Holly is the project manager of the NHQ project for her company. Her project sponsor, Tracy, has requested that Thomas, the department manager, from the Risk Management Department, will work with Holly to determine the effectiveness of the risk responses. Tracy and Thomas are concerned that some of the risks within Holly's project may not be addressed to depth they would like. In this scenario, who is responsible for ensuring that risk audits are performed at an appropriate frequency throughout the project?