type of auditing which focuses upon the analysis and management of risks with the greatest potential impact