7 risk areas for the 2014 audit cycle