There is no indication of any serious wrongdoing, but auditors said poor management of procurement, invoice, and other project documents still raises serious risks around reputation, public trust, legal and regulatory compliance, and protection from any potential legal challenges.