General questions without using the lab as it is not working being an auditor what would your responses be to these?

1. What concerns would you have about vendor addresses? What types of addresses would be the most suspicious? I have addresses being similar to employee addresses, or addresses left blank.

2. How could a vendor be added to an enterprise system with a suspicious address?

3. After reviewing the PO Box addresses, what concerns do you have? Should you follow up on PO Box addresses? Explain.

4. Are there any limitations in your evaluation process? Are there other data values that may indicate fictitious supplies in the system?