project management time recording risk assessment control management sorp systems security investment equipment legal it accounting