A control test samples only the best-managed branch, while the risk covers fifty branches. What should the practitioner question?

1. Whether the branch's control owner is senior
2. Whether a larger report would solve the bias
3. Whether the sample supports conclusions about the full scope
4. Whether all sampling is invalid