Why must the total cost of fraud, as discussed in the text, include not only losses but also costs of prevention, detection, and correction?