our understanding and assessment as to the effectiveness of the entity's risk assessment process (including it's appropriateness due to size, complexity and nature of entity) will be based on the discussions with those charged with governance and/or management