Its clear from the research that fraud risks and fraudsters are persistent and pervasive. Almost every business is exposed in some way. Based on your reading thus far, what are the most important elements or controls to mitigate these risks? What are the top 1 or 2 things that every business should do?

Expand on your answer by answering one or more of the following follow up questions:

• If this element or control is so important, why isnt it consistently implemented for every business?
• Is the implementation of these controls and processes different for small companies and large companies?
• Is it different in the US and globally?
• What needs to happen for business people to make fraud risk management a priority?
• For those of you who have significant work experience, what are the real world obstacles and impediments to implementing these processes?
• If we know what to do, why havent we eliminated fraud?