An internal auditor is trying to assess control risk and the effectiveness of an organization's internal controls. Which of the following audit procedures would...