IIA-CIA-Part1 Exam Question 366

Which of the following process weaknesses is most likely to cause an internal auditor the most concern about fraud risk?