Types of risks in auditing