30
1 Checks and Balances: What Associations Need to Be Safe Avoiding Trouble While Doing Good Paula J. Starr, CPA Director of Finance American Speech-Language-Hearing Association Agenda Group Check What is Fraud? Examples of Fraud What do we need to know? What we can do to reduce Fraud? Questions and Discussion Group Check: How many state associations have no professional staff? Less than 1? 1 to 3? Over 3? Outsource some or all administrative functions?

Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

  • Upload
    others

  • View
    1

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

1

Checks and Balances:What Associations Need

to Be Safe

Avoiding Trouble While DoingGood

Paula J. Starr, CPADirector of Finance

American Speech-Language-HearingAssociation

Agenda

• Group Check

• What is Fraud?

• Examples of Fraud

• What do we need to know?

• What we can do to reduce Fraud?

• Questions and Discussion

Group Check: How many stateassociations have

• no professional staff?

• Less than 1?

• 1 to 3?

• Over 3?

• Outsource some or all administrativefunctions?

Page 2: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

2

Rename presentation:

Checks and Balances:

• Why Associations Need toBe Vigilant!

Miriam-Webster’s Dictionary ofLaw

• Fraud: any act, expression,omission, or concealmentcalculated to deceive another tohis or her disadvantage

The American Dictionary of theEnglish Language

• Fraud: A deception deliberatelypracticed in order to secureunfair or unlawful gain; a pieceof trickery; a swindle; a cheat;one who assumes a false pose;an imposter; a sham

Page 3: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

3

Microsoft Thesaurus

• Fraud: deception, scam, con,scheme, swindle, racket, hoax,smoke and mirrors

Misconduct and Dishonestyincludes but is not limited to:

• theft or other misappropriation of assets

• misstatements and other irregularities incompany records

• Wrongdoing

• forgery or other alteration of documentsmisapplication of funds or assets

• impropriety with respect to reporting financialtransactionsdestruction or disappearance of records orassets

A language has manywords to describe that

which is commonlyfound

• The Intuits have over 150 words for snow, butfew for “car”

• Think how many words are in the Englishlanguage to describe fraud.

Page 4: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

4

Recent For-Profit FraudsHall of Shame

EnronAndrew Fastow Kenneth Lay Jeffrey Skilling

Richard M. Scrushy(HealthSouth)

Page 5: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

5

Bernie Ebbers (WorldCom)

The Not-for-Profit Sector as aTarget of Fraud

• $665 billion in revenue

• 9% of all workers are employedwithin the sector (nearly 12Mpeople)

• 65 M volunteers

Volunteer Boards

• May bring a significant amount ofvaluable experience to theorganization, but often have limitedfinancial backgrounds

• Results in reliance on the executivedirector, controller or accountingsupervisor to make the boardaware of any financial concerns

Page 6: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

6

Why Small Organizations areEspecially Vulnerable to Fraud

• The person responsible for collectingand disbursing funds is also theindividual who provides the financialreports

• Many small organizations raise much oftheir funds in cash. Cash is more easilymisappropriated than checks

Financial Restraints

• It can be very difficult to adequatelysegregate incompatible financialfunctions, such as purchasing andpayments

• supervision and monitoring activities areoften limited

Not-for-Profit Culture

• The culture in a not-for-profit isone of trust

“It won’t come up….”The Carrot Seed, Ruth Krauss

Page 7: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

7

Not-for-Profit Culture, cont.

• This trusting environment iswhat a dishonest employeeexploits

In a 2006 study ofoccupational fraud cases

• 13.9% of all frauds occurred inthe not-for-profit sector

Not-for-Profit Fraud Losses

• Not-for-profits have the second highestmedian loss ($100,000 per fraud occurrence)of the organizations studied

• 45.8% of the frauds occurred in organizationswith fewer than 100 employees, with amedian loss of $98,000.

Report to the Nation on Occupational Fraud and AbuseAssociation of Certified Fraud Examiners

Page 8: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

8

Duration of Fraud Schemes

• Median length of time beforediscovery = 18 months

• More than 13% lasted 5 years ormore

• Only 3.4 % detected within onemonth

The Impact of Fraud mayinclude:

• the actual financial loss incurred

• cost of investigation

• Cost of Litigation

• damage to the reputation of organizationand employees

Impact of Fraud, cont.

• loss of customers

• damaged relationships with contractors andsuppliers

• damaged employee morale

• loss of employees

• negative publicity

Page 9: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

9

Fear of Negative Publicity

• Charities have a strong motivation tokeep stories involving theft,embezzlement, and mismanagement ofcharitable funds off the front pages

• Fear of effecting future contributionsand grants..

Group Check: How manystate associations haveexperienced a fraud?

• How many organizations think you may bevulnerable for a fraud?

• How many state associations are “prettysure” a fraud cannot occur in theirorganizations?

• How many are certain you are “fraud-proof”?

Not-for-Profit Frauds

• Ripped from the headlines

Page 10: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

10

Salvation Army

• The onetime financial manager forthe charity’s Newark office wassentenced to 37 months in prisonfor stealing $385,000 from theSalvation Army

Newark Star-Ledger, November 7, 2006.

Orange County Arts CenterEmbezzler Sentenced

• An employee of the Orange CountyPerforming Arts Center was sentencedto 10 years in prison for embezzling$1.85 million

• The scheme was perpetrated over afive-year period, with the bulk of theproceeds being used to finance theemployee's gambling activities.

LA Times, Mar. 28, 2006.

Red Cross Quietly SettlesCase of a $120,000 Theft

• The Connecticut chapter of theAmerican Red Cross settled for lessthan half the money stolen

• Payment from its insurance company

• Rather than pursue the full amountthrough litigation

• Wanted to avoid the bad publicity thatwould come with litigation.

April 28, 2006

Page 11: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

11

FBI

• More than 2,000 of the internetsites seeking contributions forKatrina relief were fraudulent

Good Judgment

Comes from Experience;

Experience

Comes from Bad JudgmentThe Blind Assassin, Margaret Atwood

David F. Durenberger(United States Senator from

Minnesota 1978 - 1995)

Page 12: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

12

American Speech-Language-Hearing Association

• Yes, it has happened to us too

Asset Misappropriation

• the most common form of not-for-profitfraud (97%); 95% in cash

• Skimming – stolen before it is recorded

• Larceny – stolen after it is recorded

• Fraudulent disbursements – entity paysan expense it does not owe

ASHA Mailroom

• Skimming – taking checks fromenvelopes, changing the payee name

• Mailroom Temps

Page 13: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

13

ASHA Travel Disbursements

• Larceny – stolen after it wasdisbursed

• Accommodated a staffer’s expressedfinancial need

• Allowed exception to travel documentationpolicy

Credit Card and ExpenseReimbursement

• Fraudulent disbursements• Affiliated entity

• Submitted reimbursement requests(with receipts) for amounts alreadycharged to corporate credit card

• Charged personal items to corporatecredit card

And those are just a few ofthe ways of fraud…..

• “Let me count the additional[sic] ways..."

Elizabeth Barrett Browning

Page 14: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

14

#1 Cause of Fraud inNot-for-Profits:

Fraudulent Billing

Billing schemes (submitting or altering aninvoice) causing a check to be written

• fictitious vendor

• collusion with a dishonest vendor

• Payroll - overstated hours or ghostemployees

Fraudulent FinancialStatements

Fraudulent FinancialStatements

• Financial Statement Fraud is leastcommon (5%)

• But it generates the mostsubstantial loss

• Median loss = 30x asset theft

Page 15: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

15

Before we can talk moreabout this

Here is

A Brief Introduction to FinancialStatements

Financial Statements

• A not-for-profit’s financial performanceand status are captured in 3 primarystatements:

• Statement of Activity (Income Statement)

• Statement of Financial Position (BalanceSheet)

• Statement of Cash Flows

Income Statement:

• measures financial performance (over aperiod of time)

• Revenue

• Expense

• Net Income (loss)

Page 16: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

16

Income Statement: Revenue

• Earned as a result of providinggoods or services

• Examples: Dues, Conventionregistration

• Also, Investment Income

Income Statement: Expense

• Incurred as a result ofconsuming goods or usingservices

• Examples: Personnel, Travel,Supplies, Services, Rent, and Utilities

Income Statement:Net Income (loss)

+ Revenue

- Expense

= Net Income (loss)

Page 17: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

17

Balance Sheet:Financial Position

• At a point in time

• Assets

• Liabilities

• Net Assets

Balance Sheet: Assets

• Something of value owned by or owed tothe entity

• Provides future benefit to the entity

• Examples:

• Cash, Accounts Receivable, Prepaidexpenses, Investments, Land, Building,and Equipment

Balance Sheet: Liabilities

• Obligations of the entity

• A promise to pay in the future• Examples: Accounts Payable, Mortgage

Payable

• or, a promise to provide goods or servicesin the future• Examples: Deferred Dues, Deferred

Subscription Revenue

Page 18: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

18

Balance Sheet: Net Assets

+ Assets

- Liabilities

= Net Assets,

aka “Net Worth”

Financial StatementMisstatement (Fraud)

• overstating revenue (largest losses)

• understating liabilities or expenses

• recognizing revenue or expense in the wrongperiod

• reporting assets at more or less than the actualvalue

• failing to disclose significant information

Franklin Raines (Fannie Mae)

Page 19: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

19

Corruption• The wrongful use of influence in a

business transaction to procure benefitsfor one’s self or others at the expense ofone’s employer.

• Bribes - cash is paid to aid in the fraud

• Rewards – improper gifts given/received afterthe fraud

• Extortion – asset obtained by force of thethreat of force

• Conflicts of Interest – one party to thetransaction is not independent

United Way of America

• William Aramony

• Scandal involving fraud, embezzlement,sexual affairs, and executive arrogance

• Unrelated for-profit subsidiariesestablished to be run by his son (relatedparty)

United Way of the NationalCapital Area

• Former CEO Oral Suer

• Defrauded organization of $1.6 M

• Misreported expenses such as billingprivate travel to his company

• Drew retirement benefits while he was stillworking there

Page 20: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

20

United Way of the NationalCapital Area

• The charity initially denied thequestionable practices and oustedemployees and board members whopushed for an investigation

United Way of the NationalCapital Area

• Impact of Negative Publicity

Who is a fraudster?

• Larger not-for-profit employee frauds arecorrelated with collusion (multiple perpetrators),higher salaries, age, longer tenure, educationallevel

• >25% of frauds committed by managers;8.6% executives

• Median fraud case resulted in loss of <$50K,committed by a female with no criminal record,who earned less than $50k per year, had workedfor the org at least 3 years.

Page 21: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

21

Why Do They Do It?

• "Honesty pays, but it don't seem topay enough to suit a lot of people."-

Kin Hubbard

Why Do They Do IT?

• GONE Theory

• Greed

• Opportunity

• Need

• Expectation of not being caught

Why Do They Do It?

• Fraudsters do not expect to be caught -they generally do not view themselves ascriminals.

• Rationalization

• They're not really stealing

• Reassure themselves because they haveevery intention of paying back their ill-gottengains

Page 22: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

22

Why Do They Do IT?

• Financial problems, possibly due tomarriage breakdown or heavy debt load

• Delusions of grandeur

• An inflated ego

• A craving for success

• A compulsion, such as gambling orsubstance abuse problems.

Why Do They Do It?

• In some instances they convince themselvesthat they deserve, and are in fact justified intaking, whatever they can get their hands on

• An unrealized promotion, a salary levelbelow current market rates or expectations,or feelings of being unappreciated may createa fertile environment for this sort ofreasoning.

Warning Signs

• Material related-party transactions

• High turnover in key accountingpositions

• Inadequate segregation of duties

• Personal financial difficulty ofmanagement and/or staff

Page 23: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

23

Warning Signs, cont.

• Management’s reluctance to provide periodicfinancial reports, clear explanations

• Reluctance to take vacations

• Living beyond one's means

• Sudden mood swings or personality changes

• Inability to keep up with regular workresponsibilities

Internal Control Policiesand Procedures

• Goals

• Prevention

• Detection

• Response

Control Environment(tone at the top)

• Information and communication

• Training

• Conflict of interest policy

• Code of ethics policy

• Whistle blowing policy

• Fraud Policy

• Prohibition on personal loans to boardmembers and not-for-profit executives

Page 24: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

24

Risk Assessment

• Management fraud/Managementoverride of controls

• Fidelity Bond (insurance)

• covered organizations recoveredabout 57% of their losses

Control Activities – Deterrents

• Competence of personnel

• clearly defined roles and responsibilities

• Execution in accordance withauthorization

Most Important OrganizationalCharacteristics Where Loss

Was Suffered

• Lack of proper procedures forauthorization of transactions.

• lack of enforcement of clearlines of authority

Page 25: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

25

Controls, cont.

• Segregation of duties

• Background checks on new financialpersonnel

• Background checks on those withresponsibility/authority for purchasing orreceiving assets

Controls, cont.

• Control over receipts – consider lockbox

• Endorsement stamps spelling out fullname of organization

• Outsource payroll

Controls, checks

• Proper and adequate documentation fordisbursements

• Ensure that original documentation ismade void• to prevent against duplicate payments

• Check stock control

Page 26: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

26

Controls, checks

• Check number control

• Examine for pre-numbering of documents

• Use checks in sequential order

• Prevent erasure alterations

Controls, cont.

• Prompt bank reconciliation by other than ARor AP

• Physical safeguards

• Mandatory vacation policies

• Internal and/or Annual independent audits(admittedly impractical for small orgs)

Compensating Controls

• Cross training

• Checks signed by officer

• Positive Pay

Page 27: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

27

Compensating Controls, cont.

• Bank statements sent to officerand opened promptly(also deterrent)

• Bank reconciliations performedpromptly

Compensating Controls, cont.

• Budgets and Budget analysis

• if we didn’t meet expectations,why not?

Response

• internal investigation protocols

• enforcement and accountability

• remedial action protocols

• no action – more and higher fraud

Page 28: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

28

Fiduciary Responsibilities

• ……Fiduciaries havediscretionary authority overanother's money, property, orother assets, and a legal duty toact in a manner that benefits theother person, or organization.

Kilpatrick Stockton LLP

Fiduciary Responsibility ofBoard Members

• Monitoring• What financial statements to ask for

• What do the statements mean?

• Financial analysis

• Ratio analysis

Group Check Revisited

• How many organizations think you maybe vulnerable for a fraud?

• How many state associations are “prettysure” a fraud cannot occur in theirorganizations?

• How many are certain you are “fraud-proof”?

Page 29: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

29

How Can I Start toDeter Fraud?(we don’t have much $)

• Checks signed by Officer

• Bank Statements to Officer

• Periodic financial statement preparationand review

• Budget and budget comparisons

We Want to Invest in MoreControl; What Else Can We

Do?• Lockbox

• Positive pay

• Outsource Payroll

• Separation of responsibilities

Questions and Discussion

Page 30: Checks and Balances: What Associations Need to Be Safe · Billing schemes (submitting or altering an invoice) causing a check to be written • fictitious vendor • collusion with

30

Resources

• Board Sourcehttp://www.boardsource.orgIndependent Sectorhttp://www.independentsector.orgNational Council of not-for-profit Associationshttp://www.ncna.orgGrant Thornton LLPhttp://www.grantthornton.comKPMG Internationalhttp://kpmg.comAmerican Institute of Certified Public Accountantshttp://AICPA.org