Financial audit risk assessment & mitigation