A three-stage forensic analysis process identifies risks: (1) understand the business and control environment (compensation structure, life cycle stage, accounting policies), (2) identify flammable items (suspicious metrics that could be problems under certain conditions, like negative cash flow that could be positive sign or negative sign depending on context), (3) identify the spark (trigger event that converts flammable item into crisis).