Glossary/IT and data

Full-population testing

Full-population testing uses data analytics to examine every item in a population rather than a sample, which AU-C 500 recognizes as one way to select items for testing.

CORAA TeamUpdated November 5, 2026

Definition

AU-C 500 lists three ways to select items for testing: select all items, select specific items, or use audit sampling. Full-population testing is the first. Analytics tools let an auditor run a test, such as matching every invoice to a receiving record or recalculating every depreciation entry, across the whole population. When it can be done, sampling risk is not a concern for that test.

Why it matters in an audit or review

Examining all items is more efficient when data is electronic and the test can be coded. The limit is data quality. The auditor still needs evidence that the data extract is complete and accurate, as AU-C 500 requires for information produced by the entity. Exceptions found still need investigation by the auditor.

Example

Illustrative: a client has 48,000 sales orders. The auditor tests all of them for shipping date later than invoice date, and 312 items fail. After review, 40 relate to period-end and are tested for cutoff.

Common mistakes

  • Skipping completeness checks on the extract.
  • Treating a clean full-population test as covering all assertions. It covers only the attribute tested.

Sources

  • AICPA, AU-C Section 500, Audit Evidence, selecting items for testing and information used as audit evidence
  • AICPA, AU-C Section 330, Performing Audit Procedures in Response to Assessed Risks and Evaluating the Audit Evidence Obtained

Definitions paraphrase AICPA and FASB guidance; read the standard itself before relying on a requirement. Example figures are illustrative. This page is guidance, not professional advice. Report an error

Standards

AU-C 500AU-C 330

Related terms

  • Audit data analytics
    Audit data analytics is the use of automated tools and techniques to analyze whole populations of data for risk assessment, testing and anomaly detection, rather than relying only on samples.
  • Audit sampling
    Audit sampling applies an audit procedure to less than 100 percent of the items in a population so that every sampling unit has a chance of selection, enabling conclusions about the whole population.
  • Journal entry testing
    Journal entry testing is the audit procedure of examining journal entries and other adjustments for evidence of material misstatement due to fraud, required on every audit as a response to management override risk.
  • Information produced by the entity
    Information produced by the entity (IPE) is data or reports the entity generates, such as aging reports, listings or system exports, that the auditor uses as audit evidence. Its completeness and accuracy must be evaluated.

Go deeper

All glossary terms →

For US CPA firms

Join the CORAA waitlist

CORAA AI drafts audit working papers from your client’s QuickBooks books and does the first pass: lead schedules, tie-out, memos, draft notes and letters. CORAA Network reviewers clear every finding. Your firm reviews and signs.

  • First audit free, so you can judge the quality on a real file
  • Flat fee by entity size; messy books included
  • We work only with CPA firms, never their clients
See how it works →

* required