CORAA
University · Audit standards

Internal Control Test Results Summariser.

Enter each control you tested with the sample size and the exceptions found. The tool works out the deviation rate, compares it with the tolerable rate you set, and drafts a conclusion line for each control that you can edit for the working paper.

Control tests

Leave Tolerable rate % blank on a line to use the default below. The tolerable rate is your own judgement based on the control, the risk and the reliance you plan to place on it.

This compares the sample deviation rate with your tolerable rate. It does not compute an upper limit from sampling tables. Use your firm methodology and the current standards for sample sizes and for projecting results.

Summary of results
Controls tested6
Within tolerable, no exceptions2
Within tolerable, exceptions to investigate2
Exceeds tolerable2
Incomplete lines0
ControlSampleExceptionsRate %Tolerable %Result
Purchase orders approved before invoice4000.05.0Within tolerable
Vendor bank detail changes authorised2514.05.0Exceptions to investigate
Bank reconciliation reviewed monthly1200.05.0Within tolerable
Journal entries above limit approved6046.75.0Exceeds tolerable
Goods received notes matched to invoices4524.48.0Exceptions to investigate
Sales credit notes authorised30310.05.0Exceeds tolerable

The drafted conclusion for each control is in the Excel file, ready to edit.

One exception is not always a pass.

Reliance on a control depends on how often it fails compared with how often you can accept it failing. A zero-exception test supports reliance if the sample was big enough. An exception inside the tolerable rate still needs a reason. A rate above tolerable means the control cannot be relied on as planned and the rest of the audit plan may need to change.

Control testing sample plannerDeficiency aggregation worksheet

How the summary works

The deviation rate is exceptions divided by sample size, shown as a percentage. You set a default tolerable rate and can override it on any line.

A rate above the tolerable rate is marked as exceeding. A rate at or below it with at least one exception is marked for investigation. No exceptions is marked within tolerable. Lines with unusable numbers are marked incomplete.

Each line gets a draft sentence you can edit. The Excel file keeps a blank column for your own conclusion.

Worked example — journal approvals

Journal entries above the approval limit were tested: 60 items, 4 without approval, tolerable rate 5%.

Inputs
Sample size60
Exceptions4
Tolerable rate5%
Output
Deviation rate6.7%
ResultExceeds tolerable
The rate is above the tolerable rate, so the control is not relied on as planned and the audit response needs to change.

Common mistakes

Setting the tolerable rate after seeing the results
Decide it at planning, based on risk and the reliance intended.
Treating a sample rate as the population rate
Sampling risk applies. Use your methodology to project or evaluate where needed.
Not investigating small exceptions
The cause may show the control is badly designed or that a team is bypassing it.

Frequently asked questions

Does it calculate the sample size?+
No. Use your firm methodology or the sample planner linked below.
Does it give an upper deviation limit?+
No. It compares the sample rate with your tolerable rate.
Is my data uploaded?+
No. Everything runs in your browser.

Authoritative sources

ICAI — SA 330, The Auditor's Responses to Assessed Risks — Tests of controls and the effect of deviations. Check the current text.
Always confirm against the latest version of the source. Regulations evolve and amendments are common.
Related calculators
Control testing sample planner →Deficiency aggregation worksheet →Audit sampling calculator →
Share this tool
Last reviewed: 2026-10-17 · For informational purposes only — not professional advice.