A new approach to school management: Determination of student related risks according to the internal control