While planning an audit engagement of a procurement card activity, which of the following actions should an internal auditor take to identify relevant risks and...