In order to properly define and implement its Red Flags program, creditors must learn lessons from others, keeping abreast of the identity theft environment and tapping sources such as literature and information from credit bureaus, financial institutions, other creditors, designers of fraud detection software, and the business' own experience.