An organization's board received complaints regarding suspicious business dealings involving different departments and asked the internal audit activity to carry out investigations on the complaints. Internal auditors should have a general understanding of which of the following in order to facilitate the investigations?