FRAUD PREVENTION AND DETECTION
222
were largely similar for public companies to the results of the full sample.
What this shows is that public companies do not show any more promis-
ing results than privately held companies.
Thus, chances are high that individuals tasked with supervisory
functions cannot automatically rely on the proper functioning of a risk
management system as a guard against fraud and noncompliance.
Risk Appetite and Residual Risk
Even if you are a member of the board of directors or serving in another
supervisory role for an organization with a fully implemented enterprise
risk management, does this mean that you can let your guard down?
Consider the issue of residual risk. No matter how you design a risk
management approac