Fraud Trends and Investigations The Institute of Internal Auditors Spring Fraud Seminar April 6, 2016 Jonathan Huynh Kathleen Chu For Discussion Purposes Only Confidential
Fraud Trends andInvestigationsThe Institute of Internal AuditorsSpring Fraud SeminarApril 6, 2016
Jonathan HuynhKathleen Chu
For Discussion Purposes OnlyConfidential
Page 2
Trends in the Detection of Fraud Schemes
Fraud Trends and Investigations
Page 3
Trends in the Detection of Fraud Schemes
Fraud Trends and Investigations
Page 4
Detection of Fraud Schemes
► Detection methods variedsubstantially between smallorganizations The starkestvariation occurred with tips.
► Internal audit was the detectionmethod for 12% of cases at smallorganizations but 18.6% at largerorganizations.
► One possible explanation forthese disparities is that thecontrols and procedures anorganization has in place affecthow fraud schemes are caught.
► In place of tips, smallorganizations tend to detect morefrauds through managementreview, account reconciliation,accident, external audit, anddocument examination.
Fraud Trends and Investigations
Page 5
Median Losses by Region
Fraud Trends and Investigations
Page 6
Fraud Schemes by Region
Fraud Trends and Investigations
Page 7
Fraud Schemes by Region
Fraud Trends and Investigations
Page 8
Fraud Schemes by Region
Fraud Trends and Investigations
Page 9
Fraud Schemes by Region
Fraud Trends and Investigations
Page 10
Median Loss per Fraud Scheme
Fraud Trends and Investigations
Page 11
Asset Misappropriation Schemes
Fraud Trends and Investigations
Page 12
Fraud Data Analytics
Fraud Trends and Investigations
Page 13
Companies are taking a strong, proactivestance in investing their FDA spend
According to the Association of CertifiedFraud Examiners’ most current Report to theNations on Occupational Fraud and Abuse,those companies with proactive dataanalytics in place saw a cost per fraudincident that was 59.7% lower (roughlyUS$100,000 lower per incident) than thecost for those companies not using proactivedata analytics – more than any other controllisted in the survey.
As we look toward COSO guidance around conducting fraud risk assessments as part of aneffective internal controls framework, we will see a strong emphasis on the use of forensicdata analytics.
Spend at least half of their FDA investmenton proactive initiative
63%of respondents
Fraud Trends and Investigations
Page 14
EY survey approach and participant profile
Job title InterviewsHead of internal audit/CRO 192Other audit/risk 81Other finance 51Head of compliance 61CFO/FD 68Head of legal 34Financial controller 58CEO/COO/CIO 28Head of business unit/division 16Head of investigations 14Head of security 17Company secretary 5Other management staff 40
Industry InterviewsFinancial services 162Consumer products/Retail/Wholesale 149Life sciences 59Oil and gas 62Power and utilities 41Transportation 24Manufacturing 62Mining 27Technology, communications and entertainment 77Other 2
Fraud Trends and Investigations
Page 15
Key findings: current state of FDA adoption
Current and emerging risks driving demand► The fastest-growing fraud risk is cyber breach or insider threat, with 62% of
respondents reporting increased levels of concern in this area.
A maturing FDA landscape► Three out of five respondents plan to increase their spend on forensic data analytics
(FDA) over the next two years.► 63% are investing at least half of their FDA spend on proactive monitoring activities.► Technology maturity is also growing. The use of visualization tools has doubled since
the 2014 survey.► Respondents conducting FDA completely in-house increased from 45% two years ago
to 67%.► Organizations are not recognizing the full spectrum of value FDA can deliver,
specifically with respect to cost savings.
Fraud Trends and Investigations
Page 16
Current and emerging risks driving demand
“At the SEC, we have made great strides in leveragingdata and technology to detect and pursue misconduct.In the enforcement arena, the Commission is usingdata analytics to help identify wrongdoers and conductstreamlined investigations to optimize our resources.”
– Chair Mary Jo White, opening remarks at the 21st AnnualInternational Institute for Securities Enforcement andMarket Oversight, 2 November 2015
Fraud Trends and Investigations
Page 17
FDA demand is also driven by increasinggovernment and public scrutiny of fraud risk
Q. What are the main reasons that you are planning to increase your investment in FDA capabilities?Base: Respondents who plan to increase investment in FDA (405)Multiple answers allowed, may exceed 100%.
4%
9%
13%
25%
26%
30%
31%
32%
43%
53%
0% 10% 20% 30% 40% 50% 60%
Other main reasons
Increased calls to your ‘whistle-blower line’
Increasing merger and acquisition activities
Need for more robust third-party due diligence
Recent fraud risk assessmentfindings in the organization
Seeking greater cost efficiencyin the fraud risk management process
Pressure from the board or management team
Increased risk of fraud in emerging markets
Increased regulatory scrutiny
Response to growing cybercrime risks
Fraud Trends and Investigations
Page 18
Worldwide regulatory enforcement is drivingthe sense of urgency by C-suite respondents
► The SEC’s Financial Reporting and Audit Task Force is now deploying cutting-edgeFDA tools to mine data for fraud.
► Regulators in the UK, Germany, Italy and France, among others, have been involved inmajor enforcement actions.
► In Asia, prosecutions for corruption are increasingly frequent, with China leading theway.
► EU and Japan regulators are teaming with their US counterparts on cartelinvestigations.
Fraud Trends and Investigations
Page 19
Cyber breach or insider threat is perceivedas the fastest-growing fraud risk
Q. Over the past two years, how has the level of concern about each risk area changed in your organization?Base: All respondents (665)The “Don’t know” percentages have been omitted to allow better comparison among the responses given.
9%
8%
9%
12%
10%
17%
32%
16%
18%
19%
22%
32%
27%
30%
61%
62%
59%
54%
47%
45%
31%
7%
9%
6%
7%
9%
8%
4%
0% 10% 20% 30% 40% 50% 60% 70% 80% 90% 100%
Money laundering
Financial statement fraud
Merger and acquisition risk
Capital projects risk
Internal fraud (travel andentertainment abuse, collusion, etc.)
Bribery and corruption risk
Cyber breach or insider threat
Signifcantly increased Slightly increased Not changed Decreased
Fraud Trends and Investigations
Page 20
Perceived risks by industry - the percentage ofrespondents who have seen the increased level of risks
Fraud Trends and Investigations
Page 21
FDA deployment: what are the key hurdles?
Fraud Trends and Investigations
Page 22
Key challenges: making the business case
Discrepancy betweenpractice and perception
Q. To what extent do you agree that “We need to improve management’s awareness of the benefits of FDA in the company’s anti-fraud program”?Base: All respondents (665)The “Don’t know” percentages have been omitted to allow better comparison among the responses given.
“We need to do more to improve our currentanti-fraud procedures, including the use ofFDA tools.”
74%of C-suiterespondents
68%
13%
18%
0%
10%
20%
30%
40%
50%
60%
70%
80%
Agree Neither agree nor disagree Disagree
62%, 2014
Fraud Trends and Investigations
Page 23
Key challenges: building teams with theright skills
Successful deployment requiresthree distinct skill sets:► Technical skills – to understand
the organization’s systems andadvise on acquiring additionaltechnology
► Domain knowledge – familiaritywith the relevant risk areas in thebusiness and the ability tointerpret analytics results in thecontext of the organization
► Data analytics (e.g., data science) expertise – mathematical, computer science andbusiness intelligence techniques, such as pattern recognition, statistical analysis, querydesign and data visualization
According to Gartner, the need for data scientists is growing at about three times that forstatisticians and business intelligence analysts, and there is an anticipated talent shortage of100,000 or more analytics personnel through 2020.
Fraud Trends and Investigations
Page 24
Key challenges: deploying the righttechnology
► Respondents continue to rate “challenges in combining data sources” as thetop issue to overcome when implementing FDA.► Building data sets that talk to one another is the first step to successful analytics.
► One key obstacle to moving to more advanced tools appears to be the lack offunding.
► However, analytics technology has improved, making deployment andaccessibility easier.► More “self-service” applications are available via cloud that require less
customization to implement.► Significant improvements in computing power and scalability (i.e., Hadoop)
combined with ever-decreasing storage costs make the use of FDA more costeffective.
Fraud Trends and Investigations
Page 25
What Does Good Look Like?
Fraud Trends and Investigations
Page 26
Intentionally left blank for distribution purposes
Fraud Trends and Investigations
Page 27
Key findings: what does good look like?
Use advanced technology► In almost every circumstance, those companies using more sophisticated
analytics, beyond basic spreadsheet-type, rules-driven tests, report betterfraud detection in less time.
Analyze large data volumes► We have observed a positive correlation between the use of large data
volumes (over 10 million records) and achieving positive results of FDAimplementation.
Analyze a wide variety of data► Our survey findings indicate that respondents who have reported positive
results from using FDA are using a wider variety of data sources.
Fraud Trends and Investigations
Page 28
Commonalities among those withsuccessful results
Base: Among all respondents (665), 56% (370) agree g and 21% (140) disagree g that “We currently get positive results from the FDA tools that we use.”
Q. Of your annual spend on preventing and detecting fraud risks, whatpercentage is on FDA specifically?
Q. What tools do you utilize in managing fraud risks?
Q. Which of the above unstructured data sources does yourorganization use to analyze fraud risks?
Q. What data volume (in records) do you typically work with in your FDA tasks?
Use advanced technology Analyze large data volumes
Analyze a wide variety of data Invest more of total anti-fraud spend in FDA
2%
14%
20%
7%
30%
29%
0% 5% 10% 15% 20% 25% 30% 35%
Statistical analysis
Social media
Visualization
11%
19%
23%
79%
57%
53%
0% 20% 40% 60% 80% 100%
More than 10m
Between 1m and 10m
Under 1m
61%
32%
31%
42%
55%
67%
71%
46%
49%
57%
58%
77%
0% 50% 100%
Network system or serverinformation
Customer call or meeting notes
Social media
News feeds or externaldata sources
Free text payment descriptionsin accounting data
Electronic communication 33%
26%
0%
5%
10%
15%
20%
25%
30%
35%
Fraud Trends and Investigations
Page 29
Fraud Response
Fraud Trends and Investigations
Page 30
Detection of Fraud Schemes
Source: ACFE Report to the Nations 2016 Fraud Trends and Investigations
Page 31
Mitigating Fraud
► Approaches used by companies to minimize and mitigatepotential or existing fraud:► Fraud Prevention
► Setting strong tone at the top► Implementing policies and procedures in order to prevent fraud from
occurring► Developing fraud training and awareness► Establishing strong Internal controls
► Fraud Detection► Internal controls► Hotline
► Fraud Response► Internal Investigation► Independent Investigation
Fraud Trends and Investigations
Page 32
Fraud ResponseInvestigating Fraud Allegations
► Overview► Components of an Anti-Fraud Program – Fraud Response► Response Protocols► Types of Investigations► Reporting the Results► Investigation Challenges
Fraud Trends and Investigations
Page 33
Intentionally left blank for distribution purposes
Fraud Trends and Investigations
Page 34
Response Protocols
► Receive the allegation► Understand the nature of the allegation
► Determine whether it involves a potential violation of laws, rules, orcompany policy (establish privileged as appropriate)
► Ask the following questions:► What is the source of the allegation► When and where did the events occur and over what period of time► What evidence may exist► Who may be involved► Who is likely to have relevant knowledge or information
► Determine the appropriate course of action► Consult the necessary resources to determine the “next steps”► Assemble the team to conduct the investigation► Preserve the data, especially electronic data
Fraud Trends and Investigations
Page 35
Types of Investigations - Internal
► Conducted at the direction of management and theCompany’s in-house or outside counsel
► Initiated by management or prompted by an externalevent
► Management should do all that it can to prepare aninformed defense to existing or anticipated allegations ofwrongdoing
Fraud Trends and Investigations
Page 36
Types of Investigations - Independent
► Conducted at the direction of a committee of the Board ofDirectors (e.g. Audit Committee or Special Committee)with outside counsel
► Why an independent investigation?► Consistent with focus of Sarbanes-Oxley► Credibility with regulators – i.e. SEC and DOJ► Expectation of external auditor► Expectation of regulators
Fraud Trends and Investigations
Page 37
Investigation Challenges
► Maintaining Privilege while keeping all interested partiesinformed
► Electronic discovery► Interview process► Management does not respect the investigation► Auditors do not accept the results► Regulators are not satisfied with results► What to do with the results?
Fraud Trends and Investigations
Page 38
Reporting to Authorities
► Self-report► Proactively cooperate and substantially assist in investigations
► Examples: self-reporting potential violations, translate key documents,produce witnesses from foreign jurisdictions, undertake remedialactions, effective compliance and ethics program
► Possibly avoid appointment of a monitor► Reduction in enforcement penalties
► Receive credits
► Not to self-report► Wait and see► Limited credits received when compared to voluntary self-
disclosure► Harsher penalties
Fraud Trends and Investigations
Page 39
Fraud in the News
► PTC Inc.► February 2016: Two China units of the Massachusetts software company entered
into a non-prosecution agreement and paid a $14.5 million criminal penalty toresolve a DOJ investigation into payments for recreational travel by Chinesegovernment officials. PTC China didn't receive voluntary disclosure credit or fullcooperation credit, the DOJ said.
► PJT Partners► March 2016: Andrew Caspersen, a partner in a New York investment bank, was
arrested for trying to defraud investors of more than $95 million. "Caspersenallegedly…creating fake email addresses, setting up misleading domain names,and inventing fictional financiers.” PJT Partners referred the matter to federalprosecutors after learning facts suggesting improper behavior.
► Braid Group (Holdings) Limited► April 2016: Braid's internal investigation revealed bribery in connection with two
Braid UK freight forwarding contracts in 2012. During the investigation, Braiddiscovered separate bribery offenses regarding a second customer and selfreported the offenses to the Crown Office. The company admitted that it violatedSections 1 (bribery) and 7 (failure to prevent bribery) of the Bribery Act.
Fraud Trends and Investigations
Page 40
Thank YouQuestions?
Fraud Trends and Investigations
Page 41
Contact Information
Fraud Trends and Investigations
► Kathleen Chu, Senior ManagerLos Angeles OfficeEmail: [email protected]: 1 (213) 977-3665
► Jonathan Huynh, Senior ManagerLos Angeles OfficeEmail: [email protected]: 1 (213) 977-1546
EY | Assurance | Tax | Transactions | Advisory
About EY
EY is a global leader in assurance, tax, transactionand advisory services. The insights and qualityservices we deliver help build trust and confidence inthe capital markets and in economies the world over.We develop outstanding leaders who team to deliveron our promises to all of our stakeholders. In sodoing, we play a critical role in building a betterworking world for our people, for our clients and forour communities.
EY refers to the global organization, and may refer toone or more, of the member firms of Ernst & YoungGlobal Limited, each of which is a separate legalentity. Ernst & Young Global Limited, a UK companylimited by guarantee, does not provide services toclients. For more information about our organization,please visit ey.com.
Ernst & Young LLP is a client-serving member firm ofErnst & Young Global Limited operating in the US.
© 2015 Ernst & Young LLP.All Rights Reserved.
ED none
www.ey.com