Back to results for “Audit Risk & Materiality”
Auditing & Assurance › Audit Sampling

How do you evaluate the results of a control test sample?

Intermediate

Answer

Count the deviations (control failures) in the sample, compute the sample deviation rate, and for statistical sampling determine the upper deviation rate (adding an allowance for sampling risk). If the upper deviation rate is at or below the tolerable rate, the auditor may rely on the control; if it exceeds, control risk is higher and substantive procedures increase.
Sample 60, deviations 2 -> 3.3% sample rate;
if upper deviation rate <= tolerable rate -> rely on control.
Real-world example Finding 2 exceptions in 60 items, the auditor computes the upper deviation rate and decides whether reliance is still justified.

Common follow-ups: What is the upper deviation rate? | What if deviations exceed tolerable?