In general, what are the fraud risk indicators that internal auditors should be aware of? How are these "red flags" (fraud risk factors) influenced by industry and geography? Why does it seem that certain areas and assets are more vulnerable to fraud, that is, what "relative risk" considerations need to be factored in? Expand these considerations to materiality (that is, the significance or importance of achieving organizational objectives) and the appropriateness and sufficiency of evidence.