Risk analysis and risk management in the public sector and in public auditing