Auditing the risk management process - Pickett, K. H. Spencer (Wiley, 2005)