Interviewing people during the due diligence does work. Just make sure to ask open ended questions and give space for the respondent to reply without rushing them to the next question. Also, try to keep asking why.
reporting the findings would be on a likelihood/business impact basis. Thus, riskier material findings are on top the report.
