A good fraud auditing involves four steps. Which of the following is the correct sequence? Identifying fraud risk exposures; identifying the fraud symptoms of each exposure; building audit programs to proactively look for symptoms and exposures; and investigating fraud symptoms identified.