function to quantitatively rank the company’s business locations from a risk perspective, using a set of established risk criteria that takes into account the location’s finance leadership, geographic location and historical internal audit performance, among other factors.