SOX Update Testing Sample Size 2251



  • When performing update/refresh testing what is the appropriate sample size? Interim testing had no exceptions, so can I reduce the number of samples pulled? thanks in advance



  • We structured our testing to cover a portion of the annual samples during our interim testing and one sample at YE as part of roll-forward testing. For example, monthly controls had a sample size of 3. We tested 2 during the early testing and 1 in the fourth quarter near year end.
    For low risk, routine controls, we tested the full sample early and are using inquiry/observation at year end.
    I would suggest at this point that you test at least one sample for high-risk areas and use an inquiry-type test for lower risk areas. If a control failed a test earlier in the year, you will want to pull a full sample to retest at year end.


Log in to reply