CGAP Internal Controls and Fraud Detection in Government 2 — Questions and Answers
Question 1: What is 'procurement fraud' in the government context?
- Overestimating project costs in a budget request
- Illegal conduct in the acquisition process such as bid rigging, kickbacks, or conflicts of interest (Correct answer)
- Paying invoices before goods are received
- Using sole-source contracts without documented justification
Correct answer: Illegal conduct in the acquisition process such as bid rigging, kickbacks, or conflicts of interest
Procurement fraud includes bid rigging, kickbacks, conflicts of interest, false certifications, and collusion that corrupts the integrity of competitive contracting.
Question 2: What is the role of a 'whistleblower protection' program in government fraud prevention?
- To guarantee promotions for employees who report fraud
- To encourage employees to report suspected fraud by protecting them from retaliation (Correct answer)
- To require mandatory reporting of all government expenditures
- To give auditors direct access to confidential employee communications
Correct answer: To encourage employees to report suspected fraud by protecting them from retaliation
Whistleblower protection programs encourage reporting of fraud, waste, and abuse by shielding employees from demotion, termination, harassment, or other retaliation.
Question 3: What is a 'management override of controls,' and why is it a significant fraud risk?
- When IT staff bypass password controls for maintenance purposes
- When senior management uses their authority to circumvent existing controls, enabling fraud that lower-level employees could not commit (Correct answer)
- When auditors waive control testing for low-risk areas
- When an agency director approves emergency sole-source contracts
Correct answer: When senior management uses their authority to circumvent existing controls, enabling fraud that lower-level employees could not commit
Management override allows senior officials to bypass controls that exist to prevent fraud, making it difficult to detect because those with override authority also supervise the very controls they bypass.
Question 4: What is 'data analytics' used for in government fraud detection?
- Generating financial statements automatically
- Analyzing large datasets to identify anomalies, patterns, or outliers indicative of fraud or control weaknesses (Correct answer)
- Automating the audit report writing process
- Tracking auditor time and billing
Correct answer: Analyzing large datasets to identify anomalies, patterns, or outliers indicative of fraud or control weaknesses
Data analytics allows auditors to examine entire populations of transactions rather than samples, flagging duplicate payments, unusual vendors, outlier transactions, and other red flags.
Question 5: Which internal control activity involves reviewing transaction reports after the fact to catch errors or unauthorized activity?
- Preventive control
- Detective control (Correct answer)
- Corrective control
- Directive control
Correct answer: Detective control
Detective controls identify errors, irregularities, or unauthorized transactions after they occur, such as account reconciliations, exception reports, and supervisory reviews.
Question 6: What is 'tone at the top' in the context of government internal control?
- The volume of control documentation maintained by senior management
- The ethical climate and commitment to integrity established by leadership that influences behavior throughout the organization (Correct answer)
- The highest level of risk an agency is willing to accept
- Management's formal written internal control policies
Correct answer: The ethical climate and commitment to integrity established by leadership that influences behavior throughout the organization
Tone at the top reflects leadership's values and commitment to ethical behavior, which directly influences whether employees at all levels act with integrity.
CGAP Internal Controls and Fraud Detection in Government 2
What is 'procurement fraud' in the government context?