I'll start with the student visa program, which I think is an example of what's happening more broadly. You can see hard caps and a decline in numbers, so there are fewer people across a broad range of categories, which allows for greater focus and a reduction in numbers. Second, I think there's a hard cap, from around 1% to 5%, in terms of the total number of people being accepted or in the country at any one given time, so that we have managed sustainable migration into this country, because that's essential. I would say that again, proper to this audit, there was the discontinuation of a direct program that was seen to be open for abuse and targeted for abuse by others, and you saw that program being cancelled.
With the recently introduced Bill C-12, you could see a process in which thresholds are being established around claiming asylum at the 12-month or one-year mark, and rapid action on that. In fact, there was a significant amount of media attention that, just days after receiving royal assent, IRCC began taking action.
I have more than 30 years in public service, and it was one of the first times I can recall being criticized or taken to task for acting too quickly on the implementation of legislation. We want to be compassionate. We want to be fair, but in cases in which there is abuse—I think I've given you some examples of that happening—proper to this report, again, when you have a large number of flags, you have a responsibility to parse them and put them into buckets. To go back to the earlier question, no, the 110, the 800 or the 150,000 are neither all small typographical errors nor all cases of people with a propensity to violence. There's a mixture, but it's our responsibility to more methodically put them into categories and then give the right treatment. That's what the OAG didn't find when she arrived at IRCC.
The crux of our management action plan in response to this audit is that by the end of this calendar year, we will show that we understand the categorization of the people who are being flagged and will apply the right response. Taking no no action is rarely the right response. It's certainly not the right response when it's flagged as high risk.