Q4
Single choice
An internal auditor discovers that a vendor had submitted invoices and was paid for services not rendered.
Which of the following controls is most appropriate to address this type of issue?