Ch01

What is the defining distinction between an error and fraud in financial reporting?

The presence of intent: an error is an unintentional mistake, whereas fraud is a deliberate act of deception.

How is fraud defined according to the joint ACFE, AICPA, and IIA standards?

Any intentional act or omission designed to deceive others, resulting in a victim suffering a loss and/or the perpetrator achieving a gain.

How should the response after discovery differ between an error and suspected fraud?

An error requires reporting and correcting the mistake, while suspected fraud requires reporting the concern, preserving evidence, and investigating.

Why is an employee accidentally applying an incorrect currency exchange rate classified as an error rather than fraud?

Because the miscalculation lacks intentional deception or a deliberate motive to secure an unfair personal benefit.

What makes submitting a fabricated travel expense receipt for a trip that never occurred an act of fraud?

It involves knowingly creating false documentation to deceive the organization for direct financial gain.

What essential rule applies to interpreting red flags during a fraud evaluation?

A red flag is a indicator to investigate further, not definitive proof of fraud.

What is the primary objective of fraud prevention activities?

To reduce the opportunity and likelihood of fraud occurring before it takes place.

What is the primary objective of fraud detection activities?

To identify suspected fraud while it is occurring or after it has taken place.

Which three internal controls specifically serve a fraud prevention function?

Establishing ethical policies, enforcing segregation of duties, and restricting system access.

Which three measures specifically serve a fraud detection function?

Reconciling accounts, monitoring data anomalies/red flags, and maintaining confidential reporting channels.

What conduct is explicitly prohibited under Cambodia's Anti-Corruption Law?

Bribery, abuse of power, misappropriation of public funds, and illicit enrichment.

Which bodies and individuals are covered by Cambodia's Anti-Corruption Law?

Both public officials and private-sector employees.

How frequently must specified Cambodian officials submit asset and liability declarations?

Upon entering office, upon leaving office, and every two years while in office.

Which official Cambodian agency receives complaints and conducts corruption investigations?

The Anti-Corruption Unit (ACU).

Who developed the classic thesis explaining why trusted individuals commit fraud?

Donald Cressey.

What are the three original legs of Donald Cressey's Fraud Triangle?

Pressure (or Incentive), Opportunity, and Rationalization.

In the Fraud Triangle, what constitutes an external pressure or motivation?

Personal financial debt, lifestyle demands, or pressing vices such as gambling or drug addictions.

In the Fraud Triangle, what constitutes an internal organizational pressure?

Demanding performance targets or overwhelming workload expectations.

What organizational weakness creates the opportunity element in the Fraud Triangle?

A lack of segregation of duties, absent internal controls, or poor oversight.

What is rationalization in the context of financial fraud?

A mental justification constructed by the perpetrator to make their dishonest conduct feel acceptable.

How does the Fraud Diamond model extend the traditional Fraud Triangle?

By adding Capability as a fourth key element required to execute and conceal fraud.

In the Fraud Diamond framework, what does capability refer to?

The perpetrator's technical knowledge, authority, and skill to bypass controls and conceal the act.

Which technological enablers contribute to the evolved, modern Fraud Triangle?

System vulnerabilities, digital access gaps, automated processes, malware, and phishing schemes.

How does privileged data access act as an enabler in modern fraud schemes?

It gives individuals unrestricted visibility and ability to manipulate sensitive financial records without detection.

Why does collusion complicate traditional fraud prevention models?

Multiple individuals or insider networks working together can override standard segregation-of-duties controls.

What are four direct financial impacts a business experiences following a fraud incident?

Immediate asset losses, lost revenue, higher insurance premiums, and reduced enterprise valuation.

What operational and human resource costs arise from an internal fraud investigation?

Time and fees spent on forensic audits, lower employee morale, potential job cuts, and supplier delays.

What long-term legal consequences can result from a severe, unmitigated fraud incident?

Extensive legal litigation costs, regulatory sanctions, business restructuring, or corporate bankruptcy.

What is predication in the context of a professional fraud investigation?

The existence of reasonable circumstances that lead a trained professional to believe fraud has occurred, is occurring, or will occur.

What is the purpose of using the fraud theory approach during an investigation?

To hypothesize the most likely fraud scheme based on existing evidence and systematically test how it was executed.

What control verification step should be executed when a register cash discrepancy is discovered?

Re-count physical cash and reconcile it against original sales receipts, opening cash balances, and refund slips.

What immediate action should be taken upon receiving an urgent email requesting a change in vendor bank payment details?

Hold the payment and independently verify the change by calling a known, previously verified vendor phone number.

What process prevents double payments when matching potential duplicate supplier invoices?

Compare invoice numbers, purchase orders, delivery receipts, and historical payment logs, then place an automated payment hold.

Why is password sharing classified as a critical control failure?

It destroys individual user accountability and prevents system audit logs from attributing actions to specific employees.

How can an auditor verify whether a listed employee on a payroll sheet is a ghost employee?

Cross-check payroll entries with HR personnel files, physical identity credentials, supervisor attendance records, and bank account details.

What red flag suggests potential money laundering in a commercial bank account?

Transaction activity or fund transfers that are completely inconsistent with the customer's known business profile.

A branch has 200 total loans and 14 are overdue. What is the true overdue loan rate?

7% (calculated as 14 divided by 200).

If a manager alters 6 overdue loans out of 14 true overdue loans in a 200-loan portfolio, what is the reported rate?

4% (calculated as 8 divided by 200).

Why is a discrepancy between an off-system reporting spreadsheet and a core banking system a major indicator of fraud?

It indicates manual, unverified manipulation of data designed to bypass system controls and present false metrics.

Which piece of digital evidence establishes who modified data in a reporting spreadsheet?

The spreadsheet's edit logs or system version history.

What system control prevents managers from manipulating spreadsheet performance reports?

Generating performance reports directly from the core banking database, prohibiting manual spreadsheet modifications.

In a case where an accounts payable officer changes a vendor's bank details to an unauthorized account, what control failure provided the opportunity?

Skipping the mandatory second-employee telephone verification step during busy operational periods.

How does combining supplier creation, invoice entry, and payment approval in one job position create fraud risk?

It eliminates segregation of duties, allowing one employee to set up fictitious suppliers and approve fraudulent payouts undetected.

How does setting sales bonuses based solely on volume without quality checks affect employee pressure?

It creates strong financial incentive to submit unverified, incomplete, or fabricated applications to hit bonus targets.

Why is product counterfeiting considered a severe form of commercial fraud beyond financial loss?

Fake products like pharmaceuticals or electrical goods can cause physical harm or death to consumers.

What is the typical sequence of events in the evolution of an undetected fraud scheme?

Control failure occurs --> scheme executed --> fraud escalates in size/frequency --> assets converted --> anomaly discovered.

What is procurement fraud?

Manipulating purchasing decisions or contracts through false supplier invoices, fake competing bids, or kickbacks.

What characterizes an investment scam warning sign?

Guarantees of exceptionally high financial returns with 'no risk'.

What dual requirement must be met for an act to meet the ACFE/AICPA legal definition of fraud?

An intentional act or omission designed to deceive, AND a resulting financial loss to the victim or gain to the perpetrator.

What role does an independent credit/risk officer play in mitigating reporting fraud?

They reconcile manual adjustments against underlying system data before performance metrics or bonuses are approved.