As regards on - the - spot controls , the Responsible Authority shall draw its control sample from the entire population of beneficiaries comprising , where appropriate , a random part and a risk - based part , in order to obtain a representative error rate and a minimum confidence level , while targeting also the highest errors .