AUDITING A RISK-BASED APPROACH TO CONDUCTING A QUALITY AUDIT