Audit risk in a client portfolio context