SLIDE 23 23
Entity-Level Considerations: Anti-Fraud Program and Controls
Prevention
- Tone at the top
- Value system (“Code of Ethics
/ Conduct”)
environment
retaining appropriate employees
programs
- Confirmation / affirmation of
Code of Conduct or Ethics
- Ombudsman programs
- Whistleblower programs
- Incident response / case
management processes
- Investigative procedures
- Discipline, prosecution and
recovery guidelines Prevention
- Tone at the top
- Value system (“Code of Ethics
/ Conduct”)
environment
retaining appropriate employees
programs
- Confirmation / affirmation of
Code of Conduct or Ethics
- Ombudsman programs
- Whistleblower programs
- Incident response / case
management processes
- Investigative procedures
- Discipline, prosecution and
recovery guidelines
Detection
measurement of fraud risk (“fraud risk assessment”)
to mitigate identified fraud risk
- Effective internal controls
at entity and process level
activities
techniques
– Internal control weaknesses / breaches – Non-response to Code confirmation / affirmation – Reported issues
Detection
measurement of fraud risk (“fraud risk assessment”)
to mitigate identified fraud risk
- Effective internal controls
at entity and process level
activities
techniques
– Internal control weaknesses / breaches – Non-response to Code confirmation / affirmation – Reported issues Deterrence
- “Active” oversight by Board
and/or Audit Committee – Fraud risk assessment and related measures – Code confirmation / affirmation process – Management’s involvement in financial reporting process and
– Process to receive, retain and treat complaints of fraud / unethical conduct – Internal and external audit effectiveness
– Evaluation of adequacy / effectiveness of internal controls
Deterrence
- “Active” oversight by Board
and/or Audit Committee – Fraud risk assessment and related measures – Code confirmation / affirmation process – Management’s involvement in financial reporting process and
– Process to receive, retain and treat complaints of fraud / unethical conduct – Internal and external audit effectiveness
– Evaluation of adequacy / effectiveness of internal controls
Which one of the following statements best describes your
- rganization’s fraud risk strategy?
- Very well defined - strategy exists to proactively identify fraud risks and
corresponding anti-fraud programs and controls are agreed upon, monitored and measured by Board and senior management on an on-going basis
- Defined - no formal strategy, but anti-fraud programs and controls and are
agreed upon, monitored and measured by Board and senior management
- n an on-going basis
- Less defined - no formal fraud risk strategy, but some anti-fraud programs
and controls exist
- Reactive only – Fraud risk management is limited to reacting to allegations
- f fraud or misconduct.
- Undefined - no formal fraud risk strategy or anti-fraud programs and
controls
Live Meeting Poll
Changes directly made to this slide will not be displayed in Live Meeting. Edit this slide by selecting Properties in the Live Meeting Presentation menu.