COSO Fraud Risk Management Guide
COSO Fraud Risk Management Guide
MANAGEMENT
GUIDE Second
Edition
E X E C U T I V E S U M M A R Y
Committee of Sponsoring
Organizations of the
Treadway Coåmmission
Principal Authors of the Fraud Risk Management Guide
David L. Cotton, CPA, CFE, CGFM
Chairman Emeritus, Cotton, A Sikich Company
Leslye Givarz
Technical Editor, Public Company Accounting Oversight Board (Retired)
Acknowledgements
COSO and ACFE thank each of the Fraud Risk Management Update Task Force members,
the other anti-fraud professionals who provided recommendations for this Fraud Risk
Management Guide Update, and the original Task Force and Advisory Panel members for
their generous contributions of time, resources, and knowledge (see pages 5 to 7).
COSO and ACFE also thank Sergio Analco and Laura Hymes for their outstanding
design and editorial expertise.
Preface
This project was commissioned by the Committee of Sponsoring Organizations of the
Treadway Commission (COSO), which is dedicated to helping organizations improve
performance by developing thought leadership that enhances internal control,
risk management, governance, and fraud deterrence.
COSO is a private-sector initiative jointly sponsored and funded by the following organizations:
E X E C U T I V E S U M M A R Y
March 202 3 | Research Commissioned by Co-published by
Committee of Sponsoring
Organizations of the
Treadway Coåmmission
2 | Executive Summary | Fraud Risk Management Guide | COSO/ACFE
coso.org
COSO/ACFE | Executive Summary | Fraud Risk Management Guide | 3
FOREWORD
In 1992 the Committee of Sponsoring Organizations of For organizations desiring a more comprehensive approach
the Treadway Commission (COSO) released its Internal to managing fraud risk, the Fraud Risk Management Guide
Control — Integrated Framework (the original framework). includes the information needed to perform a fraud risk
The original framework gained broad acceptance and was assessment, as well as guidance on establishing an overall
widely recognized as a leading framework for designing, Fraud Risk Management Program including:
implementing, and conducting internal control and
assessing the effectiveness of internal control. • Establishing fraud risk governance policies
COSO revised the original framework in 2013 (COSO 2013 IC • Performing a fraud risk assessment
Framework). The COSO 2013 IC Framework incorporated 17
principles. These 17 principles are associated with the five • Designing and deploying fraud preventive and detective
internal control components, and provide clarity for the user control activities
in designing and implementing systems of internal control
and for understanding requirements for effective internal • Conducting investigations, and
control. COSO makes clear that for a system of internal
control to be effective, each of the 17 principles is present, • Monitoring and evaluating the total Fraud Risk
functioning, and operating together in an integrated manner. Management Program
One important principle focused on fraud risk.
This Guide is designed to be familiar to COSO Framework
users. It contains principles and points of focus. This Guide’s
five principles are consistent with the five COSO Internal
Principle 8, one of the risk assessment
Control Components and the 17 COSO principles.
component principles, states:
The organization considers the potential This Guide updates the first edition of the Fraud Risk
for fraud in assessing risks to the Management Guide published in 2016. It also draws from a
achievement of objectives. 2008 publication published and sponsored by the American
Institute of CPAs (AICPA), Institute of Internal Auditors (IIA),
and Association of Certified Fraud Examiners (ACFE). This
prior publication, Managing the Business Risk of Fraud: A
The Fraud Risk Management Guide, originally published in Practical Guide, contained similar guidance for establishing
2016, was intended to be supportive of and consistent with a comprehensive Fraud Risk Management Program and has
the COSO 2013 IC Framework and to serve as guidance for been used by many organizations to manage fraud risk. The
organizations to follow in addressing this specific fraud risk COSO sponsors and ACFE are appreciative of the work done
assessment principle. by the task forces that produced these prior publications.
This updated Guide builds on them by addressing more
However, fraud is not static. Accordingly, COSO and ACFE recent anti-fraud developments, revising terminology to
initiated an update process that included reaching out to a be consistent with newer COSO terminology, and adding
broad range of users for recommendations on where the important information related to technology developments
Fraud Risk Management Guide could be improved, and — specifically data analytics.
assembled a team to take a refreshed look at the Guide and
assess how and where it should be updated.
coso.org
4 | Executive Summary | Fraud Risk Management Guide | COSO/ACFE
The Guide’s executive summary provides a high-level COSO has also published Enterprise Risk Management
overview intended for the board of directors, senior — Integrating with Strategy and Performance (COSO 2017
management, and chief audit executives. It is designed to ERM Framework). This Guide, the COSO 2013 IC Framework,
explain the benefits of establishing strong anti-fraud policies and the COSO 2017 ERM Framework, are intended to
and controls. The updated Guide’s appendices contain be complementary. Depending on how an organization
valuable information: implements the Internal Control Framework, the ERM
A. Glossary Framework, and this Guide, there may be overlapping and
B. Fraud Risk Management Roles and Responsibilities interconnecting areas. Fraud risk can affect areas beyond
C. Fraud Risk Management Considerations for accounting and financial management activities.
Smaller Entities Indeed, an organization seeking to minimize the adverse
D. Data Analytics and FRM impacts of fraud needs to consider fraud risk in all areas of
E. Fraud Risk Assessment Example the enterprise and its operations.
F. Fraud Risk Management Tools
G. Managing the Risk of Fraud, Waste, The COSO Board would like to thank members of the
and Abuse in the Government Environment Task Force that updated this Guide, the other anti-fraud
professionals who provided recommendations for this
The updated Guide also contains links to several Update, the original Task Force and Advisory Panel
valuable tools and templates that can be used to make members, and the COSO member organizations for their
implementation and documentation of a comprehensive contributions in reviewing the Guide (see pages 5, 6, and 7).
Fraud Risk Management Program more effective.
Finally, the COSO Board gratefully acknowledges David
L. Cotton and Sandra K. Johnigan, co-chairs of the Update
Task Force, for their outstanding leadership and efforts
toward the completion of this update.
Paul J. Sobel
COSO Chair
Bruce Dorris
ACFE President and CEO
coso.org
COSO/ACFE | Executive Summary | Fraud Risk Management Guide | 5
Jonathan T. Marks
Baker Tilly US, LLP
coso.org
6 | Executive Summary | Fraud Risk Management Guide | COSO/ACFE
In addition to the Task Force and Anti-Fraud Professionals listed above who contributed to the development of this 2023
Update, COSO and ACFE gratefully acknowledge those listed below, who previously contributed to the 2016 Guide.
coso.org
COSO/ACFE | Executive Summary | Fraud Risk Management Guide | 7
Eric Eisenstein
Cotton & Company LLP
The COSO Board gratefully acknowledges everyone who contributed their time, experience, thoughts, and expertise to both
the original Guide and this updated Guide.
coso.org
8 | Executive Summary | Fraud Risk Management Guide | COSO/ACFE
The Ever-Present Risk of Fraud and its Costs A Growing Area of Fraud Risk
All organizations are subject to fraud risks. Some Organizations committed to fraud prevention, detection, and
organizational leaders may question whether the benefits deterrence will address not just internal fraud risks — frauds
derived from implementing and maintaining a Fraud Risk perpetrated by parties within the organization, but also
Management Program outweigh the costs. This Guide external fraud risks — fraud perpetrated on the organization
demonstrates why the answer to that question is Yes, and by outside parties such as ransomware, data breaches,
provides help in implementing such a program. identity theft, and a wide range of corruption schemes that
continue to evolve.
Publicized fraudulent behavior by key executives, other
employees, and outsiders repeatedly demonstrate the Fraud Deterrence Now and in the Future
reality of this ever-present risk and how it negatively impacts Implementation of the principles in this Guide will maximize the
reputations, brands, and images of many organizations likelihood that fraud will be prevented or detected in a timely
around the globe. Large frauds have led to the collapse manner and can create a strong fraud deterrence effect.
of entire organizations, massive asset losses, significant
legal costs, incarceration of key individuals, and erosion of COSO’s mission is to help organizations improve performance
confidence in capital markets, government, and not-for-profit by developing thought leadership that enhances internal
entities. Even relatively small frauds can be devastating to an control, risk management, governance and fraud deterrence.
organization, resulting in: The Fraud Risk Management Guide is a key tool for furthering
this mission, particularly with respect to fraud deterrence.
• Loss of trust in management and the breakdown of
teamwork and organizational cohesion As a first step in discussing fraud deterrence, the following
practical definition of fraud1 is used in this Guide:
• Increased scrutiny from law enforcement and
regulatory bodies
Fraud is any intentional act or omission
• Loss of trust by stakeholders (shareholders, donors, designed to deceive others, resulting in the
customers, taxpayers, and the public) victim suffering a loss and/or the perpetrator
achieving a gain.
• Increased employee and management turnover
• Reputational damage
Therefore, to successfully achieve fraud deterrence,
• Loss of competitive advantage organizations will implement policies and procedures that
target the prevention and detection of fraud. Organizations
It is impossible and impractical to eliminate all fraud in all that implement a rigorous Fraud Risk Management Program
organizations. However, effective leaders address fraud will further strengthen fraud deterrence by making it known
risk as they do any risk — they manage it. The Fraud Risk that potential fraud perpetrators face a significant likelihood
Management Guide provides a blueprint to do just that. It is of getting caught and being punished.
based on the proven principles of enterprise risk management
as published by COSO, most recently in 2017. This Guide gives Deterrence is also supported and enhanced by the
organizations, whether large or small, government or private, knowledge throughout the organization that:
profit or non-profit, the information necessary to design a
plan specific to the risks for that entity. There is no “one- • Those charged with governance have made a
size-fits-all approach” to managing fraud risk. But with the commitment to comprehensive fraud risk management
right approach, an organization can create a custom-fitted
program tailored to its specific needs.
The authors recognize that many other definitions of fraud exist, including those developed by the Auditing Standards Board of the American
1
Institute of Certified Public Accountants, the Public Company Accounting Oversight Board, and the Government Accountability Office. Some
legal definitions of fraud do not include scienter, or intent.
coso.org
COSO/ACFE | Executive Summary | Fraud Risk Management Guide | 9
• Periodic fraud risk assessments are being conducted The Guide also contains valuable information for users
and updated as risks change or new information who are implementing a Fraud Risk Management Program.
becomes known This includes addressing fraud risk management roles and
responsibilities, fraud risk management considerations for
• Fraud preventive and detective control activities, smaller organizations, data analytics, and managing fraud
including data analytics — overt and covert — are being risk in the government environment.
conducted
What’s New in the 2023 Fraud Risk
• Suspected frauds are investigated quickly Management Guide?
Following publication of the Fraud Risk Management
• Fraud reporting mechanisms are in place Guide in 2016, it became recognized as containing a
widely accepted set of leading practices for anti-fraud
• Discovered frauds are remediated thoroughly professionals and organizations intent on deterring fraud.
But, fraud is not static. Accordingly, COSO and ACFE
• Wrongdoing has been appropriately disciplined initiated an update process that included reaching out to
a broad range of users for recommendations on where the
• The entire Fraud Risk Management Program is being Guide can be improved, and assembled a team to take a
constantly monitored refreshed look at the Guide and assess how and where it
should be updated. Following are the key changes to this
Roles and Responsibilities 2023 edition:
The board of directors2 and top management have
responsibility for managing fraud risk. In particular, they • Fraud risk management and deterrence. This edition
are expected to understand how the organization is explains how fraud risk management relates to and
responding to heightened risks and emerging exposures, supports fraud deterrence — a key theme in COSO’s
as well as public and stakeholder scrutiny; what form of missions.
Fraud Risk Management Program the organization has
in place; how it identifies fraud risks; what it is doing to • Relationships among COSO’s two frameworks and
better prevent fraud, or at least detect it sooner; and fraud risk management. This edition explains how the
what processes are in place to investigate fraud and take COSO 2013 Internal Control — Integrated Framework,
corrective action. Further, personnel at all levels of the the COSO 2017 Enterprise Risk Management —
organization have a responsibility to understand the effects Integrating with Strategy and Performance Framework
of fraud and the importance of preventing fraud. This Guide and the Fraud Risk Management Guide are related and
is designed to help address these complex issues. support each other.
Throughout this Guide the terms board and board of directors refer to the governing or oversight body or those charged with governance of
2
the organization. The terms chief executive officer (CEO) and chief financial officer (CFO) refer to the senior-level management individuals
responsible for overall organization performance and financial reporting.
coso.org
10 | Executive Summary | Fraud Risk Management Guide | COSO/ACFE
• Internal control and fraud risk management. This - Environmental, Social, and Governance (ESG)
edition explains how internal control and fraud risk initiatives and reporting
management are related and support each other, but - Cyber fraud
are different in some important respects. Examples are - Blockchain, cryptocurrency, and digital assets
provided to show that many “go-to” internal control - Ransomware
processes and procedures may be adequate for - COVID-19 response efforts, the CARES Act (Public
ensuring accuracy in accounting and financial reporting Law 116-136) and other related programs
but may not provide sufficient fraud protection. - Remote working and hybrid working environments
- Innovative and virtual management tools and
• Assessing the effectiveness of existing control accounting procedures
procedures as related to fraud risk. Chapter 2 (Fraud
Risk Assessment) provides additional information • Appendices changes. The 2016 Guide had 19 appendices.
on this important step in the fraud risk assessment This 2023 edition has 7. Several of the 2016 appendices
process. It clarifies and emphasizes that assessing have been moved to ACFE’s Fraud Risk Management
control effectiveness involves (a) identifying existing Tools web site so that they can be updated as needed.
control procedures related to each identified inherent The appendices moved are:
fraud risk, (b) assuring that the controls have been - Sample Fraud Control Policy Framework
implemented and are working as designed, and (c) (2016 Appendix F-1)
assessing whether the controls are adequate to - Fraud Risk Management High-Level Assessment
address the fraud risks that have been identified. That (2016 Appendix F-2)
last step is in addition to an assessment of the design - Sample Fraud Policy Responsibility Matrix
and operating effectiveness of controls from an internal (2016 Appendix F-3)
control over financial reporting perspective. Further, - Sample Fraud Risk Management Policy
it is the key to identifying residual fraud risk so that (2016 Appendix F-4)
additional fraud control activities such as additional - Sample Fraud Risk Management Survey
data analytics can be applied. (2016 Appendix F-5)
- Fraud Risk Exposures (2016 Appendix G)
• Changes in the legal and regulatory environment. - The five Fraud Risk Management Scorecards
This edition includes updated information with respect (2016 Appendices I-1 through I-5)
to recent legal and regulatory developments in the
U.S. pertaining to fraud and fraud risk management, The Appendix, Managing the Risk of Fraud, Waste, and
including: Abuse in the Government Environment, has been updated
- The Department of Justice’s Evaluation of Corporate and expanded, and remains in the Guide as a valuable
Compliance Programs resource.
- The Government Accountability Office’s A Framework
for Managing Fraud Risks in Federal Programs Finally, and significantly, the ACFE tools site includes a
- U.S. Securities and Exchange Commission’s Climate greatly-expanded list of fraud risk exposures and fraud
and Environmental, Social, and Governance (ESG) schemes. Each scheme in the expanded list is hyperlinked
Task Force Reports to an underlying description of the scheme and how it
is carried out. This list contains generic schemes —
• Fraud reporting systems or hotlines. ACFE research schemes that can victimize any organization — but also
consistently shows that the majority of frauds are industry-specific schemes (healthcare, financial services,
discovered through tips, often from employees in manufacturing, and so forth). Again, through input from
an organization. This edition includes updated and users, this resource will continue to expand. These dynamic
expanded information related to the importance of resources are readily accessible to anti-fraud professionals
fraud reporting systems in detecting, preventing, and implementing Fraud Risk Management Programs.
deterring fraud.
COSO and ACFE are confident that this updated Fraud Risk
• Changes in the external environment and fraud Management Guide will continue to grow in importance as
landscape. The fraud landscape is changing rapidly. the set of leading practices for preventing, detecting, and
This edition includes information on this changing deterring fraud.
environment, including:
coso.org
COSO/ACFE | Executive Summary | Fraud Risk Management Guide | 11
COSO revised its Internal Control — Integrated Framework The Guide also defines important terminology (see
in 2013 to incorporate 17 principles. These 17 principles are Appendix A), explains key roles and responsibilities (see
associated with the five internal control components COSO Appendix B), and describes how it can be applied to
established in 1992. The principles provide clarity for the user smaller organizations (see Appendix C).
in designing and implementing systems of internal control
and for understanding requirements for effective internal Consequently, organizations applying the COSO 2013 IC
control. COSO clarifies that for a system of internal control to Framework can choose from the following two approaches
be effective, each of the 17 principles is present, functioning, in addressing this important fraud risk assessment
and operating in an integrated manner. Throughout this Guide principle:
the COSO 2013 IC Framework has been used as a source for
describing aspects of internal control. • First Approach: They can use this Guide’s second
fraud risk management principle (The organization
performs comprehensive fraud risk assessments to
Principle 8, one of the risk assessment identify specific fraud schemes and risks, assess their
component principles, states: likelihood and significance, evaluate existing fraud
The organization considers the potential control activities, and implement actions to mitigate
for fraud in assessing risks to the residual fraud risks) on a stand-alone basis to conduct
achievement of objectives. a fraud risk assessment that is compliant with COSO
2013 IC Framework Principle 8. Under this approach, an
organization would overlay this fraud risk assessment
process on its existing internal control structure by
This Guide is intended to be supportive of and consistent revisiting each component of internal control and
with the COSO 2013 IC Framework and can serve as assessing vulnerabilities to fraud.
guidance for organizations to follow in performing a fraud
risk assessment. • Second Approach: They can implement this Guide as a
separate, compatible, and more comprehensive process
For organizations desiring to establish a more to not only periodically assess, but to also manage the
comprehensive approach to managing fraud risk, however, organization’s fraud risks as part of a broader Fraud
this Guide includes more than just the information needed Risk Management Program. That approach includes a
to perform a fraud risk assessment. It also provides fraud risk assessment and also encompasses fraud risk
guidance on establishing the other components of an governance, designing and implementing fraud control
overall Fraud Risk Management Program, including: activities, fraud investigation and corrective action, and
fraud risk management evaluation and monitoring. Once
• Establishing fraud risk governance policies the Guide is implemented, its results will support and will
be consistent with the overall COSO 2013 IC Framework.
• Designing and deploying fraud preventive and detective
control activities The second approach results in an ongoing, comprehensive
Fraud Risk Management Program as follows in Figure 1.
• Conducting investigations and taking corrective actions
coso.org
12 | Executive Summary | Fraud Risk Management Guide | COSO/ACFE
Establish a fraud
risk management
policy as part of
organizational
governance
This comprehensive approach recognizes and emphasizes Implementing a specific and more focused fraud risk
the fundamental difference between internal control assessment as a separate Fraud Risk Management Program
weaknesses resulting in errors and weaknesses resulting in enhances the likelihood that the assessment’s focus
fraud. This fundamental difference is intent. An organization remains on intentional acts.
that simply adds the fraud risk assessment to the existing
risk assessment may not thoroughly examine and identify The recommended approach is also likely to result in a more
possibilities for improper acts designed to: robust and comprehensive assessment of fraud risk. It also
provides the additional structure needed for comprehensive
• Misstate financial information fraud risk management. If organizations use the more
simplified approach (just performing the fraud risk
• Misstate non-financial information assessment), they can combine those results with the COSO
2013 IC Framework’s results to yield more robust prevention
• Misappropriate assets and detection mechanisms.
coso.org
COSO/ACFE | Executive Summary | Fraud Risk Management Guide | 13
Relationships Among COSO’s Two Frameworks and this Fraud Risk Management Guide
COSO published Internal Control — Integrated Framework Enterprise risk management is broader than internal control
in 2013 (COSO 2013 IC Framework) and published in that it focuses on a variety of risk responses to manage
Enterprise Risk Management — Integrating with Strategy risk in all aspects of business. Internal control is a subset
and Performance in 2017 (COSO 2017 ERM Framework). and integral part of enterprise risk management, while
This Fraud Risk Management Guide, the COSO 2013 IC enterprise risk management is a subset of organizational
Framework, and the COSO 2017 ERM Framework, are governance. Of course, fraud risk can impact all aspects of
intended to be complementary. both enterprise risk and internal control.
Depending on how an organization implements the Internal This Fraud Risk Management Guide is intended to be an
Control Framework, the ERM Framework, and this Guide, important component of a holistic risk response that is
there may be overlapping and interconnecting areas. Fraud both effective and efficient in addressing wide-ranging
risk can affect all areas of accounting functions, financial fraud risks, including those originating from internal sources
management and reporting activities, and non-financial (e.g., management, employees, consultants), external
management and reporting activities. Indeed, an organization sources (e.g., cyber/hacking risk), or both (e.g., conspiracy,
seeking to minimize the adverse impacts of fraud will consider corruption, money laundering, drug trafficking/terrorism
fraud risk in all areas of the enterprise and its operations. financing).
Control
Principle
1 The organization establishes and communicates a Fraud Risk
Management Program that demonstrates the expectations of the
board of directors and senior management and their commitment to
high integrity and ethical values regarding managing fraud risk.
Environment
Risk
Assessment
Principle
2 The organization performs comprehensive fraud risk assessments
to identify specific fraud schemes and risks, assess their likelihood
and significance, evaluate existing fraud control activities, and
implement actions to mitigate residual fraud risks.
coso.org
14 | Executive Summary | Fraud Risk Management Guide | COSO/ACFE
Control
Activities
Principle
3 The organization selects, develops, and deploys
preventive and detective fraud control activities to
mitigate the risk of fraud events occurring or not being
detected in a timely manner.
Information &
Communication
Principle
4 The organization establishes a communication process to obtain
information about potential fraud and deploys a coordinated
approach to investigation and corrective action to address fraud
appropriately and in a timely manner.
Monitoring
Principle
5 The organization selects, develops, and performs ongoing evaluations to
ascertain whether each of the five principles of fraud risk management is
present and functioning and communicates Fraud Risk Management Program
deficiencies in a timely manner to parties responsible for taking corrective
Activities
action, including senior management and the board of directors.
coso.org
COSO/ACFE | Executive Summary | Fraud Risk Management Guide | 15
coso.org
16 | Executive Summary | Fraud Risk Management Guide | COSO/ACFE
Relationship Between the COSO 2013 IC Framework’s Five Components and 17 Internal
Control Principles and this Guide’s Five Fraud Risk Management Principles
COSO revised its Internal Control — Integrated Framework in 2013 to incorporate 17 principles. These 17 principles are
associated with the five internal control components COSO established in 1992. This Guide’s five fraud risk management
principles fully support, are entirely consistent with, and parallel the COSO 2013 IC Framework’s 17 internal control principles.
The correlation between the fraud risk management principles and the COSO 2013 IC Framework’s internal control
components and principles is as follows:
3. Management establishes, with board oversight, structures, reporting lines, the expectations of the board of directors and senior
and appropriate authorities and responsibilities in the pursuit of objectives. management and their commitment to high integrity
and ethical values regarding managing fraud risk.
4. The organization demonstrates a commitment to attract, develop, and retain
competent individuals in alignment with objectives.
across the entity and analyzes risks as a basis for determining how the 2. The organization performs comprehensive fraud
risks should be managed. risk assessments to identify specific fraud schemes
Risk
10. The organization selects and develops control activities that contribute to the
mitigation of risks to the achievement of objectives to acceptable levels.
3. The organization selects, develops, and deploys
Activities
Control
11. The organization selects and develops general control activities over preventive and detective fraud control activities to
technology to support the achievement of objectives. mitigate the risk of fraud events occurring or not
being detected in a timely manner.
12. The organization deploys control activities through policies that establish
what is expected and procedures that put policies into action.
13. The organization obtains or generates and uses relevant, quality information
to support the functioning of other components of internal control.
Communication
Information &
16. The organization selects, develops, and performs ongoing and/or 5. The organization selects, develops, and performs
separate evaluations to ascertain whether the components of internal ongoing evaluations to ascertain whether each
Monitoring
control are present and functioning. of the five principles of fraud risk management is
Activities
The most obvious correlation between these two sets of principles is COSO 2013 IC Framework Principle 8 and Fraud Risk
Management Principle 2. In addition, as the above exhibit displays, all of the COSO 2013 IC Framework and Fraud Risk
Management Principles correlate with and support each other.
coso.org
Testimonials
“The Guide is a great resource for professionals who appreciate
the need to take a holistic approach to fraud risk management.”
“As much as we don’t like to think about it, fraud is just part of the
business landscape and human condition. Pressure, greed, insecurity, and
many other emotions are involved which unfortunately fuel intentional
bad behavior and decision-making. This guide expands upon Principle 8
in the 2013 COSO Internal Control — Integrated Framework in an effective
way to help all organizations regardless of size, industry, form, or ownership
more effectively address the unwelcome subject of fraud. Boards,
management, accountants, internal auditors, and others will benefit
from its advice, structure, and guidance.”
“Being a CPA as well as a CFE, I was already familiar with COSO guidance.
Coupling that with a fraud risk management perspective is ideal for anyone
in a corporate role. The FRMG provides clear direction for identifying and
addressing risks, and makes it easy to integrate with overall corporate risk
management efforts.”
Valerie Scarantino
UGI Corporation
“I found the Guide to be a cost effective and valuable resource for fighting
fraud as it approaches fraud prevention and detection on a comprehensive
basis as opposed to piecemeal, which as is often the approach used by most
organizations. Proactiveness vs. reactiveness is both more cost effective as
well as protecting from something you can never recover from, reputation
damage…the true cost of fraud. Unfortunately, many organizations fall into the
“comfortable in action mode,” in other words “it can’t happen here,” or simply
don’t know where or how to start a comprehensive, all-encompassing approach
to fraud protection and detection. You now have a tool and
resource to guide you through this process!”
FRAUD RISK
MANAGEMENT
GUIDE Second
Edition
Committee of Sponsoring
Organizations of the
Treadway Coåmmission
FRAUD RISK
MANAGEMENT
GUIDE Second
Edition
Committee of Sponsoring
Organizations of the
Treadway Coåmmission