- Unauthorized purchases

Threats
- Incomplete/inaccurate purchase orders

Purchase order process

- Purchase order placed - Authorization system
- Purchase order approved Controls
- Regular reviews
- Purchase order sent to the supplier

Documents - Purchase order

- Incomplete/inaccurate recording of goods

Threats
- Damaged/incorrect goods accepted

Receving goods process

- Goods received - Record goods accurately
- Goods inspected Controls - Separation of duties between receiving and accounting
- Receipt recorded - Regular comparison between recorded and physical inventory

Documents - Supplier delivery note

AP Process

Threats - Discrepancy between invoice and purchase order

Receiving invoice process

- Invoices matched with PO's - Invoice matching
Controls
- Invoices approved - Thorough reviews
- Data entered in the system

- Purchase order
Documents
- Invoice

- Unauthorized payments
Threats
- Errors in payments

Paying process
- Separation of duties between ordering payment and payment authorization
- Payment authorized Controls
- Secure payment methods
- Payment processed

- Approved invoice
Documents
- Bank statement