Internal auditors confident in risk assessment but face possible talent shortage