After partially completing an internal control review of the accounts payable department, an auditor suspects that some type of fraud has occurred. To ascertain whether the fraud is present, the best sampling approach is to use
What are the policies, procedures, and activities that are part of a control framework, designed to ensure that risks are contained within the established risk tolerances?