Auditing a business risk approach - RITTENBERG, Larry E (Thomson, 2008)