Common elements of embezzlement offenses are a relationship of trust and confidence between the suspect and the victim, the suspect's lawful possession of the stolen property at some time during the relationship, and the suspect's intent to deprive the victim of the property either temporarily or permanently. There are a variety of forms of embezzlement that depend on the nature of the trust relationship between victim and suspect. In the business environment, these typically fall into one of four categories: stealing cash; manipulating accounts receivable; manipulating payroll; and stealing inventory. In the investigation of embezzlement, the investigator's identification of internal control weaknesses in the victimized organization is important for the determination of who committed the theft and how. Three common internal-control weaknesses are a lack of segregation of accounting duties, too much responsibility and trust placed on one employee, and a lack of attention to accounting matters by the management or owner. The successful prosecution of an embezzlement case requires that the investigator explain, based on evidence, exactly how the embezzlement operated. Documentation of any changes in spending habits by the suspect together with specific information on the transactions are important in showing that the suspect's spending has exceeded the amount of the suspect's legitimate income.