Sampling risk is the probability that a misstatement exists in the population but is not selected in an auditor's sample. Non-sampling risk is the probability that a misstatement exists in an auditor's sample, but the auditor fails to identify it. Do you believe that either of these scenarios can be defensible against claims of auditor negligence? If so, why? How can auditors protect themselves against both of these risks?