the role of internal controls in the fight against fraud county/iia oc... · out of your bottom...
TRANSCRIPT
![Page 1: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/1.jpg)
The Role of Internal Controls in the Fight Against Fraud
![Page 2: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/2.jpg)
A Tale of Fraud!
• Payroll manager makes $2.25MM disappear!
It must be Magic!
![Page 3: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/3.jpg)
Fraud Statistics
• 5% of GWP lost to employee fraud & abuse
• More than $3.5 Trillion per year
• Median loss $140,000
• More than 1 in 5 losses in excess of $1 MM
• Median 18 months before detection
Source: Association of Certified Fraud Examiners' Report to the Nations.
![Page 4: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/4.jpg)
Fraud Statistics
• Men perpetrate 65% of frauds
• Men cause losses more than twice those caused by women
Source: Association of Certified Fraud Examiners' Report to the Nations
![Page 5: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/5.jpg)
Fraud Statistics
• Half of all frauds were committed by someone over 40
• Fraudsters 51-55 caused median losses of $600,000.
– More than twice as much as any age group below them
– Six times as much as employees below the age of 35
Source: Association of Certified Fraud Examiners' Report to the Nations
![Page 6: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/6.jpg)
Fraud Statistics
• High school graduates commit 25% of all frauds
– Median losses are $75,000
• College graduates commit 37% of all frauds
– Median losses are $200,000
• Perpetrators with post-graduate degrees commit 17% of all frauds
– Median losses are $300,000
Source: Association of Certified Fraud Examiners' Report to the Nations
![Page 7: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/7.jpg)
Fraud Statistics• Employees – 32%
– Median loss $95K
• Managers – 46%– Median loss $250K
• Owners/Executives – 22%– Median loss $850K
• Multiple perpetrators caused median losses twice as high as perpetrators acting alone
Source: Association of Certified Fraud Examiners' Report to the Nations
![Page 8: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/8.jpg)
Fraud Statistics
• 85% never charged or convicted for a fraud related offense
Source: Association of Certified Fraud Examiners' Report to the Nations
![Page 9: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/9.jpg)
Why should we care?
• Fraud losses come straight out of your bottom line
![Page 10: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/10.jpg)
To Minimize Fraud Risk, You Must Understand
• How fraud happens
• Why fraud happens
![Page 11: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/11.jpg)
How Fraud Happens
1. Asset Misappropriation: 87%; median loss $120K
2. Corruption – Bribery, Kick-backs, illegal gratuities, conflicts of interest: 33%.; median loss $250K
3. Fraudulent Statements: 8%; median loss $1 MM
Source: Association of Certified Fraud Examiners' Report to the Nations
![Page 12: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/12.jpg)
Asset Misappropriations:Cash Is #1 Target = 85%
Billing Schemes – 25%
• Median cost - $100,000
Skimming – 15%
• Median cost - $58,000
Check Tampering – 12%
• Median cost - $143,000
Expense Reimbursements – 15%
• Median cost - $26,000
Cash on Hand – 12%
• Median cost - $20,000
Source: Association of Certified Fraud Examiners' Report to the Nations
![Page 13: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/13.jpg)
U.S. Asia Europe
Latin
America &
Caribbean
Billing 26% 15% 23% 21%
Corruption 25% 51% 44% 47%
Check Tampering 15% 6% 3% 5%
Skimming 16% 14% 10% 13%
Non-Cash 15% 20% 21% 21%
Expense Reimbursements 17% 14 % 10% 8%
Cash on Hand 11% 12% 10% 8%
Payroll 12% 4% 9% 10%
Cash Larceny 11% 13% 9% 3%
Financial Statement Fraud 7% 9% 12% 8%
Register Disbursements 3% 3% 5% 3%
Fraud Schemes by Country
Source: Association of Certified Fraud Examiners' Report to the Nations
![Page 14: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/14.jpg)
Non-Cash Targets
Inventory/information – 17%
• Median cost - $58,000
Source: Association of Certified Fraud Examiners' Report to the Nations
![Page 15: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/15.jpg)
Why Fraud Happens
Immediate Need Opportunity
Rationalization
![Page 16: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/16.jpg)
Immediate Need
Un-sharable Problem
• Living beyond one’s means
• Drugs, alcohol, gambling
• Romantic involvement
• Financial emergency
![Page 17: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/17.jpg)
Opportunity
In the absence of trust there can be no fraud.
![Page 18: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/18.jpg)
“Ability to Rationalize”
• “The company owes me”
• “It’s just a loan, I’ll pay it back”
• “Everybody else is doing it”
• “The rules don’t apply to me”
![Page 19: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/19.jpg)
How Do We Find Fraud?
• Tip – 43% - $144,000 • Mgmt. Review – 15% - $123,000• Internal Audit - 14% - $81,000• Accident – 7% - $166,000• External Auditors – 3% - $370,000• Police – 3% - $1,000,000• IT Controls - 1% - $110,000
Source: Association of Certified Fraud Examiners' Report to the Nations.
![Page 20: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/20.jpg)
Effective Internal Controls Reduce Fraud Risk
The presence of anti-fraud controls is notably correlated with significant decreases in the cost and duration of occupational fraud schemes.
Source: Association of Certified Fraud Examiners' Report to the Nations
![Page 21: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/21.jpg)
Obstacle #1
Ignorance
![Page 22: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/22.jpg)
1987 COSO Model
![Page 23: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/23.jpg)
1992 COSO Integrated Framework
![Page 24: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/24.jpg)
2004 COSO Enterprise Risk Management Model
![Page 25: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/25.jpg)
2013 COSO Enterprise Risk Model
![Page 26: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/26.jpg)
1987 COSO Model
![Page 27: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/27.jpg)
Obstacle #2
“Tone at the Top”
![Page 28: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/28.jpg)
Compliance Mentality
Effective internal controls result in compliance.
Compliance does not necessarily result in effective internal controls.
![Page 29: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/29.jpg)
Weak Internal Controls:An Open Door to Fraud
![Page 30: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/30.jpg)
Segregation of Duties
• One person cannot complete a transaction without involving someone else
![Page 31: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/31.jpg)
Meaningless Approvals
![Page 32: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/32.jpg)
Internal Controls
![Page 33: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/33.jpg)
Preventive Controls
– What you do to ensure that the right things happen; wrong things don’t happen
![Page 34: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/34.jpg)
Control Types
• Preventive
– Completeness
– Accuracy
– Authorization
– Segregation of Duties
– Security
• Physical
• IT
![Page 35: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/35.jpg)
IT Security
• Passwords
• User Profiles
– Administrative Users
• Change Management
![Page 36: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/36.jpg)
Segregation of Duties
• One person cannot initiate and complete a transaction without involving someone else
• Important:
– “Cannot” vs. “Should Not”
– Collusion
![Page 37: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/37.jpg)
Detective Controls
• What you do to find the things that preventive controls didn’t prevent
![Page 38: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/38.jpg)
Detective Controls
• Audits
• Physical Verification
• Reconciliations
• Management reviews
![Page 39: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/39.jpg)
#1 Expect Fraud
• Cannot be eliminated; only managed!
• If you don't expect it
– you won't look for it
– you might not recognize it when you see it
![Page 40: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/40.jpg)
#2 Assess Risk
• Know your business– Look at it like a fraudster would
– What have you got that someone else would want?
– How would you get your hands on it?
![Page 41: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/41.jpg)
#3 Know Who You’re Hiring
• Over 30% of resumes contain
false statements.
• Employers normally confirm only dates of employment.
![Page 42: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/42.jpg)
#4 Internal Controls
• Targeted, cost-effective
• Preventive
– Segregate duties
– Meaningful approvals
• Detective
– Reconciliations
– Independent verification
– Whistle-blower hotline
![Page 43: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/43.jpg)
#5 Have a Plan
• You won’t have time to learn from your mistakes.
• Know what you’re going to do before you have to do it.
![Page 44: The Role of Internal Controls In The Fight Against Fraud County/IIA OC... · out of your bottom line. To Minimize Fraud Risk, You Must Understand • How fraud happens • Why fraud](https://reader034.vdocuments.us/reader034/viewer/2022051909/5ffe9154379c1d52e07aecb9/html5/thumbnails/44.jpg)
Questions