An internal auditor completed a review of expenses related to the launch of a new project. The auditor sampled 45 transactions approved by a senior project manager and identified 30 with questionable vendor documentation. Which of the following is the most appropriate conclusion for the auditor to include in the audit report?
The most appropriate conclusion for the auditor to include in the audit report is that the organization had weaknesses in its review process, which allowed questionable transactions with some vendors. This conclusion directly addresses the issue identified, which is the questionable vendor documentation, and points out a systemic problem in the review process that needs to be addressed.
C is correct