In order for an internal auditor to assess the opportunity for fraud to occur in an organization, which of the following does the auditor first need to understa...