Text this: An investigation of the effectiveness of a two-stage risk-based ranked-set sampling approach in external audits : a substantive audit approach perspective