{"id":544,"date":"2018-12-15T21:02:42","date_gmt":"2018-12-15T21:02:42","guid":{"rendered":"https:\/\/centropycoaching.com\/?p=544"},"modified":"2021-02-06T13:35:05","modified_gmt":"2021-02-06T21:35:05","slug":"risk-assessment","status":"publish","type":"post","link":"https:\/\/centropycoaching.com\/risk-assessment\/","title":{"rendered":"Actionable Tools and Resources to Mitigate Fraud: \u201cPerception of Detection\u201d, Fraud Hotline, Risk Assessment [Part 3 of 3]"},"content":{"rendered":"\n

In Parts I<\/a> and Part II<\/a> of our fraud series, we learned some of the techniques increasingly sophisticated thieves use to steal from companies just like yours. In Part III, Certified Fraud Examiner, Pete Miller<\/a>, of Clark Nubar shares how to minimize the chances that someone will commit fraud.<\/strong><\/h2>\n\n\n\n

<\/p>\n\n\n\n

Odds of a Perpetrator Being Prosecuted…<\/h2>\n\n\n\n

<\/p>\n\n\n\n

Lauren: Let\u2019s say we catch the perpetrator. What happens to these people? Arrest? Conviction? Imprisonment? Or do are they just fired and kicked down the road to the next unsuspecting employer?<\/strong><\/h5>\n\n\n\n

Pete: In my experience, it rarely goes as far as a criminal case and jail time. If anything, it turns into a civil case that doesn\u2019t carry the same weight. It\u2019s not criminal so you\u2019re not going to jail. You\u2019ll have restitution and things of that nature which, again, if the money\u2019s there, great. If not, that restitution turns into withholding from their paycheck where they pay for it for the next 40 years. You get resolution from a very, very painful small stream of payments. It\u2019s up to a judge and jury to determine if somebody\u2019s committed fraud. The reality is that for a $100,000 fraud case, the chances of getting the attention of a prosecutor who has larger cases involving violent crimes is just too small to make its way up the priority ladder<\/p>\n\n\n\n

So even if you were doing background checks on people, it\u2019s more likely nothing would show up because they have no prior convictions.<\/strong><\/h5>\n\n\n\n

Chances are, the employers are not going to disclose certain things like that for fear of slander and things like that. It can fly under the radar. Background checks can help you keep out the serial thieves. It\u2019s not fool-proof.<\/p>\n\n\n\n

So, besides a good tone at the top, inquiry into and knowledge of what\u2019s happening with your employees, looking at data on a disciplined basis and acting on it, and doing credit checks on key employees involved with money, what else can an owner do?<\/strong> Talk to me about Fraud Hotlines.<\/strong><\/h5>\n\n\n\n

It\u2019s good to have common checks and balances in place. What accountants and auditors do are typical internal controls; balancing a checkbook, secondary reviews, things of that nature. All of that is good but the purpose of those things is to catch mistakes as opposed to fraud.<\/p>\n\n\n\n

Chances are if something like that\u2019s going on, somebody knows about it but they don\u2019t feel comfortable disclosing it for fear of retribution or retaliation. Having an anonymous outlet for employees to report suspected fraud is key. An example is 24\/7, 1-800 fraud hotline or website that employees can report to. It\u2019s proven that the size of the fraud drops if you\u2019ve got a hotline.<\/p>\n\n\n\n

<\/p>\n\n\n\n

These are third-party companies that run a hotline that a company could subscribe to?<\/strong><\/h5>\n\n\n\n
Yes, they subscribe to one of these hotlines monthly. Let\u2019s say a company had such a hotline. If they had an employee who was aware of a fraud incident, that employee could call the hotline, and then the hotline company would call the designated contact person and\/or boss and report the incidence. The contact person could be the CEO, the chair of the audit committee, or someone in HR. You should have two people listed as contacts.<\/h5>\n\n\n\n

<\/p>\n\n\n\n

Because otherwise it could go just go back to the person committing the fraud!<\/strong><\/h5>\n\n\n\n

Yes. You should have two people, for sure. Generally, the hotline company is not going to do any investigations. That\u2019s up to the client company to decide what to do.<\/p>\n\n\n\n

A hotline is a quite effective at catching those ongoing frauds. As I talk to my clients about this they say, \u201cWell, gosh, I don\u2019t know, I\u2019m a little worried that if I put in one of those things, then I\u2019m just going to be chasing false positives all the time, or I\u2019ll get dramas like, \u2018Suzy ate my yogurt. It was in the fridge\u2019 and I don\u2019t want to deal with that!\u201d<\/p>\n\n\n\n

Surveys and statistics show that you can count on a hotline generating one or two calls a year for every hundred employees. It\u2019s a modest amount of time that\u2019s worth your while if even if you go five years or 10 years without anything going on. The amount of time that you might have chasing any false positives is worth it to catch something that\u2019s real.<\/p>\n\n\n\n

<\/p>\n\n\n\n

Is the fee for that type of service dependent on the size of the company?<\/strong><\/h5>\n\n\n\n

Yes. It just depends on how robust a system you want. For instance, we host a hotline on clarknuber.com<\/a>. We\u2019re on the low-end of things at $500 a year. More expensive services will have more robust reporting and so on and will cost more money.<\/p>\n\n\n\n

Also, just because you don\u2019t have the budget or the need necessarily for a formal internal audit department, doesn\u2019t mean you can\u2019t do the same thing on a spot check basis. You just decide, \u201cWell, this month I\u2019m going to dive into the inventory cycle and see what the purchasing behavior looks like and who are the vendors are. Then maybe next month, I\u2019ll jump into the general accounts payable cycle. You can kind of bounce around. It keeps people on their toes, which is good.<\/p>\n\n\n\n

The \u201cperception of detection\u201d is a phrase that I use. That whole rotational process I described means that you never know what the boss is going to focus on this month. It could be my area. So, that alone can deter somebody from committing a fraud because there\u2019s a chance that they\u2019re going to be looking my way. Doing that, even for the sake of scaring folks into submission, is worth it. I\u2019ve heard stories of CFOs that will angrily walk their way to the accounting department and say, \u201cHow in the world did this check make its way through without someone giving an approval for it?\u201d and make a scene about something that is completely minor and not really all that important. They do it for the sake of establishing that attitude and that trust but verify kind of a thing.<\/p>\n\n\n\n

This kind of culture makes it that much more comfortable for a rank-in-file employee who sees something to bring it up to you and say, \u201cYou know we talked about this thing last time and I just want to run something by you. I saw this the other day and I wasn\u2019t sure what was going on and I wanted you to know.\u201d  Without that type of climate in place, that employee might think, \u201cOh gosh, I don\u2019t know. This is going to be a big of a deal. I don\u2019t want to be a ratting somebody out.\u201d<\/p>\n\n\n\n

<\/p>\n\n\n\n

Risk Assessment – Not Just For Fraud<\/h2>\n\n\n\n
What are some other resources to prevent fraud?<\/strong><\/h5>\n\n\n\n

The hotline is a great one. Training. There\u2019s training that that\u2019s led by you or it outsourced to other folks or a combination. That\u2019s a helpful part to build into this. I\u2019ve mentioned the phrase risk assessment a couple of times. That\u2019s typically a process that a third party comes in to facilitate. It\u2019s not entirely internal. Doing a risk assessment is important for so many reasons. It\u2019s usually more of an enterprise-wide assessment.<\/p>\n\n\n\n

You\u2019re looking at all sorts all sorts of risk and not just risk related to fraud.<\/strong><\/h5>\n\n\n\n

For example, you and your team ask: \u201cTo do business in this geography, what sorts of things could come up that will result in reputational damage?\u201d All sorts of risks are out there. A driver may make a poor choice and have some catastrophe take place in the road. You identify all the potential risks. And fraud is certainly part of that. Once you\u2019ve gone through and identified the risks, you score them and put it on a heat map, rank them by a combination of the likelihood risk happening and the impact if it did happen.<\/p>\n\n\n\n

One axis on this chart measures the likelihood of risk occurrence and the other axis measures the impact of the effect if it did. You\u2019d want to zone in on things that land in that upper right-hand quadrant of high-risk\/high-magnitude.<\/strong><\/h5>\n\n\n\n

Upper right quadrant, that\u2019s what you want to focus on first.<\/p>\n\n\n\n

And who does these risk assessments?<\/strong><\/h5>\n\n\n\n

There are all kinds of consultants that do these sorts of things. We certainly do. It starts out with a lot of interviewing and a lot of analysis and those sorts of things. The conclusions could be fairly wide. There could be a potential risk identified and we insert an internal control or some process that mitigates that risk. There might risks that we\u2019re willing to accept. While it\u2019s good to know that they exist, we\u2019re not going to do anything and that\u2019s okay. It could be that you\u2019ve shared the risk or transferred it, or you insure against it. You buy an insurance policy for cybersecurity, for instance, or some other insurance policy, and that\u2019s the way you mitigate things. It\u2019s a good idea to have a risk assessment done from time to time.<\/p>\n\n\n\n

Once a year? Once every couple of years?<\/strong><\/h5>\n\n\n\n

Think about how often you reboot your strategic plan. It\u2019s a 5-10-year cycle. The formal enterprise-wide risk assessment is a longer time horizon. What I find is that the notion of doing risk assessments on a smaller scale is something that catches on. You wash, rinse, and repeat the entire process. You identify the risks associated with that narrow issue and then figure out, \u201cOkay, how do we mitigate these somehow? What do we accept?\u201d The go-no-go decision happens at that point.<\/p>\n\n\n\n

Anything I should have asked that I didn\u2019t?<\/strong><\/p>\n\n\n\n

Pete:  <\/strong>I don\u2019t think so. It\u2019s been a good conversation!<\/p>\n\n\n\n

Next up<\/a>, how quick action by one business owner helped minimize the impact when outside thieves targeted his company.<\/p>\n","protected":false},"excerpt":{"rendered":"

In Part 3 of 3, Certified Fraud Examiner, Pete Miller, of Clark Nubar shares how to mitigate the risk of corporate fraud with actionable tools and resources.<\/p>\n","protected":false},"author":2,"featured_media":384,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"default","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""}},"footnotes":""},"categories":[8],"tags":[],"_links":{"self":[{"href":"https:\/\/centropycoaching.com\/wp-json\/wp\/v2\/posts\/544"}],"collection":[{"href":"https:\/\/centropycoaching.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/centropycoaching.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/centropycoaching.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/centropycoaching.com\/wp-json\/wp\/v2\/comments?post=544"}],"version-history":[{"count":0,"href":"https:\/\/centropycoaching.com\/wp-json\/wp\/v2\/posts\/544\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/centropycoaching.com\/wp-json\/wp\/v2\/media\/384"}],"wp:attachment":[{"href":"https:\/\/centropycoaching.com\/wp-json\/wp\/v2\/media?parent=544"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/centropycoaching.com\/wp-json\/wp\/v2\/categories?post=544"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/centropycoaching.com\/wp-json\/wp\/v2\/tags?post=544"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}