There are three interrelated elements that enable an individual to commit fraud:
The motive that drives an individual to desire to commit the fraud
The opportunity that enables them to commit the fraud
The ability to rationalize the fraudulent behavior
The vulnerability that any organization has to those capable of overcoming all three of three elements of the "fraud triangle" is fraud risk. Fraud risk can come from sources both internal and external to the organization.
Which path will they take?