Roles and responsibilities of audit committee in risk management