A single random draw across a multi-currency ledger looks scientific and proves almost nothing. Sampling that survives challenge states the strata, the reason each stratum matters, and the exception path when a row refuses to explain itself.
Tie strata to money and risk, not convenience
High-value transfers, cross-border postings, and manually adjusted journals deserve heavier weight than quiet recurring fees. Write that weighting into the workpaper before you run the query so nobody “rebalances” after seeing results.
Push exceptions into a queue with owners
Samples that die in email threads do not help the next cycle. Land exceptions inside the same financial auditing app used for other findings, with owners and due dates. Database compliance checks become continuous instead of ceremonial.
Admit what sampling cannot do
Sampling will not detect a systematic silent grant. Pair this work with privilege reviews — a limitation we state openly in Database Compliance Fundamentals so learners do not oversell their packs.