List some of the risk areas that can be identified through the auditing process.