The document discusses developing a fraud risk management program for an organization. It states that fraud risk management can be handled internally or outsourced, and is affected by factors like company size and culture. Any fraud prevention model should aim to prevent, deter, disrupt, identify and prosecute fraud. The document then lists steps to develop an effective fraud risk management program, such as having fraud prevention as part of the overall risk strategy, establishing policies and controls, training employees, and having whistleblower and reporting systems.