Yes, and to be fair, I believe we have one of the best internal audit shops I've seen. We actually have a management board that has directors, and an audit committee.
We can always up our game for sure, but I think the group does a pretty good job of looking at the agency, looking at the risks we face and our risk tolerances, and deciding where to focus their efforts.
This is one they identified. Could we do a better job of making sure we identify all of the high-risk areas? Probably yes, but I would say it is generally a high-functioning internal audit team. I don't know if the AG would agree with that or not, but that's my perception of it.
We do, though, need to think about how we proactively uncover those areas that are high risk or could become high profile.