Fraud almost never happens alone. It usually needs all three sides of one triangle.
A gap in the controls that makes it possible.
A personal or financial reason to do it.
A way to justify it, even temporarily.
An exists to safeguard assets, keep the accounting records reliable, and run the business efficiently. It cannot promise zero fraud — it can only close off opportunity, which is the one side of the triangle a company actually controls.
requires public companies to assess and report on their own controls, and requires their auditors to test that assessment independently.