Using audit data analytics in performing a risk assessment procedure