It's not less oversight.
The risk-based audit plan is a three-year audit plan that needs to be refreshed every year. Those plans come to my group, and we look at them to make sure that, at the end of the day, we have good audit coverage on all programs.
Again, if there are some challenges, or if a deputy minister believes that they would like to have more information about a particular program, then the deputy minister, in their role, can decide to ask for a specific audit from their internal audit shop.