An internal auditor selects a sample of paid invoices and matches them to receiving reports.

Matching invoices to receiving reports ensures the organization only pays for goods it has actually received, addressing completeness and accuracy in financial transactions. This procedure aligns with the COSO Internal Control Framework ' s principles regarding transaction processing and control activities. It mitigates risks of paying for unordered or unreceived goods, a common source of errors and potential fraud in the accounts payable process. The IIA ' s CIA Part 2 syllabus emphasizes testing of key controls in financial systems, including those preventing overpayments (Section II: Audit Engagements).