When planning an application audit, it is MOST important to evaluate risk factors by interviewing: