Auditing concepts and applications : a risk-analysis approach · Study