I've discussed this type of fraud so often it almost makes me doubt reiterating, yet surely the evidence from both Google and Facebook is that the lessons are not being learnt? If they are being learnt is there a loophole which yet remains unplugged.
- There needs to be a clear separation of roles between Procurement, Finance and receipt of delivery;
- Procurement alone should have the responsibility for adding new vendors to the database of creditors;
- Ensure due diligence in validating creditors bank details;
- Every invoice needs to be cross-matched with a Purchase Order;
- Have a regular spend analysis which flags up where the money is going and use that to establish where there are strategic contract gaps;
- Have contracts on an integrated S2P system or at the very least linked to the P2P;
- Use the P2P matching to manage creditors payments;
- Have a strategic approach to procurement risk management.
Let face it, if it could happen to Google and Facebook, it could being happening to you.
