Which of the following statements regarding the objectives of a fraud risk management program is...

A fraud risk management program should only focus on addressing fraud after it occurs.

A fraud risk management program should incorporate policies and procedures designed to both prevent and detect fraud but should not address fraud responses.

A fraud risk management program should include the formal procedures that management takes in response to a fraud, such as rebuilding stakeholders' confidence in the organization.

A fraud risk management program should prioritize activities that proactively identify and assess fraud risks over activities that detect fraud while it is occurring.