ABSTRACT

A number of organisations are already attempting to enhance their fraud risk management strategy by measuring its effectiveness, so that benchmarks can be set. The success criteria for fraud risk management could be described as a measure of how prepared an organisation is to withstand and cope with the threat of fraud. The criteria are drawn from a model and related assessment system which is involved in developing, together with Det Norske Veritas (DNV), an international certification and assessment agency. Measuring resistance to fraud is all about measuring how good an organisation is at doing things in practice, not just fulfilling legal and other requirements on paper. A regular fraud resistance assessment would typically be requested by either a non-executive board member or the audit committee, but it could equally well be initiated from within the company, provided that there was some degree of independent assessment.