What are some of the risk areas that can be identified through the auditing process?

What do you think? What have you learned from your text materials?