Defining roles in prevention of financial reporting fraud


There is no way to guarantee that an organization will not experience financial reporting fraud.

But research shows that fraud-resistant organizations share three traits:

  • A tone at the top that encourages an ethical culture.
  • The presence of skepticism.
  • Engagement of all participants in the financial reporting supply chain.

That’s according to The Fraud-Resistant Organization, a report released Monday by the Anti-Fraud Collaboration, whose members include the Center for Audit Quality (CAQ), Financial Executives International, The Institute of Internal Auditors, and the National Association of Corporate Directors.

“All players in the financial reporting supply chain must work together to deter and detect financial reporting fraud,” CAQ Executive Director Cindy Fornelli said in a news release. “The report highlights vital roles and responsibilities and provides each party with knowledge they can use to reduce the potential for fraud.”

The CAQ is affiliated with the AICPA.

According to the report, responsibilities for holders of financial supply chain roles include:

  • Management. Establishing an ethical culture and providing support and resources for strong fraud risk management programs and internal controls is part of setting the proper tone at the top. Management should encourage skepticism as a vital ingredient of that ethical culture, the report says.
  • Boards of directors. Board members need to constructively exercise skepticism, possess thorough knowledge of the company they serve, and understand the role that pressure, opportunity, and rationalization can play in financial reporting fraud, according to the report.
  • Audit committees. Members of the board serving on audit committees should know how to monitor the risk of management override of internal controls, the report says. And in public companies, audit committees are responsible for establishing a confidential, anonymous reporting mechanism to manage complaints regarding accounting, internal accounting controls, or auditing matters.
  • Internal auditors. Organizations’ internal auditors should use a risk-based approach to evaluate the effectiveness of fraud deterrence procedures and internal controls on a continual basis, according to the report.
  • External auditors. When developing the audit plan, auditors should take into account the integrity and ethical values practiced by management—and the nature of the board’s and audit committee’s oversight, the report says.

Ken Tysiac ( ) is a JofA editorial director.


Year-end tax planning and what’s new for 2016

Practitioners need to consider several tax planning opportunities to review with their clients before the end of the year. This report offers strategies for individuals and businesses, as well as recent federal tax law changes affecting this year’s tax returns.


News quiz: Retirement planning, tax practice, and fraud risk

Recent reports focused on a survey that gauges the worries about retirement among CPA financial planners’ clients, a suit that affects tax practitioners, and a guide that offers advice on fraud risk. See how much you know with this short quiz.


Bolster your data defenses

As you weather the dog days of summer, it’s a good time to make sure your cybersecurity structure can stand up to the heat of external and internal threats. Here are six steps to help shore up your systems.