Sampling
What is Sampling?
The process of selecting a subset of items from a population for testing or examination. In auditing, sampling methods include statistical sampling, judgmental sampling, and attribute sampling.
Terms that appear alongside sampling
Each of these is named in at least one of the same controls as sampling. The number is how many controls name both.
- audit 9 shared controls
- compliance 9 shared controls
- nist 7 shared controls
- remediation 6 shared controls
- non compliance 5 shared controls
- certification 4 shared controls
- corrective action 4 shared controls
- risk assessment 3 shared controls
Frameworks that govern sampling
What the standards actually require on sampling
Requirements naming sampling across 6 standards, quoted from the control text.
To assure batch uniformity and integrity, written procedures shall describe in-process controls and tests to be conducted on appropriate samples.
CFR211-F-110 · Section 211.110 - Sampling and Testing of In-Process Materials and Drug Products →Requires documented sampling plans and procedures where the laboratory performs sampling of substances or materials.
ISO-17025-7.3 · Sampling →Product sampling and testing must be conducted to verify product safety and quality compliance.
2.5.4 · Product Sampling, Inspection, and Analysis →Gather evidence of sufficient quality and, where sampling is required, apply and clearly explain a sound sampling methodology and sample size.
IRAP-EV-2 · Evidence gathering and sampling →Use sample of backup information to restore selected system functions as part of testing; HIGH only.
CP-9(2) · Test Restoration Using Sampling →Apply documented sampling for multi-site ISMS audits including site selection rationale.
27006-7.1.2 · Multi-Site Sampling →Questions people ask about sampling
What is Sampling?
Why is Sampling important for compliance?
Which compliance frameworks address Sampling?
Where can I learn more about Sampling?
See how Sampling applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.