an entity's internal control requires that for every check request there be an approved voucher, supported by a prenumbered purchase order and a prenumbered receiving report. to determine whether checks are being issued for unauthorized expenditures, an auditor most likely would select items for testing from the population of all: