auditing
530, para. 5)
There are two (2) types of sampling:
1. Statistical Sampling – an approach to sampling that has the following characteristics:
a. Random selection of the sample items; and
b. The use of probability theory to evaluate sample results, including measurement of sampling risk
2. Non-Statistical Sampling – a sampling approach that does not have characteristics (a) and (b) above
(PSA 530, para. 5).
Audit risk includes both uncertainties due to sampling and uncertainties due to factors other than sampling.
These aspects of audit risk are sampling risk and non-sampling risk, respectively (AU Section 350, para. 9).
Sampling Risk
The risk that the auditor’s conclusion based on a sample may be different from the conclusion if the entire
population was subjected to the same audit procedures (PSA 530, para. 5).
The auditor is concerned with two (2) aspects of sampling risk in performing tests of controls when sampling
is used (AU Section 350, para. 12):
1. The risk of assessing control risk too low (Risk of overreliance/Beta risk/Type II risk)
• It is the risk that the assessed level of control risk based on the sample is less than the
actual/true operating effectiveness of the control.
• It affects audit effectiveness and is more likely to lead to an inappropriate opinion.
2. The risk of assessing control risk too high (Risk of underreliance/Alpha Risk/Type I risk)
• It is the risk that the assessed level of control risk based on the sample is greater than the
actual/true operating effectiveness of the control.
• It affects audit efficiency as it would usually lead to additional work to establish that initial
conclusions were incorrect.
In performing substantive tests of details, the auditor is concerned with two (2) aspects of sampling risk:
1. The risk of incorrect acceptance (Beta risk/Type II risk)
• It is the risk that the sample supports the conclusion that the recorded account balance is not
materially misstated when it is materially misstated.
• It affects audit effectiveness and is more likely to lead to an inappropriate opinion.
2. The risk of incorrect rejection (Alpha risk/Type I risk)
• It is the risk that the sample supports the conclusion that the recorded account balance is
materially misstated when it is not materially misstated.
• It affects audit efficiency as it would usually lead to additional work to establish that initial
conclusions were incorrect.
Non-Sampling Risk
This includes all the aspects of audit risk that are not due to sampling. An auditor may apply a procedure to all
transactions or balances and still fail to detect a material misstatement. It includes the possibility of selecting
audit procedures that are not appropriate to achieve a specific objective.
Non-sampling risk also arises because the auditor may fail to recognize misstatements included in documents
that s/he examines, which would make that procedure ineffective even if s/he were to examine all items.
For example, confirming recorded receivables cannot be relied on to reveal unrecorded receivables. This risk
can be reduced to a negligible level through such factors as adequate planning and supervision and proper
conduct of a firm’s audit practice (AU Section 350, para. 11)
ATTRIBUTES SAMPLING
• Applicable to tests of controls
• Used to test an entity’s rate of deviation (or rate of occurrence) from a prescribed control procedure
• Example: An auditor uses attributes sampling plan to test controls for billing systems, disbursement
processing, inventory pricing, and depreciation, among other things.
• Since the risk of assessing control risk too low relates to the effectiveness of the audit,
it is kept at a relatively low level by the auditor.
b. Tolerable deviation rate (tolerable error)
• This is the maximum deviation rate that the auditor is willing to accept.
• The lower the rate of deviation that the auditor is willing to accept, the larger the
sample size needs to be.
c. Expected population deviation rate (expected error)
• The rate of deviation from the prescribed control procedure that the auditor expects
to find in the population.
• The higher the rate of deviation that the auditor expects, the larger the sample size
needs to be so as to be in a position to make a reasonable estimate of the actual rate
of deviation.
PSA 530 illustrates the factors that the auditor considers when determining the sample size:
Factor Effect on Sample Size Reason
An increase in the extent Increase The more assurance the auditor intends
to which the auditor’s risk to obtain from the operating
assessment takes into effectiveness of controls, the lower the
account relevant controls auditor’s assessment of the risk of
material misstatement will be, and the
larger the sample size will need to be.
When the auditor’s assessment of the risk
of material misstatement at the assertion
level includes an expectation of the
operating effectiveness of controls, the
auditor is required to perform tests of
controls. Other things being equal, the
greater the reliance the auditor places on
the operating effectiveness of controls in
the risk assessment, the greater is the
extent of the auditor’s tests of controls
(and, therefore, the sample size is
increased).
An increase in the tolerable Decrease The lower the tolerable rate of deviation,
rate of deviation the larger the sample size needs to be.
An increase in the Increase The higher the expected rate of deviation,
expected rate of deviation the larger the sample size needs to be so
of the population to be that the auditor is in a position to make a
tested reasonable estimate of the actual rate of
deviation. Factors relevant to the
auditor’s consideration of the expected
rate of deviation include the auditor’s
understanding of the business (in
particular, risk assessment procedures
undertaken to obtain an understanding of
internal control), changes in personnel or
internal control, the results of audit
5. Determine the method of sample selection. Some commonly used methods are as follows:
a. Random Sampling
• Each item in the population has an equal chance and nonzero probability of selection.
• It is applied through random number generators (e.g., random number tables).
• It is appropriate for both statistical and non-statistical sampling.
b. Systematic Selection
• The number of sampling units in the population is divided by the sample size to give
a sampling interval, for example 100, and having determined a starting point within
the first 100, each 100th sampling unit thereafter is selected.
• Although the starting point may be determined haphazardly, the sample is more likely
to be truly random if it is determined by the use of a computerized random number
generator or random number tables.
• When using systematic selection, the auditor would need to determine that sampling
units within the population are not structured in such a way that the sampling interval
corresponds with a particular pattern in the population.
d. Haphazard Selection
• The auditor selects the sample without following a structured technique.
• Although no structured technique is used, the auditor would nonetheless avoid any
conscious bias or predictability (for example, avoiding difficult to locate items or
always choosing or avoiding the first or last entries on a page) and thus attempt to
ensure that all items in the population have a chance of selection.
e. Block Selection
• It involves the selection of a block(s) of contiguous items from within the population.
• It cannot be used ordinarily in audit sampling because most populations are
structured such that items in a sequence can be expected to have similar
characteristics to each other but different characteristics from items elsewhere in the
population.
• Although, in some circumstances, it may be an appropriate audit procedure to
examine a block of items, it would rarely be an appropriate sample selection
technique when the auditor intends to draw valid inferences about the entire
population based on the sample.
c. For statistical sampling, comparing the maximum population deviation rate and the tolerable
deviation rate and evaluate the effectiveness of control accordingly.
• If maximum deviation rate ≤ tolerable deviation rate, it is implied that control is
effective and the sample results support the auditor’s preliminary assessment of
control risk.
• If maximum deviation rate > tolerable deviation rate, the auditor can conclude that
control is not effective and the sample results do not support the auditor’s preliminary
assessment of control risk. Therefore, the scope of substantive tests should be
increased.
For non-statistical sampling, comparing the sample deviation rate with tolerable deviation
rate or expected deviation rate.
• If sample deviation rate ≤ tolerable deviation rate or expected deviation rate,
internal control is considered effective and would support the auditor’s preliminary
assessment of control risk below maximum.
• If sample deviation rate > tolerable deviation rate or expected deviation rate, it can
be concluded that controls are not effective, and the auditor would assess control risk
at the maximum level.
d. Considering qualitative information.
The auditor considers each of the deviation’s nature, importance, and probable cause.
e. Reaching an overall conclusion.
In assessing control risk, the auditor considers all available quantitative and qualitative
information. The auditor must relate the assessed control risk to detection risk for each
financial assertion.
3. Discovery sampling
• Appropriate when the expected deviation rate is near zero and when the auditor’s objective
is to find at least one (1) deviation (exception) in a sample if the actual population deviation
rate exceeds or equals a predetermined critical rate (tolerable deviation rate).
VARIABLES SAMPLING
• Applicable to substantive tests
• Most commonly used to test whether recorded account balances are fairly stated
• For example, an auditor might use variables sampling to test recorded peso amounts of receivables.
• Reliability factor for risk of overstatement. This is based on the level of risk of incorrect
acceptance.
• Tolerable misstatement. It is the auditor’s planned level of materiality for an account balance or
class of transaction.
• Expected misstatement. It is the auditor’s preliminary estimate of the amount of misstatement
contained in the population.
• Expansion factor for expected misstatement. It is only used when the auditor expects finding
misstatements in the sample.
The table for reliability factors and expansion factors is shown in the illustration on Page 13.
Classical Variables Sampling Techniques
Classical variables sampling techniques use the normal distribution theory to evaluate selected
characteristics of a population based on the sample items. Here are the following methods used:
• Mean-Per-Unit Estimation. It is a technique that projects the sample average to the total
population by multiplying the sample average to the number of items in the population.
• Difference Estimation. It is a technique that uses the average difference between the audited
amounts and individual recorded amounts to estimate the total audited amount of a
population and the allowance for sampling risk.
• Ratio Estimation. It is a technique that uses the ratio of the audited amounts to the recorded
amounts in the sample to estimate the total amount of the population and the allowance for
sampling risk.
An increase in the auditor’s Increase The greater the level of assurance that
desired level of assurance the auditor requires that the results of
that tolerable misstatement the sample are, in fact, indicative of the
is not exceeded by actual actual amount of misstatement in the
misstatement in the population, the larger the sample size
population needs to be.
An increase in tolerable Decrease The lower the tolerable misstatement,
misstatement the larger the sample size needs to be.
An increase in the amount of Increase The greater the amount of misstatement
misstatement the auditor the auditor expects to find in the
expects to find in the population, the larger the sample size
population needs to be in order to make a
reasonable estimate of the actual amount
of misstatement in the population.
Factors relevant to the auditor’s
consideration of the expected
misstatement amount include the extent
to which item values are determined
subjectively, the results of risk
assessment procedures, the results of
tests of control, the results of audit
procedures applied in prior periods, and
the results of other substantive
procedures.
Stratification of the Decrease When there is a wide range (variability) in
population when appropriate the monetary size of items in the
population, it may be useful to stratify the
population. When a population can be
appropriately stratified, the aggregate of
the sample sizes from the strata generally
will be less than the sample size that
would have been required to attain a
given level of sampling risk, had one
sample been drawn from the whole
population.
The number of sampling Negligible Effect For large populations, the actual size of
units in the population the population has little, if any, effect on
sample size. Thus, for small populations,
audit sampling is often not as efficient as
the alternative means of obtaining
sufficient appropriate audit evidence.
(However, when using monetary unit
sampling, an increase in the monetary
value of the population increases sample
size, unless this is offset by a proportional
increase in materiality for the financial
statements as a whole [and, if applicable,
materiality level or levels for particular
5. Determine the method of sample selection. When selecting a sample, the auditor may use any of the
sample selection methods mentioned in the attributes sampling.
6. Perform the sampling plan/audit procedures.
7. Evaluate the sample results. The following procedures are performed in evaluating the sample results:
a. Projecting the sample error to the population using any of the following:
• Mean-per-unit estimation
• Difference estimation
• Ratio estimation
• Probability-proportional-to-size sampling
b. Considering sampling risk
c. Considering qualitative information
d. Reaching an overall conclusion
To reach a conclusion, the auditor compares the computed upper misstatement limit to the
tolerable misstatement. If the upper limit is less than or equal to the tolerable misstatement, the
sample results support the conclusion that the population is not misstated by more than tolerable
misstatement at a specified level of sampling risk. On the other hand, if the upper limit on
misstatement exceeds the tolerable misstatement, it can be concluded that the sample results do
not provide the auditor with an assurance that the misstatement in the population is less than the
tolerable misstatement, i.e., the recorded value may be misstated.
confirmed instead of individual invoices. Accounts receivable has 1,200,000 sampling units and 400 logical
sampling units*.
*Logical sampling unit is the account, document, transaction, etc., with which an individual dollar unit selected for inclusion in the
sample is associated.)
As mentioned earlier, there are factors to be considered in determining the sample size. For ABC Corporation,
the overall audit risk is 5%, inherent risk is 100%, control risk is 80%, and the risk of analytical procedures not
detecting material misstatement is 60%. The formula for risk of incorrect acceptance (TD) can be derived from
the audit risk formula below:
𝐴𝐴𝐴𝐴 = 𝑅𝑅𝑅𝑅𝑅𝑅 𝑥𝑥 𝐴𝐴𝐴𝐴 𝑥𝑥 𝑇𝑇𝑇𝑇
𝐴𝐴𝐴𝐴
𝑇𝑇𝑇𝑇 =
𝑅𝑅𝑅𝑅𝑅𝑅 𝑥𝑥 𝐴𝐴𝐴𝐴
. 05
𝑇𝑇𝑇𝑇 =
1 𝑥𝑥 .80 𝑥𝑥 .60
. 05
𝑇𝑇𝑇𝑇 =
. 48
The reliability factor and expansion factor are dependent on the specified risk of incorrect acceptance.
In this case, the TD or risk of incorrect acceptance is rounded off to 10%.
The reliability factor and expansion factor for ABC Corporation is 2.31 and 1.5, respectively. The sample size
can now be computed as follows:
𝐵𝐵𝐵𝐵 𝑥𝑥 𝑅𝑅𝑅𝑅
𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆 𝑠𝑠𝑠𝑠𝑠𝑠𝑠𝑠 (𝑛𝑛) =
𝑇𝑇𝑇𝑇 − (𝐸𝐸𝐸𝐸 𝑥𝑥 𝐸𝐸𝐸𝐸)
𝑃𝑃1,200,000 𝑥𝑥 2.31
𝑛𝑛 =
𝑃𝑃50,000 − (𝑃𝑃5,000 𝑥𝑥 1.5)
𝒏𝒏 = 𝟔𝟔𝟔𝟔
𝐵𝐵𝐵𝐵
𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆 𝑖𝑖𝑖𝑖𝑖𝑖𝑖𝑖𝑖𝑖𝑖𝑖𝑖𝑖𝑖𝑖 (𝑆𝑆𝑆𝑆) =
𝑛𝑛
𝑃𝑃1,200,000
𝑆𝑆𝑆𝑆 =
65
𝑆𝑆𝑆𝑆 = 18,462
The auditor must now identify customer account numbers (also called logical sampling units), including the
cumulative peso totals.
2089 1,198,394
2894 1,200,000
In this case, if the auditor selects P4,905, the first item in the sample is the account balance containing a
cumulative total 4905 or customer account number 1041. The second item in the sample would be customer
account number 1056 because the cumulative peso total of P23,367 (P4,905 + P18,462) is contained in this
account number. The third item would be customer account no. 1080 with cumulative peso total of P41,829
(P23,367 + P18,462).
• Projected misstatement. The auditor’s best estimate of the amount of misstatement in the
population.
If the logical sampling units is less than the sampling interval:
𝐵𝐵𝐵𝐵𝐵𝐵𝐵𝐵 𝑣𝑣𝑣𝑣𝑣𝑣𝑣𝑣𝑣𝑣 − 𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴 𝑣𝑣𝑣𝑣𝑣𝑣𝑣𝑣𝑣𝑣
𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃 𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚 = � � 𝑥𝑥 𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆𝑆 𝑖𝑖𝑖𝑖𝑖𝑖𝑖𝑖𝑖𝑖𝑖𝑖𝑖𝑖𝑖𝑖 (𝑆𝑆𝑆𝑆)
𝐵𝐵𝐵𝐵𝐵𝐵𝐵𝐵 𝑣𝑣𝑣𝑣𝑣𝑣𝑣𝑣𝑣𝑣
Tainting percentage
If the logical sampling units is more than or equal to the sampling interval:
𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃 𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚𝑚 = 𝐵𝐵𝐵𝐵𝐵𝐵𝐵𝐵 𝑣𝑣𝑣𝑣𝑣𝑣𝑣𝑣𝑣𝑣 − 𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴 𝑣𝑣𝑣𝑣𝑣𝑣𝑣𝑣𝑣𝑣
The procedures for evaluating results depends on whether overstatement errors are found in the
sample. If no errors are found in the sample, the projected misstatement is zero and the allowance
for sampling risk is no more than tolerable error.
• Allowance for sampling risk. This is the sum of the basic precision and incremental allowance for
sampling risk.
• Basic Precision. It is a measure of the closeness of the estimate of projected misstatement to the
population misstatement.
𝐵𝐵𝐵𝐵𝐵𝐵𝐵𝐵𝐵𝐵 𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃 = 𝑆𝑆𝑆𝑆 𝑥𝑥 𝑅𝑅𝑅𝑅
• Incremental allowance for sampling risk. It is an allowance to incorporate risk arising from not
auditing the entire sampling interval. These are the steps in computing for incremental allowance:
o Rank in descending order the projected misstatements for logical sampling units less than
the sampling interval.
o Multiply the ranked projected misstatements by the incremental change in reliability
factor.
o Subtract the projected misstatement for logical sampling units that are less than the
sampling interval.
For ABC Corporation, three (3) errors were found. Customer accounts 1091 and 1194 have book values less
than the sampling interval and customer account 1225 is larger than the sampling interval. After evaluating
the sample results, the auditor obtained the following information:
Total projected misstatement = P2,966
Basic precision = P42,647
Incremental allowance =P1,477
𝑈𝑈𝑈𝑈𝑈𝑈 = 𝑃𝑃𝑃𝑃 + 𝐵𝐵𝐵𝐵 + 𝐼𝐼𝐼𝐼
a b c d e f
Tainting Customer Projected Reliability Increase in Incremental
percentage account misstatement factor reliability allowance
(Ranked) number factor (c x e)
b. Difference estimation
𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴 𝑉𝑉𝑉𝑉𝑉𝑉𝑉𝑉𝑉𝑉 (𝐴𝐴𝐴𝐴) = 𝐵𝐵𝐵𝐵𝐵𝐵𝐵𝐵 𝑣𝑣𝑣𝑣𝑣𝑣𝑣𝑣𝑣𝑣 𝑜𝑜𝑜𝑜 𝑡𝑡ℎ𝑒𝑒 𝑝𝑝𝑝𝑝𝑝𝑝𝑝𝑝𝑝𝑝𝑝𝑝𝑝𝑝𝑝𝑝𝑝𝑝𝑝𝑝 − (𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃𝑃 𝑥𝑥 𝑎𝑎𝑎𝑎𝑎𝑎𝑎𝑎𝑎𝑎𝑎𝑎𝑎𝑎 𝑑𝑑𝑑𝑑𝑑𝑑𝑑𝑑𝑑𝑑𝑑𝑑𝑑𝑑𝑑𝑑𝑑𝑑𝑑𝑑)
𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴𝐴 𝑉𝑉𝑉𝑉𝑉𝑉𝑉𝑉𝑉𝑉 (𝐴𝐴𝐴𝐴) = 𝑃𝑃1,800,000 − (11,500 𝑥𝑥 𝑃𝑃5)
𝑨𝑨𝑨𝑨 = 𝑷𝑷𝑷𝑷, 𝟕𝟕𝟕𝟕𝟕𝟕, 𝟓𝟓𝟓𝟓𝟓𝟓
References:
Auditing Standards and Practices Council. (n.d.). Philippine Standard on Auditing 530: Audit Sampling. Retrieved,
October 9, 2019, from https://www.aasc.org.ph/downloads/PSA/publications/PDFs/PSA-530-Redrafted.pdf
Cabrera, M. E. (2015). Auditing theory. Manila: GIC Enterprises & Co., Inc.
Salosagcol, J. G., Tiu, M. F., & Hermosilla, R. (2018). Auditing theory: A guide in understanding PSA. Manila: GIC
Enterprises & Co., Inc.