There's a way to assess the risks that exist in the various programs. We have a process to identify the various programs within the departments and to identify the risks. Once we have that information, we can carry out an audit. As I said earlier, it's important to bear in mind that half our work consists in financial audits regarding the way a handful of crown corporations prepare financial information. These reports are not part of our performance audits. They're different. For the performance audits, the process is to identify the programs, identify the existing risks within those programs, and select the programs of highest importance.
