As you know, one of the most important aspects of evaluating the quality of management during an audit is to identify the appropriate person or persons to interview. How is this appropriate person to interview determined? For example, if you desired to know more about how the organization manages risk, who would you ask and why?