Auditing the Process Approach and Risk-Based Thinking