An internal auditor is examining the procurement process for design adequacy. Which of the following conclusions by the auditor would most likely suggest furthe...