Absolute Free IIA-IAP Exam Practice for Comprehensive Preparation 

The observation doesn't affect the adequacy of the internal controls because the existing process controls ensure that invoices are promptly and accurately paid.

The observation is an internal control weakness; therefore, additional testing should be performed to determine whether secondary mitigating controls exist or whether the control should be redesigned.

The observation is a sign of adequate internal controls; however, effectiveness testing should be performed to ensure that the controls are operating as designed and intended.