Treat fraud as both a cultural and operational risk. Vigilance, internal communication and tone from the top are what close control gaps. Normalise internal and external reporting. Reinforce speak-up ...