REFERENCES AND
CREDENTIALS Any cat burglar will tell you that the best way to prevent them from getting the best of you is to simply prevent them from getting into your house. This philosophy applies to potential fraudsters as well. Checking references and credentials at the interview process is often a relatively simple process, but can go a long way toward minimizing the ability of a potential fraudster to join your organization. It would be highly unlikely that you would hire someone to manage your books if his last employer terminated him for stealing the escrow funds.
CODE OF CONDUCT
A code of conduct is basically a set of rules or standards outlining how employees are expected to act. Specifying appropriate and inappropriate behavior up front by including such a document in either the employee handbook, or by providing it to new hires at inception, goes a long way toward setting a positive “tone from the top” within the organization and can serve as a deterrent to potential fraudsters, especially if the document specifies at inception significant consequences for violation of the policies set forth therein. Samples of such policies can generally be obtained through a basic Internet search. Also, some human resource and payroll processing companies are able to provide sample statements as part of their existing service to an organization.
TRAINING
AND REVIEW In addition to implementation of a code of conduct, the initial training of employees can be a tremendous opportunity to establish preventive controls and ward off potential fraud. By discussing established processes and procedures that new hires should follow in the performance of their job up front, management is able to ensure that employees are properly trained to comply with expected job duties. Additionally, by regularly reviewing employee performance and addressing
issues where inappropriate conduct or improper procedures have occurred, management is able to establish that it is actively monitoring operations. Even the slightest perception of being monitored by management may serve as a deterrent against fraud.
PASSWORDS AND
SYSTEM ACCESS One of the most basic and yet most powerful controls that can be put into place by even the smallest of organizations is strong password and access controls. Just like the aforementioned cat burglar scenario, limiting access to specific programs and/or physical assets within an organization is a powerful deterrent for fraud. Even the most basic software packages can often be password protected to prevent unauthorized access. Limited authorization or access to online banking information, check stock or petty cash is often an obvious area for password protection. Additional preventative controls that many organizations find useful include “view only” access to customer account information and credit limits for sales personnel, “management only” access to the general journal function within the accounting software and limiting the ability of the receiving department to place or post orders within the accounting software. The less likely a perpetrator is able to cover up or conceal a fraud by accessing accounting records on both sides of a transaction, the less opportunity he may perceive to commit the act in the first place.
WALK THE TALK Regardless of the opportunities to
strengthen controls noted above, if an organization does not enforce even the smallest of procedures and processes it has in place to deter fraud, it will fail to dissuade potential perpetrators. The perception of opportunity for fraud is just that … perception. An organization can have all the policies and procedures in place in the world, but if they aren’t enforced and/or routinely subject to override by management, they will offer little in terms of a deterrent. Many organizations have suffered tremendous frauds in the past due to bad hiring decisions, blatant disregard for the code of conduct amongst upper management, lack of follow-through on training or reviews, and ineffective IT security. For this reason, organizations who want to strengthen their controls must commit to follow through and “walk the talk.”. These procedures, while relatively simple, do require a commitment by the members of an organization to make them truly effective.
Unfortunately, in this day and age there are no guarantees that even with the implementation of procedures such as these, an organization will not become the victim of a fraudulent act. Companies with some of the best internal controls in the world have still found themselves vulnerable when it comes to preventing fraud within their organization. Ultimately, deterring fraud still comes down to a company’s “tone at the top” and how employees perceive management’s commitment to deter fraud.
A FULL SERVICE PUBLIC ACCOUNTING FIRM
Come visit one of our dedicated professionals performing Audit (including Public Company Audits), Accounting and Tax Services.
www.tampacpa.com •
lrodriguez@tampacpa.com Kingery & Crouse
6-11-07.indd 1
2801 W. Busch Blvd. ste. 200 • Tampa, FL 33618 813.874.1280 ext.229
6/11/07 10:32:56 PM
Page 1 |
Page 2 |
Page 3 |
Page 4 |
Page 5 |
Page 6 |
Page 7 |
Page 8 |
Page 9 |
Page 10 |
Page 11 |
Page 12 |
Page 13 |
Page 14 |
Page 15 |
Page 16 |
Page 17 |
Page 18 |
Page 19 |
Page 20 |
Page 21 |
Page 22 |
Page 23 |
Page 24 |
Page 25 |
Page 26 |
Page 27 |
Page 28 |
Page 29 |
Page 30 |
Page 31 |
Page 32 |
Page 33 |
Page 34 |
Page 35 |
Page 36 |
Page 37 |
Page 38 |
Page 39 |
Page 40 |
Page 41 |
Page 42 |
Page 43 |
Page 44 |
Page 45 |
Page 46 |
Page 47 |
Page 48 |
Page 49 |
Page 50 |
Page 51 |
Page 52