when the auditor is engaged at the risk assessmetn stage of the audit, analytical procedures are rarely used because these would represent substantive procedures