As part of the planning process during an internal audit of the organization's vendor management process, an internal auditor administers a risk and control que...