Statistical Sampling and Risk Analysis in Auditing