Which Risk Type Most Influences Sampling Methodology?

CISA By islever Editorial Last updated Sep 7, 2026

Short answer

D Detection risk directly dictates audit sampling methodology selection because auditors adjust testing scope to maintain it within acceptable thresholds.

Question

Which type of risk would MOST influence the selection of a sampling methodology?

Inherent
Residual
Control
Detection Correct Answer

Key Takeaways

Evaluates the direct link between sampling design and auditor-controlled risk, with the primary trap being confusion over which risk component sampling actually mitigates.

This CISA question examines how audit risk components dictate sampling methodology choices, reflecting a community split between inherent and detection risk interpretations.

Common mistake: Candidates frequently select Inherent Risk, incorrectly assuming that pre-existing business vulnerabilities directly dictate sampling techniques instead of recognizing sampling's role in managing Detection Risk.

Expert Analysis

Why the Answer Is Correct

Detection risk represents the probability that audit procedures will fail to identify a material misstatement. Since auditors can directly control sampling methodology, sample size, and testing extent to lower this risk to an acceptable level, it most heavily influences how sampling is structured. Adjusting detection risk tolerance is the primary driver for selecting statistical versus non-statistical approaches and determining coverage rates.

Why the Other Options Are Wrong

Inherent risk reflects natural susceptibility to misstatement before controls exist, setting the audit context but not dictating the technical sampling framework. Control risk measures control effectiveness and influences overall audit strategy rather than specific sampling mechanics. Residual risk is simply inherent minus controls and does not directly guide sampling methodology selection.

Community Comment Notes

Several users correctly identified Detection Risk, noting that sampling must be adapted to prevent missed errors (Comment 3, 4). Others argued for Inherent Risk, emphasizing entity characteristics (Comment 2, 5). The debate highlights the importance of distinguishing between risk assessment phases and audit response execution in CISA scenarios.

Official Reference

https://www.isaca.org/resources/isaca-journal/past-issues/2019/volume-6/the-audit-risk-model

This link opens the official vendor documentation in a new tab.

Exam Strategy

When evaluating sampling questions, always trace back to which risk component the auditor can directly manipulate through testing procedures. Focus on the audit response phase rather than the initial risk assessment phase to avoid distractor traps.

Frequently Asked Questions

Why isn't inherent risk the best answer?

Inherent risk describes natural vulnerability before controls, but it does not directly dictate sampling mechanics. Auditors use sampling to manage detection risk, making it the direct driver for methodology selection.

How does detection risk relate to sample size?

Acceptable detection risk inversely determines sample size. Lower acceptable detection risk requires larger samples and more rigorous selection methods to ensure material misstatements are caught.

More CISA FAQ →

Community Votes

60%

40%

60% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 5 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 5

blehbleh 👍 2 Answered A

This is A. Detection risk - risk that the audit procedures will not detect a material misstatement. that is the risk that something will get missed by the auditor. In this case. What would influence most would be inherit risk.
a84n 👍 1 Answered A

Answer A While the effectiveness of the sampling methodology chosen can influence detection risk to some extent, detection risk is more directly influenced by factors such as the nature and extent of audit procedures, the competence of the audit team, and the quality of the audit evidence obtained. In contrast, inherent risk (option A) directly relates to the characteristics of the audited entity and its environment, including the susceptibility to errors and irregularities before considering the effectiveness of internal controls. Therefore, inherent risk has a more direct influence on the selection of a sampling methodology as it determines the baseline level of risk present in the population being sampled.
MJORGER 👍 1 Answered D

D. Detection Risk Detection risk is the risk that the auditor’s procedures will not detect a misstatement that exists in an assertion that could be material, either individually or when aggregated with other misstatements. Auditors adjust their sampling methodology to mitigate this risk.
marc4354345 👍 1 Answered D

D is correct. Detection risk is the possibility that an error goes unnoticed. Sampling must be adapted to avoid missing errors.
Sibsankar 👍 1

A. Inherent is the right answer. Inherent risk is the risk that exists before any controls are implemented.

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Practice All CISA Questions

Access 400 questions with complete answers and detailed explanations.

View Full CISA Practice Test →

← Back to CISA Study Guide