Auditing: A Risk-Based Approach to Conducting a Quality Audit