Projects: Strengthening assurance to manage risk