In general, I would characterize the audit—and remember that this is at the point in time that we did the audit and reported on it, and things have happened since— by noting that the department had put in place a system that was consistent with international standards, and that was a good thing. At the time of the audit they had put in place such things as some manuals and procedures that seemed to be complete, so at that general framework level, we found that things were in pretty good shape.
We found issues in the implementation of the framework: the training wasn't complete, the documentation wasn't always consistent, the management oversight wasn't always there. Really, it was more a matter that overall we found the framework was all right, but that there were problems in many areas of the actual implementation.