Thank you for your question.
When we plan an audit, it's important to establish which elements we can examine. It's not possible to examine every aspect of a program, so we have to decide how much work can be accomplished within the scope of an audit. The process simply involved evaluating the risks associated with the various aspects of the program, and we focused on the two strategy areas in question.