The Program must include reasonable policies and procedures for detecting, preventing, and mitigating identity theft and enable a financial institution or creditor to:Identify relevant patterns, practices, and specific forms of activity that are red flags" signaling possible identity theft and incorporate those red flags into the Program;Detect red flags that have been incorporated into the Progr