Definition
Under AU-C 530, sampling means testing fewer than all items, with each unit having a chance to be selected, to reach a conclusion about the population. Sampling can be statistical, using random selection and probability theory to measure results, or nonstatistical, relying on judgment. Both need a clear objective, population, sample size and evaluation method.
Why it matters in an audit or review
The auditor cannot test everything, but must still reach a conclusion about the population. Sampling is one of three ways to select items for testing, along with testing all items and selecting specific items. Only sampling supports projecting results to the population. The sample must be representative, and the risk that it is not (sampling risk) is managed through size and design.
Example
A population of 4,500 customer invoices (illustrative) is tested for a pricing control. The auditor defines an invoice as the sampling unit, sets a tolerable deviation rate, uses a random number generator for 60 items and evaluates the deviations found against the tolerable rate.
Common mistakes
- Calling a handful of handpicked items a sample and projecting from it.
- Choosing sample size by habit instead of by risk, tolerable misstatement and expected misstatement.
- Skipping the investigation of anomalies or errors.
FAQ
Is statistical sampling better than nonstatistical?
Neither is required. Statistical sampling quantifies sampling risk; nonstatistical needs enough judgment documentation to be defensible.
Sources
- AICPA, AU-C Section 530, Audit Sampling
- AICPA, AU-C Section 500, Audit Evidence (means of selecting items for testing)
- AICPA, Audit Guide: Audit Sampling
Definitions paraphrase AICPA and FASB guidance; read the standard itself before relying on a requirement. Example figures are illustrative. This page is guidance, not professional advice. Report an error