Risk Management: Changing the Internal Auditor's Paradigm · Study