Question

An IS auditor is testing the operating effectiveness of a change-management approval control that is expected to have a very low deviation rate. The auditor wants to minimize the sample size and the time spent on testing, and is willing to stop testing as soon as enough evidence supports a conclusion that the control is functioning as intended. Which sampling approach best fits this objective?

Accepted Answer

Stop-or-go sampling, which allows testing to cease once sufficient evidence of low deviation is obtained

Answer

Discovery sampling, designed to detect at least one instance of a critical fraud or irregularity

Answer

Classical variables sampling, which projects monetary misstatement across the population

Answer

Stratified mean-per-unit sampling, which divides the population into homogeneous subgroups by value