This may include, among other things, examining the designs of the internal controls in place to prevent or detect the instance, revising policies and/or procedures, communicating policies to employees, and developing and requiring employees to take additional training.