Auditors/audit findings, Internal and external influences, Risk Management