During which phase of the data analysis process does the fraud examiner identify, obtain, and verify the relevant or requested data?