Annie Zhao is using attributes sampling in testing controls over sales transactions. She is testing five attributes related to sales invoices using an ARO of 5% (confidence level of 95%), and zero expected deviations for each attribute based on prior experience with the client. Annie has determined that the tolerable exception rate for each attribute is 5%. Using her firm's audit software, she entered the population size (number of invoices), desired confidence level, TER, and EPER, and determined a sample size of 60 invoices. She used the audit software to select a random sample of invoices and performed the control tests. She found zero deviations for four of the five attributes and concluded that the control can be relied upon for each of those attributes. For the remaining attribute, she found one control deviation. In projecting the sample results to the population for the attribute with one control deviation identified, Annie entered the confidence level, sample size, and one deviation into the audit software sampling module and determined that the computed upper exception rate for the attribute is 7.92%.
Required
a. Explain how Annie should interpret the CUER of 7.92%.
b. What should Annie conclude about the effectiveness of the control attribute with one identified deviation?
c. What are the alternatives for Annie if she concludes the control cannot be relied upon?
d. Assume Annie discusses the deviation with the controller and learns this deviation occurred while a temporary employee was covering for the regular clerk, who was on vacation. Would this information be relevant in determining which of the alternatives in answer c. would be the most appropriate response? What testing and documentation would be needed to conclude this control can be relied upon?