SOX Update Testing Sample Size 2251
pamg last edited by
When performing update/refresh testing what is the appropriate sample size? Interim testing had no exceptions, so can I reduce the number of samples pulled? thanks in advance
kymike last edited by
We structured our testing to cover a portion of the annual samples during our interim testing and one sample at YE as part of roll-forward testing. For example, monthly controls had a sample size of 3. We tested 2 during the early testing and 1 in the fourth quarter near year end.
For low risk, routine controls, we tested the full sample early and are using inquiry/observation at year end.
I would suggest at this point that you test at least one sample for high-risk areas and use an inquiry-type test for lower risk areas. If a control failed a test earlier in the year, you will want to pull a full sample to retest at year end.