An accountant for a small business is suspected of writing checks to "dummy" vendors and collecting the money himself. After a thorough investigation of the company, you determine that the company does not require authorization for vendor payments. In an interview with the suspect, you ask him if any controls are in place that could prevent someone from writing fraudulent checks. He quickly responds in the affirmative.
What type of questions could you ask next?