use of extensive tests of controls.

ineffective use of audit procedures.

the possibility that a properly-selected sample still may not be representative.

testing less than the entire population.