acfe fraud prevention check-up - BKD

E-Periodic EvaluationE1-Evaluation Planning & ReportingE1.1 Define Evaluation Scope / Objectives to include the periodic evaluation of the fraud risk management program.E1.2 Define Type of Evaluation whether design effectiveness, operating effectiveness and/or performance.E1.3 Define Level of Assurance and Evaluation Team including whether the evaluation is to be a self-assessment,an internal evaluation with validation or third-party evaluation of the program and/or the quality of internal audit’sexecution of its role in the programE1.4 Define Privilege Status for the communications during and results of the evaluation of the fraud riskmanagement program.E1.5 Develop Evaluation Plan which will vary based upon the defined level of assurance, but must identify thecriteria and procedures to be used for assessment in addition to the other elements in the OCEG Foundation. (SeeAppendices D and E for example self-assessments).E1.6 Define and Communicate Evaluation Report Content so that the results of the evaluation are communicatedat the appropriate level of the organization and ultimately presented by the head of internal audit or the executivelevelmember of management accountable to the board for the effectiveness and performance of the fraud riskmanagement program as a regular board agenda item.E2-Program Effectiveness EvaluationE2.1 Perform Design Effectiveness (DE) Evaluation in accordance with the evaluation plan.E2.2 Perform Operating Effectiveness (OE) Evaluation in accordance with the evaluation plan.E3-Program Performance EvaluationE3.1 Perform Program Efficiency (PE) Evaluation in accordance with the evaluation plan.E3.2 Perform Program Responsiveness (PR) Evaluation in accordance with the evaluation plan.R-Respond & ImproveR1-Incident, Issue & Case ManagementR1.1 Process, Escalate & Manage Incidents in accordance with applicable legal restrictions on anonymousand confidential reporting through a mechanism and process of prompt, competent, and confidential review,investigation, and resolution of allegations involving potential fraud or misconduct which:• Categorizes issues.• Confirms the validity of the allegation(s).• Defines the severity of the allegation(s).• Escalates the issue or investigation when appropriate.• Refers issues outside the scope of the program.• Conducts the investigation and fact-finding.• Resolves or closes the investigation.• Undertakes a review of whether the conduct constitutes a control weakness to be remediated.• Identifies types of information that should be kept confidential.• Defines how the investigation will be documented.• Managing and retaining documents and information.R1.2 Resolve Issues in accordance with the methodology.76