What is the auditor's responsibility for obtaining an understanding of internal control? What do you feel some of the best ways are to gain this understanding? How does that responsibility differ for audits of public and nonpublic companies, and how does information technology play a factor in this?