Thanks very much. It's nice to be here today.
The first one I'll talk about is reporting to management. One of the suggestions we have here is that the OAG could consider ranking the findings it gets from its annual audit work into a risk tier, where things are rated into high, medium, and low risk. In that way it could help consistency of judgments and also inform the people who get the report as to what requires the most attention from them in responding to those issues.
That is put as a suggestion because there's an upside and there's a downside with that. It provides, as I said, an opportunity for consistency of judgment and clarity in reporting, but it also causes in some cases a distraction in terms of reporting processes with the entity that's being audited.