Control gap
Definition
A deficiency in the design or operation of a control that leaves a fraud scheme inadequately mitigated. Design gaps exist where no control addresses a scheme; operating gaps exist where a control is designed correctly but is not being performed as intended.
Related terms
- COSO Fraud Risk Management Guide
- A framework published by the Committee of Sponsoring Organizations of the Treadway Commission that provides a methodology for identifying, assessing, and responding...
- Inherent fraud risk
- The level of fraud risk present in a business process or transaction type before any controls are applied. Scored on likelihood and...
- Residual fraud risk
- The level of fraud risk that remains after existing controls are applied and operating. If residual risk exceeds the organisation's risk appetite...
- Risk appetite
- The amount and type of risk an organisation is willing to accept in pursuit of its objectives, as defined by its governing...
- Scheme mapping
- The step in a fraud risk assessment that connects each identified fraud scheme to the specific business process, sub-process, and control environment...
Explained in
- The Fraud Risk Assessment ProcessA deficiency in the design or operation of a control that leaves a fraud scheme inadequately mitigated. Design gaps exist where no control addresses a scheme;...