The auditor should also recommend changes to ensure that the agency is properly addressing the critical factors in the GAO model.
The GAO model contains more than one critical factor.
Addressing critical factors was not a concern to the auditor.