?

Which one of the following would not be considered an internal control structure policy or procedure relevant to a financial statement audit?