An internal auditor is planning a control self-assessment workshop to identify key risks and controls in the organization's procurement function. Which of the f...