One major limitation is the use of sampling. Auditors do not test every transaction or every balance. Instead, they use risk-based sampling methods to test a representative portion of the data. While effective in detecting material misstatements, sampling inherently involves the risk that some errors or frauds may go undetected. Paraphrase