How can auditors use performance measures that are used to monitor risk as evidence in performing the financial statement audit? What considerations should auditors make in determining which measures should be used and the extent to which they can be relied upon?