Documentation of the Results of Tests of Controls

ZZZ, Inc.
Attributes Sampling Summary – Purchase Transactions
December 31, 2014
Objective of test:
1. To test the operating effectiveness of the procedures for matching receiving reports with purchase invoices;
2. To test the operating effectiveness of the procedures for matching purchasing orders with purchase invoices;
3. To test the operating effectiveness of the procedures for testing the clerical accuracy of purchase invoice;

Population: Voucher register entries for the first ten months of the year. Size: 6,350
Sampling Unit: Individual vouchers
Random selection procedure: Random number generator
Risk of assessing control risk too low: 5 percent
Planning Parameters: Sample Results:
Attributes Tested Tolerable Expected Sample Size Number of Achieved
Deviation Rate Deviation Rate Deviations Maximum Rate

1. Quantity and other

data on receiving
report agree with
purchase invoice.
2. Prices and other
data on purchase
order agree with
purchase invoice.
3. Clerical accuracy of
purchase invoice
has been verified.
Conclusion: The results support the assessment of a low level of control risk for existence and valuation of purchases,
inventory and accounts payable.

Nonstatistical Attributes Sampling

 In attributes sampling, the major differences between statistical and nonstatistical sampling are
the steps for determining sample size and for evaluating sample results.
 As in the case with statistical sampling, auditors who use nonstatistical sampling need to
consider the risk of assessing control risk too low and the tolerable deviation rate when
determining the required sample size. But these factors need not be quantified.
 When evaluating results, the auditors should compare the deviation rate of the sample to the
tolerable deviation rate.
 If the sample size was appropriate and the sample deviation rate is somewhat lower than the
tolerable deviation rate, the auditors can generally conclude that the risk of assessing control
risk too low is at an acceptable level.
 As the sample deviation rate gets closer to the tolerable deviation rate, it becomes less and less
likely that the population’s deviation rate is lower than the tolerable level. And the auditor must
use their professional judgment to determine the point at which the assessed level of control
risk should be increased above the planned level.