An organization is conducting a fraud risk assessment as part of its risk management program. Which of the following steps is the organization most likely to perform first? A$.$ Identify relevant fraud risk factors. B$.$ Identify potential fraud schemes. C$.$ Identify existing controls for preventing and detecting fraud. D$.$ Identify red flags by conducting data analysis.