Policies and procedures do not exist for all areas of the purchasing process

Control

The policy making authority within the institution should adopt purchasing policies and procedures that implement all applicable federal, state, and local laws, rules and regulations