risk assessment and auditing procedures in accounting