Risk analysis, risk assessment and risk management based on COSO framework, internal audit in operational process, an analysis of roles, responsibilities, and ethics of internal auditors and good corporate governance committee, case studies