In my last blog, we discussed a new rating system for fraud risk assessments. I introduced the idea that the residual risk calculation should not be the end point but rather the beginning of your strategy. In this blog, we will discuss rating an internal control strategy.
