By Asha Vyas, Training Content Specialist, Your Part-Time Controller, LLC
Opportunity, pressure, and rationalization…these are the reasons behind an individual’s decision to commit fraud and libraries, nonprofits, and businesses are as vulnerable as any other institution.
Fostering your strong ethical culture can mitigate fraud risk. Culture is reflected in the tone at the top.
Add ‘Culture’ to a fraud risk mitigation plan
- Establish management goals for culture
- Evaluate threats to culture
- Address culture at all levels
- Lack of internal controls, particularly separation of duties
- Lack of policies
- Lack of oversight
- Use password manager software
- Use strong passwords [do not re-use them!]
- Control access and use multi-factor authentication [MFA]
- Update your systems and anti-virus software
- Routinely back up your data, including offline/offsite storage
- Prohibit automatic forwarding of emails to external addresses
- Add an email banner to messages coming from outside your organization
- Prohibit personal use of company devices and networks
- Provide ongoing anti-fraud training and education to staff, volunteers, and the board [include specific and situational examples!]
- Create a culture of fraud/anti-fraud awareness and zero tolerance for fraud
- Perform fraud risk assessments
- Update policies
- Establish a whistleblower hotline or other effective reporting mechanism
- Management and board oversight