A small landscaping company buys rocks and lumber. One of the project managers is responsible for ordering the lumber, which he does by calling up the lumber dealer and ordering a shipment over the phone. No purchase order is used. The lumber dealer delivers lumber directly to the job site and invoices the company once a month, on one bill. Is there an Internal Control Issue in this situation? What is it? What principles, if any are violated? What are the risks? (Response should be brief, about six sentences).