?

Which of the following is most likely to be regarded as a strength in internal control in a traditional external audit?