Art was a custodial supervisor for a large school district. The district was supposed to employ between 30 and 40 regular custodians, as well as 3 to 4 substitute custodians to fill in when regular custodians were missing. Instead, in addition to the regular custodians, Art "hired" 77 substitutes. In fact, almost none of these people worked for the district. Instead, Art submitted time cards for these people, collected their checks at the district office and personally distributed the checks to the "employees." If a substitute's check was for $1,200, the person would cash the check, keep $200 and pay Art $1,000.

What controls are missing and what could be done to prevent?