Risk Based Auditing Approach