Just What Makes A Good Audit Sample?
Now if you are responsible for internal audits at your place of work there is a fair change you are limited for time. You therefore accept that you are only going to check a sample in relation to the process being audited – but just how many records does that mean?
Now, I am not getting into a discussion here as regards statistically valid numbers, more of deploying some common sense based on what I have seen over the years. You, like me, start off with good intentions so perhaps half a dozen orders may get sampled at the start, then that reduces to three or four but as time goes on you fall into one of two traps.
You start picking just one order out and worse still you keep using that one to satisfy several questions on your checklist/ flow chart as both time and energy start to ebb away.
Ok, well that ‘s understandable on the basis that it tails off at the end, but the real issue is if you only ever start with one order right st the beginning. So, what then is the rule of thumb?
I am a great believer in the rule of three so do my best to use that at the start. Hopefully you find all three are good so move on, but if not do remember to resample before writing out that CAR. If the second sample re-enforces your view that there is something untoward then fair enough, but at least you have given it a fair chance.
One final point. If what you find is simply of an admin nature – signature missed, reference number missing or paperwork misfiled – can I suggest you get it sorted during the audit rather than being dogmatic and raising that CAR. That helps all concerned :)
However, I am not suggesting for one moment that my numbers are set in stone so do share how you deal with this part of the audit process.