Source: https://www.pwc.com.au/consulting/assets/risk-controls/fraud-control-jul08.pdf