Memorizing the sample size tables is a trap. The AUD exam doesn't test if you can look up a number; it tests if you can exercise the professional judgment required to select the inputs for that table. The difference between passing and failing isn't the formula, but the reasoning behind choosing a 5% tolerable deviation rate over a 7% rate.
Sample design and selection on the CPA AUD exam tests your ability to apply audit sampling techniques to gather sufficient, appropriate evidence. It requires you to choose a sampling method (statistical or nonstatistical), determine an appropriate sample size, select items, and evaluate the results to form a conclusion about a population.
Key facts
- Official standard
- AICPA's AU-C Section 530, Audit Sampling.
- Primary purpose
- To draw reasonable conclusions about an entire population based on testing a subset.
- Key methods
- Attribute sampling (for tests of controls) and variables sampling (for substantive tests).
- Exam format
- Primarily tested through Multiple-Choice Questions (MCQs) and Task-Based Simulations (TBS).
- Core judgment
- Balancing the risk of incorrect acceptance/rejection with the cost of testing.
- Passing score
- A score of 75 on a 0-99 scale is required to pass any CPA exam section.
The AICPA reports the cumulative pass rate for the AUD section was 47.9% in 2023 (AICPA), underscoring the need for deep conceptual understanding, not just rote memorization.
What is Sample Design and Selection and Why It Matters
Audit sampling is the application of an audit procedure to less than 100 percent of the items within an account balance or class of transactions for the purpose of evaluating some characteristic of the balance or class. This concept, governed by AU-C 530, is the bedrock of modern auditing. You simply can't check every single transaction for a company like Apple or Walmart; you must use a representative sample to form a conclusion.
Studying for CPA AUD? Benchmark your score in 5 minutes.
Get an instant weak-spot assessment and a custom 12-week study plan PDF generated for your exam window.
On the AUD exam, this isn't an abstract theory. It’s a practical skill tested through MCQs and challenging Task-Based Simulations. You'll be put in the shoes of an auditor and asked to design a sampling plan, determine the sample size, or evaluate the results of a sample already taken. This is where many candidates lose points. They focus on the math and miss the underlying risk assessment.
The single biggest mistake is treating all inputs as equal. The examiners know that the most critical decision an auditor makes is setting the initial parameters. They will create scenarios where you must infer the appropriate risk of overreliance or tolerable misstatement from a narrative about the client's internal control environment. A weak control environment demands more persuasive evidence, which means a larger sample size. Try VoraPrep's adaptive CPA practice questions to see how these judgment-based scenarios appear on the exam.
Key Concepts and Rules You Must Know
To master sampling, you must be fluent in its language and logic. This isn't about memorizing definitions; it's about understanding how these concepts connect to drive an audit conclusion.
Statistical vs. Nonstatistical Sampling
Statistical sampling uses the laws of probability to select and evaluate a sample, allowing you to quantitatively measure and control sampling risk. Nonstatistical sampling relies on auditor judgment to do the same. Both are permitted under GAAS, but statistical sampling provides a more defensible and objective basis for your conclusions.The exam will test your ability to identify the key difference: measurement of sampling risk. Only a statistical plan allows you to make a statement like, "There is a 5% risk that the true deviation rate in the population exceeds 6%."
Key Sampling Methods
Your choice of method depends entirely on the audit objective. Are you testing if a control is working, or are you trying to estimate the total misstatement in an account balance?| Method | Primary Purpose | Used For | Key Question It Answers |
|---|---|---|---|
| Attribute Sampling | Test for a specific characteristic (attribute). | Tests of Controls | "What is the rate of deviation from a prescribed control?" |
| Variables Sampling | Estimate a numerical quantity, like a dollar value. | Substantive Testing | "What is the estimated total misstatement in this account?" |
| Monetary Unit Sampling (MUS) | A hybrid method to identify dollar misstatements. | Substantive Testing | "What is the maximum overstatement in this account?" |
Attribute Sampling
This is your go-to method for tests of controls. It answers a "yes/no" or "rate of occurrence" question. For example, "Does this invoice have a matching, approved purchase order attached?"Your sample size is determined by three key inputs:
- Risk of Overreliance: The risk you'll conclude controls are effective when they are not. A lower desired risk means you need a larger sample.
- Tolerable Deviation Rate: The maximum rate of deviation you can accept and still rely on the control. A lower tolerable rate requires a larger sample.
- Expected Population Deviation Rate: Your best estimate of the actual deviation rate. A higher expected rate requires a larger sample to confirm your estimate.
Notice the inverse relationship for the tolerable rate and the direct relationship for the others. This is a favorite exam topic.
Monetary Unit Sampling (MUS)
Also known as probability-proportional-to-size (PPS) sampling, MUS is a powerful tool for substantive testing, particularly for overstatements in asset accounts like accounts receivable. It works by treating each individual dollar as a sampling unit.This means a $10,000 invoice is 10,000 times more likely to be selected for testing than a $1 invoice. This automatically stratifies the population and focuses your effort on the highest-risk items without any extra work. If you find a misstatement in a selected item, you project that misstatement to the entire sampling interval it came from.
The exam often tests the mechanics of projecting errors in MUS. It's a critical skill that directly impacts the final audit opinion.
Check Your State’s Exact CPA Exam Requirements
Every state has different credit hour, ethics, and residency rules. Use our 55-jurisdiction checker to verify your eligibility before applying.
Worked Example with Step-by-Step Solution
Let's move from theory to practice. The AUD exam won't ask you for a definition; it will give you a scenario and expect you to act.
Maria assesses the control as critical for preventing material misstatement. Based on prior-year audits and a strong control environment, she sets the following parameters for attribute sampling:
- Tolerable deviation rate: 6%
- Expected population deviation rate: 1.5%
- Risk of overreliance: 5%
Using a standard sample size table, she determines the required sample size is 78. She tests the 78 items and discovers two payments that are missing the controller's approval. Maria must now evaluate these results. What is her most appropriate conclusion?
This is where your judgment comes into play. You have the raw data; now you need to interpret it like an auditor.
Step 1: Calculate the Sample Deviation Rate
First, calculate the actual deviation rate found in your sample. This is a simple calculation.- Deviations found: 2
- Sample size: 78
- Sample Deviation Rate = 2 / 78 = 2.56%
Step 2: Calculate the Upper Deviation Rate
The sample deviation rate isn't enough. You must consider the risk that your sample isn't perfectly representative of the population. This requires calculating the Upper Deviation Rate (also called the Upper Error Limit), which is the sample deviation rate plus an allowance for sampling risk.You would look this up in an AICPA evaluation table using your risk of overreliance (5%), the number of deviations found (2), and your sample size (78). For this example, let's say the allowance for sampling risk is 3.84%.
- Upper Deviation Rate = Sample Deviation Rate + Allowance for Sampling Risk
- Upper Deviation Rate = 2.56% + 3.84% = 6.4%
Step 3: Compare and Conclude
The final step is to compare your Upper Deviation Rate to your Tolerable Deviation Rate.- Upper Deviation Rate: 6.4%
- Tolerable Deviation Rate: 6.0%
Since the calculated Upper Deviation Rate (6.4%) exceeds the Tolerable Deviation Rate (6.0%), Maria cannot rely on the control. She has evidence that the true population deviation rate could be as high as 6.4%, which is beyond her acceptable threshold.
Maria's next steps would be to increase her planned substantive procedures for the related accounts, as she can no longer rely on this control to reduce that work. She would also need to communicate this control deficiency to management, a topic covered in our Required Communications study guide.
Master This Topic in a 7-Day Sprint
Feeling overwhelmed? Let's break this down into a manageable one-week plan. You can master sampling by focusing your efforts systematically.
Day 1: Foundation & Vocabulary Read AU-C 530. Don't try to memorize it. Your goal is to understand the purpose of sampling and the official definitions of terms like sampling risk, tolerable misstatement, and anomalous error. Create flashcards for these core terms. Day 2: Attribute Sampling Deep Dive Focus exclusively on attribute sampling for tests of controls. Work through 15-20 MCQs in the VoraPrep adaptive engine. For every question you get wrong, write down in one sentence why your logic was flawed. Was it confusing the tolerable rate with the expected rate? Day 3: Variables Sampling & MUS Shift your focus to substantive testing. Watch a lecture or read a chapter on classical variables sampling and Monetary Unit Sampling. The key is to understand when to use each and how MUS uses dollar units to its advantage. Day 4: The Math of Evaluation Today is about evaluating results. Practice calculating sample deviation rates, projecting misstatements in MUS, and calculating the upper deviation rate. Use the worked example in this guide as your template. The goal isn't to be a human calculator but to understand how the numbers drive the conclusion. Day 5: Judgment and Scenarios This is the most important day. Do a practice testlet of nothing but sampling Task-Based Simulations. Pay close attention to the narratives. What clues tell you to set a low risk of overreliance? How does the description of the client's business impact your tolerable misstatement? This builds the judgment skill the exam actually tests. Day 6: Synthesis and Connections Connect sampling to the rest of the audit. How does a control deviation finding (from Day 2) affect your substantive testing plan (from Day 3)? Review how control deficiencies are evaluated and communicated. A great related topic to review here is Evaluating Design and Implementation. Day 7: Final Review & Quiz Take a final 30-question mixed quiz on all sampling topics. Review your notes from the week. You should now be able to explain the difference between attribute and variables sampling to a colleague and walk them through the logic of evaluating a sample result.