?

In an audit of a purchasing department, which of the following ordinarily would be considered a risk factor?