Which of the following is an example of an inherent risk that an auditor should consider?