To have an effective antifraud culture, an entity should have policies and procedures that do what? (Include at least 5 items.) 2 paragraphs