Are Your Controls Working? Two Fraud Studies Cast Doubt

According to a report released by the Association of Certified Fraud Examiners (ACFE), that doesn’t mean controls aren’t working but rather companies must keep up controls despite a down economy.

For example, if two employees sign checks in accounts payable and one of them is laid off, company officers would do well to name a back-up immediately. ‘Firms need to regularly test their controls to see if they work. In a bad economy, the tendency is to ease up on procedures,’ says Ken Springer, author of Digging for Disclosure. ‘When there are shortcuts around policy and procedures is when fraud can occur.’

The risk of back office fraud is growing as companies and employees struggle in the wake of the recession, according to a study by the Institute of Financial Operations.

About 72 per cent of finance managers in an informal poll reported seeing an increase in cases of back office fraud. The losses eventually affect shareholder profits.Fraud schemes can include the creation of fake vendors, billing for nonexistent goods, checks written to dummy companies and kickbacks from vendors.

The question is not whether controls are working but whether they are being followed, says Donald Klaskin, managing director of Corporate Resolutions, a controls testing company. ‘Publicly traded larger to mid-size firms have controls, such as internal audit groups, external auditors and compliance officers that certify financial statements,’ says Boston-based Klaskin. ‘Thus, there are best practices in place. The question is whether controls are being followed.’

According to ACFE’s study, about 40.2 per cent of US frauds were detected by tip, 15.4 per cent by management review, 13.9 per cent by internal audit, 8.3 per cent by accident, 6.1 per cent by account reconciliation, 5.2 per cent by document examination, 4.6 per cent by external audit, 2.6 per cent by surveillance, 1.8 per cent by police, 1 per cent by confession and 0.8 per cent by IT controls.

‘Controls are not responsible for catching fraud but they can stop fraud before it begins. Just because employees can circumvent controls to commit fraud doesn’t mean your controls are bad,’ says Allan Bachman, education manager with the Association of Certified Fraud Examiners in Austin. ‘It means controls are not 100 per cent foolproof.’

[Article by Juliette Fairley, Corporate Secretary]