Priority of audits is based on elements such as the strength of oversight, past performance, time since changes in management, process complexity, appropriateness of risk mitigation plans, and the potential impact to the agency.