Which of the following is not something all levels of employees should do?
a. Understand their role within the internal control framework.
b. Have a basic understanding of fraud and be aware of the red flags.
c. Report suspicions of incidences of fraud.
d. Investigate suspicious activities that they believe may be fraudulent.