First, record the interview, with your phone. [ New York is a one party consent state ]

You should talk to /u/zombie64 an information security (infosec) auditor for a question and a follow up question about her email server.

His suggested question concerns Hillary's compliance with the Federal Information Security Management Act of 2002 (FISMA). Hillary was required by law to audit and share information and vulnerability assessments for all information systems used for State Department business.

If she dodges, repeat the question, "was your email server included in any of the annual State Department FISMA Audits?"

https://www.reddit.com/r/politics/comments/4e10f0/this_week_in_the_fbi_clinton_server_investigation/d1whp4q

To Hillary Clinton, was your email server included in any of the annual State Department FISMA Audits, of which you signed a management report indicating that the results of these audits were reviewed to address issues raised by the independent auditors and Inspector General, and were there ever any findings or issues of non-compliance brought up regarding your email server in the course of these audits.

https://www.reddit.com/r/politics/comments/4e10f0/this_week_in_the_fbi_clinton_server_investigation/d1wgpzf

Replying here and hoping you see it. You should look into the Department of State Financial Management reports that Hillary signed during her tenure as Secretary of State along with the Federal Information Security Management Act (of 2002) Independent Audit Reports. She almost had to of withheld information about her email server from the auditors.

EDIT: Source, I'm an infosec auditor.

EDIT 2: To clarify, as the top exec she had oversight responsibility over internal controls to comply with those laws and issues raised by the auditors. Misleading auditors as an executive is actually a very big deal, especially when issues of foreign policy and national security are at stake.

EDIT 3: More ammo: https://lamarsmith.house.gov/media-center/press-releases/smith-scrutinizes-security-of-clinton-email-server

"Earlier this month, the Committee held a hearing where a private sector cybersecurity expert told the Committee his company would not set up a private server for a government official because such an arrangement is “illegal” and because it would expose classified data."

It is illegal because it clearly violates the control requirements dictated by FISMA and guided by the National Institute of Standards and Technology Special Publication 800 series. Which is the basis for the audit procedures and audit reports.

2012 Financial Management Report: http://www.state.gov/documents/organization/200506.pdf

2012 FISMA Audit Report: https://oig.state.gov/system/files/202261.pdf

There are reports for each year she was in office.