Mr. Dargan Fitzgerald:

Yes. Thank you. As I mentioned, the risk assessment starts with an updating of our understanding of the circumstances of the entity being audited. So, in this case, the building society. This is carried out through meetings and discussions with management and review of relevant papers, such as board reports. As a result of our assessment of the ... what are called "entity level controls", controls within the company ... or within the building society and consideration of external factors, such as stress within the financial system and other macroeconomic factors. As I previously referred to, one of the planning tools is to select what's called planning materiality ... and, these are the comments I made earlier. That materiality is set at a level which results in a particular set of sample sizes, which govern the extent of detailed testing we carry out, both of internal controls and of balance sheet amounts. So, if I put that in, sort of, more plain English, we update our understanding through discussion with management of the state of play within the building society. We set out a plan of testing of internal procedures and controls - called internal control testing - and then at the year end we select a sample, which in the case of 2008 was statistically quite a large sample, of loan files and other items to test substantively. And, in simple terms, that substantive testing means discussing with management the circumstances of each individual loan, as I previously mentioned.