The fraud examiner or auditor must have an understanding of what could go wrong, what did go wrong, and how those concerns would manifest in the information system. This requires knowledge of the schemes, the industry, the organization, its IT control environments, its history of fraud, and other aspects outlined in the steps to $\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_.$ With this foundation, the anti$-$fraud professional has an idea of what he or she is looking for.

$1)$

Develop a targeted risk$-$assessment

$2)$

Utilize an H$-$E Matrix

$3)$

Analyzing accounting and non$-$financial data anomalies

$4)$

Conducting a fraud examination