8.08

Risk Assessment

Principle 8 - Assess Fraud, Improper Payment, and Information Security Risk

Attribute 8.08 - In addition to fraud, management considers other forms of misconduct that can occur, such as waste and abuse. Waste is the act of using or expending resources carelessly, extravagantly, or to no purpose. Abuse involves behavior that is deficient or improper when compared with behavior that a prudent person would consider reasonable and necessary operational practice given the facts and circumstances. Abuse may include corruption through the misuse of authority or position for personal gain or for the benefit of another. Waste and abuse do not necessarily involve fraud, though fraudulent misrepresentations may be made to conceal such misconduct. The presence of waste and abuse may indicate potential fraud and an environment that is conducive to fraud. Waste and abuse may also impact the achievement of defined objectives.

>>>Navigational Buttons<<<

• Index of Attributes
• Previous Attribute - ?
• Next Attribute - ?