If internal audit resources are limited to conducting only one audit at a divisional location, should a high risk process that was audited last year at this location be audited in lieu of a moderately risky process that was last audited four years ago? Explain.