Briefly explain factors to be considered by CA Y in determining the sample size for tests of controls.

The following are factors that the auditor may consider when determining the sample size for tests of controls. These factors, which need to be considered together, assume the auditor does not modify the nature or timing of tests of controls or otherwise modify the approach to substantive procedures in response to assessed risks. (I) When there is an increase in the extent to which the auditor's risk assessment takes into account relevant controls. The more assurance the auditor intends to obtain from the operating effectiveness of controls, the lower the auditor's assessment of the risk of material misstatement will be, and the larger the sample size will need to be. When the auditor's assessment of the risk of material misstatement at the assertion level includes an expectation of the operating effectiveness of controls, the auditor is required to perform tests of controls. Other things being equal, the greater the reliance the auditor places on the operating effectiveness of controls in the risk assessment, the greater is the extent of the auditor's tests of controls (and therefore, the sample size is increased). Thus, sample size will increase. (II) If there is an increase in the tolerable rate of deviation, then sample size will decrease, as lower the tolerable rate of deviation, larger the sample size needs to be. Tolerable error is the maximum error in the population that auditor is ready to accept in a given sample size. Smaller the tolerable error, larger will be the sample size. (III) When there is an increase in the expected rate of deviation of the population to be tested then sample size will increase, as higher the expected rate of deviation, larger the sample size needs to be so that the auditor is in a position to make a reasonable estimate of the actual rate of deviation. Factors relevant to the auditor's consideration of the expected rate of deviation include the auditor's understanding of the business (in particular, risk assessment procedures undertaken to obtain an understanding of internal control), changes in personnel or in internal control, the results of audit procedures applied in prior periods and the results of other audit procedures. High expected control deviation rates ordinarily warrant little, if any, reduction of the assessed risk of material misstatement. (IV) An increase in the auditor's desired level of assurance that the tolerable rate of deviation is not exceeded by the actual rate of deviation in the population will increase the sample size. Thus, the greater the level of assurance that the auditor desires that the results of the sample are in fact indicative of the actual incidence of deviation in the population, the larger the sample size needs to be. (V) In case of large populations, the actual size of the population has little, if any, effect on sample size. For small populations however, audit sampling may not be as efficient as alternative means of obtaining sufficient appropriate audit evidence. Therefore, there will be negligible effect on sample size due to increase in the number of sampling units in the population.