me of these controls require that officials give approval, that records be properly placed in the vendor's banking system, and that transactions be reviewed by the card holder within 10 days of posting.