Auditing the risk managent process - PICKETT (John Wley & Sons, 2004)