Choosing a sample size you can defend to an auditor