how you will act in this situation ?

you're Auditing a supply chain Dep. or Finance Dep. and you consider your self you're the auditora you and need to write down some points & How you'll plan ? - what do you need? what kind of into you'll ask ? which areas risky ? - what kind of evidence