Discussant's response to an analysis of the audit framework focusing on inherent risk and the role of statistical sampling in compliance testing;