Getting on the bandwagon late - sorry.
Some banks break it down into a tier testing. They start with a technical test - seeing if there are any exceptions in a limited scope. If there are no exceptions, the audit ends.
If there are exceptions, then they use substantive testing - a greater population and in more detail.
Integrity. With it, nothing else matters. Without it, nothing else matters.