Once a malicious act has been discovered, the following measures must be taken (unfortunately, some of them are rarely carried out in practice):
- Forensic audit by an interdisciplinary task force
- Termination of the perpetrator’s employment and reporting of the offense to the police
- Termination of the business relationship (for external perpetrators)
- Legal action to try to recover the losses (not forgetting any further legal possibilities, e.g. claiming additional compensation)
- Cause analysis
- Implementation of the necessary corrective measures
Even though these days around 60 percent of cases are, in fact, reported to the police, it is worth noting that perpetrators who are members of upper management are penalized less often than other internal and external offenders.
Yet in order to generate a preventative affect, it is of utmost importance that consequences for the perpetrator be open and visible within a company once a criminal act has been proven. If fraud goes unpunished, the knock-on effect is very often to significantly reduce the level of inhibition of other employees to themselves commit criminal acts.
Even though a relatively low percentage of companies are satisfied with the investigative work of the police and the public prosecution service, it is important to emphasize that their involvement is still vital, if only for the preventative effect. To ensure that a thorough investigation is carried out and that all the necessary remedial action is taken, it is highly recommended that companies use the services of external forensic auditors. In nearly eighty percent of cases, those that have done so rate the outcome as positive.