“Documentation on Defence’s system from March 2019, relating to a separate matter, documented concerns with the same contractor, including that claims for payment were ‘very high in comparison to the works undertaken’ and that the contractor’s claims may be ‘deliberately excessive,'” the report reads.
PAYROLL & HR CONTROLS (PREVENTING “GHOST” SCHEMES)
Payroll fraud is often the hardest to detect because it “looks” like a normal business expense.
- Segregation of Duties (SoD): The person who adds new employees to the system must not be the same person who approves the monthly pay run.
- Mandatory Vacation Policy: Require all financial and HR staff to take 5–10 consecutive days of leave annually. Fraud often surfaces when the perpetrator isn’t there to “hide” the trail.
- Ghost Employee Audit: Perform a quarterly “Headcount Reconciliation” where managers must physically verify every name on their payroll list exists.
- Self-Pay Blocking: Ensure the payroll software has a hard-coded block preventing administrators from editing their own salary or bank details.