This COSO-based guide provides a list of control objectives, potential risks, and points-of-focus for potential control activities related to Procurement Activities. These are sub-activities of Administration, which is one of the four generic infrastructure activities identified in the ‘Value Chain’ model of a business enterprise.