A little kid in black playing in a fountain.
A kid is playing in the fountain.
When planning a risk assessment, the auditor should first review the agency's acquisition policies and directives to identify the organizations and individuals responsible for approving procurements.