The three weaknesses which increase fraud risk in PU (FRAUD, Governance, Internal Control), in order of priority from highest to lowest as a contributor are:

1.)

2.)

3.)

The most important reasons (rationales) for establishing the priorities are:

1

2

3

In my opinion between those charged with governance and the external auditor the larger proportion of responsibility to mitigate fraud risk is borne by...

The three reasons for (rationale) my judgement are: (copy/paste your Narrative allocating responsibility that match the order of your reasons in the table above.