Management must balance the investment in anti-fraud controls with the benefit of those controls and the amount of risk it is willing to accept

Management should tailor the detailed objectives of the fraud risk management program to the organization’s specific needs and goals

Management should examine previous fraud occurrences to determine how the ideal fraud risk management program would have prevented them

Management must assign a quantitative measure to its risk appetite so that it can accurately measure the fraud risk management program’s effectiveness