New standard sharpens focus on risk-based auditing