Similar to an enterprise risk assessment, a computer fraud risk assessment focuses on fraud

and

to determine whether the controls exist and how the controls can be circumvented.