Internal audit reporting lines, fraud risk decomposition, and assessments of fraud risk · Study