Certified Fraud Examiner (CFE) Fraud Prevention and Deterrence Syllabus

Fraud Prevention and Deterrence syllabus — full chapter and topic list

Expand any chapter to see its topics and sub-topics. This is the whole examinable outline for Fraud Prevention and Deterrence in Certified Fraud Examiner (CFE), not a summary of it.

1. 1

   Understanding Criminal and Fraudulent Behavior

   3 topics

   • Theories of Crime Causation
     • Classical and behavioral criminology
     • Differential association and routine activity theory
   • The Fraud Triangle and the Fraud Diamond
     • Capability as a fourth element
     • Rationalization patterns of offenders
   • Profiles of Fraud Offenders
     • The occupational fraudster profile
     • Behavioral red flags of perpetrators
2. 2

   Governance, Controls, and Audit Responsibilities

   3 topics

   • Corporate Governance and the Control Environment
     • Board and audit committee oversight
     • Setting the tone at the top
   • Internal Control Frameworks
     • COSO internal control framework
     • Control activities and segregation of duties
     • Anti-fraud and entity-level controls
   • Management's and Auditors' Fraud Responsibilities
     • Relevant auditing standards on fraud
     • Limitations of audits in detecting fraud
3. 3

   Fraud Risk Assessment and Management

   3 topics

   • Conducting a Fraud Risk Assessment
     • Identifying and rating fraud risks
     • Mapping risks to existing controls
   • Fraud Risk Management Programs
     • The fraud risk management framework
     • Roles, responsibilities, and accountability
   • Proactive Fraud Detection Methods
     • Hotlines and reporting mechanisms
     • Data-driven proactive monitoring
4. 4

   Ethics and Professional Conduct

   3 topics

   • The CFE Code of Professional Ethics
     • Integrity, objectivity, and confidentiality
     • Avoiding conflicts of interest
   • CFE Code of Professional Standards
     • Standards for engagements and reporting
     • Professional competence and due care
   • Resolving Ethical Dilemmas
     • Ethical decision-making frameworks
     • Independence and opinion limitations
5. 5

   Building an Anti-Fraud Culture and Program

   3 topics

   • Codes of Conduct and Ethics Training
     • Communicating expectations to employees
     • Fraud awareness training programs
   • Pre-Employment Screening and Vendor Due Diligence
   • Measuring and Sustaining Program Effectiveness
     • Monitoring, testing, and continuous improvement
     • Benchmarking against the Report to the Nations

Fraud Prevention and Deterrence flashcards for Certified Fraud Examiner (CFE)

22 of 51 cards from the Fraud Prevention and Deterrence deck — real questions with worked answers.

1. What does the differential association theory (Edwin Sutherland) propose about criminal behavior?

   Crime is learned through interaction with others; people learn the techniques, motives, and rationalizations for committing crime when exposure to definitions favorable to law violation outweighs unfavorable ones.

2. What is the central premise of Donald Cressey's research that led to the Fraud Triangle?

   Trusted persons become trust violators when they have a non-shareable financial problem, perceive an opportunity to secretly resolve it by violating their trust, and can rationalize the act as consistent with their self-image as trustworthy.

3. Name the three elements of the Fraud Triangle.

   Pressure (perceived non-shareable financial need/motivation), Opportunity (perceived ability to commit and conceal the fraud), and Rationalization (justifying the act to remain consistent with one's self-image).

4. How does the Fraud Diamond differ from the Fraud Triangle?

   The Fraud Diamond (Wolfe and Hermanson) adds a fourth element, Capability — the personal traits and abilities (position, intelligence, ego, coercion skills, stress tolerance) that allow a person to actually carry out the fraud.

5. Of the Fraud Triangle's three elements, which one can management most directly control or reduce?

   Opportunity — through strong internal controls, segregation of duties, oversight, and monitoring. Pressure and rationalization reside largely within the individual.

6. What is the 'MICE' acronym, an expansion of fraud motivations beyond pressure?

   Money, Ideology, Coercion, and Ego (or Entitlement) — broader motivators that may drive fraud beyond a non-shareable financial need.

7. According to ACFE research, how do most occupational fraud offenders' criminal histories appear?

   The vast majority are first-time offenders with no prior fraud charges or convictions; most have never been punished or terminated for fraud-related conduct.

8. What relationship does ACFE research show between an occupational fraudster's tenure/position and the size of losses?

   Losses rise with the perpetrator's level of authority — owners/executives cause the largest median losses, then managers, then employees; longer tenure also correlates with larger losses.

9. What are the most common behavioral red flags exhibited by occupational fraud perpetrators?

   Living beyond one's means and financial difficulties are the two most common; others include unusually close vendor/customer ties, control issues/unwillingness to share duties, and a 'wheeler-dealer' attitude.

10. Define corporate governance.

    The system of rules, practices, relationships, and processes by which a company is directed and controlled, balancing the interests of stakeholders such as shareholders, management, the board, employees, and the public.

11. What is the 'control environment' and why is it foundational?

    It is the set of standards, processes, and structures (integrity, ethical values, board oversight, organizational structure, competence, accountability) that provide the foundation for all other internal control components; it sets the 'tone at the top.'

12. What does 'tone at the top' mean and why does it matter for fraud deterrence?

    It is the ethical atmosphere created by the organization's leadership; a strong ethical tone signals that fraud is unacceptable, while a poor tone undermines all controls regardless of their design.

13. What are the five components of the COSO Internal Control–Integrated Framework?

    Control Environment, Risk Assessment, Control Activities, Information and Communication, and Monitoring Activities.

14. How many principles does the 2013 COSO Internal Control framework contain, and how are they organized?

    17 principles, distributed across the five components, that must be present and functioning for the system of internal control to be effective.

15. What are the three categories of objectives addressed by the COSO Internal Control framework?

    Operations objectives, Reporting objectives (internal and external, financial and non-financial), and Compliance objectives.

16. What are the three lines (Three Lines Model) of fraud risk management responsibility?

    First line: operational management (owns and manages risk). Second line: risk management/compliance functions (oversee and monitor). Third line: internal audit (provides independent assurance).

17. Distinguish preventive controls from detective controls.

    Preventive controls stop fraud/errors before they occur (e.g., segregation of duties, authorizations, physical access controls); detective controls identify fraud/errors that have already occurred (e.g., reconciliations, audits, surprise counts).

18. What is segregation of duties and which functions should be separated?

    Dividing responsibilities so no single person controls a transaction end to end. Separate authorization, custody of assets, recordkeeping, and reconciliation so that committing and concealing fraud requires collusion.

19. Under the SEC/COSO view, who is primarily responsible for preventing and detecting fraud in an organization?

    Management, with oversight by those charged with governance (the board/audit committee). Management designs and maintains internal controls; the board oversees.

20. What is the external auditor's responsibility regarding fraud under auditing standards (e.g., SAS 99 / AU-C 240)?

    To obtain reasonable assurance that financial statements are free of material misstatement whether caused by error or fraud — including maintaining professional skepticism, performing fraud risk assessment, and addressing management override of controls.

21. Distinguish the two types of misstatements auditors consider under AU-C 240.

    Fraudulent financial reporting (intentional misstatements/omissions to deceive financial statement users) and misappropriation of assets (theft of an entity's assets, often called defalcation).

22. Why is management override of controls a key fraud concern for auditors?

    Because management is uniquely able to bypass otherwise effective controls (e.g., through fraudulent journal entries or estimates); auditors must design procedures specifically to address this risk in every audit.

See more Fraud Prevention and Deterrence flashcards →

Planning Fraud Prevention and Deterrence for Certified Fraud Examiner (CFE)

Fraud Prevention and Deterrence (Certified Fraud Examiner (CFE)) FAQ