Maven

Who should I build this audit around?

Start with you and the company whose attribution needs a closer look.