We recommend the EAC require the Office to implement the following procedures: Establish, document and communicate internal control policies and procedures that ensure no payments are made without appropriate detail as to the rates, quantities, costs, deliverables, and authority supporting such payments.