"The control environment is the company's culture and attitude towards risk management" is probably one of the most important concepts for the organization, Brittany. Integrity is the backbone of the firm's ethics, however, while the tone is established at the top, if ethics are not instilled from the individual perspective, the opportunity may arise which can leave one open to difficult circumstances. The control procedures in place will help mitigate these risks and occurrences, but it cannot remove the immoral actions of someone seeking to defraud the organization. For this reason, most firms have an ethics committee and policy for each to adhere to. This establishes the position of the firm and ensures that processes and procedures are implemented to limit exposure for opportunities and protect the honest and trustworthy employee.

For smaller organizations, this is even more critical. While trust may be a huge factor, what are some ways that these smaller firms can be proactive in risk management?