B.C.'s auditor general says more work needed to assess risk of fraud in public sector