CPA risk management