EXECUTING A PROJECT RISK AUDIT