Answer Posted / chatter

An IS auditor should use statistical sampling and not judgmental (nonstatistical) sampling, when:

Correct A.
the probability of error must be objectively quantified.

B.
the auditor wants to avoid sampling risk.

C.
generalized audit software is unavailable.

D.
the tolerable error rate cannot be determined.

You are correct, the answer is A.

A. Given an expected error rate and confidence level, statistical sampling is an objective method of sampling, which helps an IS auditor determine the sample size and quantify the probability of error (confidence coefficient).

B. Sampling risk is the risk of a sample not being representative of the population. This risk exists for both judgment and statistical samples.

C. Statistical sampling can use generalized audit software, but it is not required.

D. The tolerable error rate must be predetermined for both judgment and statistical sampling.

Question #: 29 CISA Job Practice Task Statement: 1.2

purchase orders issued to vendors have been authorized as per the authorization matrix

1083

WHICH OF THE FOLLOWING IS OFTEN AN ADVANTAGE OF USING PROTOTYPING GOR DYDTEM DVELOPMENT

2827