The statement that the internal auditor should detect fraud before recommending a fraud investigation should take place is not correct. Internal auditors are responsible for identifying red flags and control weaknesses that might indicate fraud, but they are not necessarily experts in fraud detection and investigation. They can identify areas of concern and recommend that a detailed fraud investigation be conducted by specialists who have the expertise to conclusively detect and analyze fraud.