Explain how creating a process map and internal threat analysis helps in determining the extent to which substantive testing is to be performed on the accounts associated with the supply chain and production management process.