Detecting Fraud

Image by Roby© via Flickr

KPMG released their Fraud Survey 2009 the other day. Among some of their findings were:

• Nearly a third of executives expect some form of fraud or misconduct to rise in their organizations
• 66% of respondents reported that inadequate internal controls or compliance programs at their organizations enable fraud and misconduct to go unchecked.
• Roughly a quarter of respondents lack effective protocols on how investigations should be conducted and what point the board of directors should be alerted to potential concerns. (check out our website in the next few days to sign up for a webinar addressing internal investigations)

There was a lot of thought-provoking data in addition to the stats above. But the one thing that got me thinking was their finding that 47% of executives believed that Internal Audit, Legal or Compliance would be the most likely to uncover fraud in their organization - the number one source for detection. Yet they note in their report that this contrasts with the findings in both the ACFE Report to the Nation 2008 (tips were identified there as the number one source) and their own KPMG Integrity Survey 2008-2009 that cited Internal Audit as among the least likely channels to which employees would feel comfortable reporting misconduct.

From an EthicsPoint perspective, we've always said the venue is not important - whether fraud is detected by people reporting via a hotline, though face to face conversations with their manager, HR or other appropriate personnel, through controls or other methods - what's important is that your organization have a strong ethical culture, a way to collect reports of misconduct, and a system to consistently investigate, document, resolve and ultimately analyze each report.

But I'm curious as to your reactions - In your own organization or experience, what do you think is the most important channel for detecting fraud?