The correct answers are: The business does not pay too much for goods and services; The business researches potential suppliers before contracting with them.

Both of these objectives are answered by the control of putting contracts out to tender.

'The business has a central database of suppliers' is not a control objective, it is a control, to ensure that goods and services are purchased from approved suppliers. 'The business has goods and services when it needs them' is a control objective, but it is not directly answered by the control set out in the question. A tender process does not ensure that receipt of goods will be timely. Similarly, 'the business does not purchase goods and services from connected parties' is a control objective, but it is not answered by the control of receiving tenders. A tendering process might help prevent a company dealing with related parties while being unaware that they are connected, but does not completely prevent it. For example, if the connected party is a large concern, there might be nothing or no one attached to the tender that would appear to be connected to the purchasing company.