1. The internal auditor should always retain the rationale for the sample, a description of the method of sampling, a description of the tests performed, and the results of testing.
2. Implications of the result should also be documented in the work papers.