There may be circumstances when IT processes, including controls, are similar across multiple IT applications or relevant IT environment components. In such circumstances, the populations for the common activities (such as change requests or access requests) may be aggregated for testing. This approach allows us to reduce the number of samples selected while still providing a basis for reliance on IT processes across the relevant IT applications and IT environment components.