An Internal Auditor Is Reviewing Purchases Made Through the Organization's

Multiple Choice

An internal auditor is reviewing purchases made through the organization's corporate credit card program. Which of the following statements best describes a root cause of a deficiency?

A) A personal computer was purchased from a non-approved vendor.
B) Company policy limits card use to $500 per transaction.
C) A control to detect split purchases has not been activated in the credit card system.
D) Sample testing found 10% non-compliance with the organization's business travel policy.