Identify at least one recommendation to make to BioPhirma’s management about an additional
control or process change to consider implementing to address risks related to its P-card
transactions.