An internal auditor's fraud risk assessment is most likely to determine that which of the following is an inappropriate practice in the purchase function? A. Purchases are made only from approved vendors. B. An accounts payable authorized signature list is prepared. C. A policy prohibits receipt of gifts from vendors. D. The receiving department uses an approved order for goods stating the amount ordered