[Fraud Risk Management] Having specialized departments within a company often increases the overall risk ot traud by the organization.

The statement is false. The creation of specialized departments is a foundational element of a strong internal control system designed to decrease the risk of fraud. This organizational structure facilitates the implementation of one of the most critical anti-fraud controls: segregation of duties. By separating incompatible functions—such as authorization, custody of assets, and record-keeping—across different departments or individuals, a company makes it significantly more difficult for a single person to perpetrate and conceal a fraudulent scheme. This specialization is a cornerstone of fraud prevention and deterrence.

The assertion that specialized departments increase fraud risk is incorrect because it fundamentally misunderstands the principles of internal control. A situation where duties are not segregated and specialized, such as one person handling purchasing, receiving, and payment authorization, presents a much higher risk of fraud. While collusion between individuals in different specialized departments can circumvent this control, the structure itself is designed as a primary preventative measure that reduces opportunities for fraud.

1. ACFE. (2023). Fraud Examiners Manual, International Edition. Section 2: Fraud Prevention and Deterrence, "Segregation of Duties," pp. 2.403–2.405. This section explicitly describes segregation of duties as a fundamental concept of internal control where no single employee should be in a position to both commit and conceal fraudulent acts. This control is achieved by separating tasks among different people and, by extension, different departments.

2. Committee of Sponsoring Organizations of the Treadway Commission (COSO). (2013). Internal Control—Integrated Framework: Framework and Appendices. Principle 10: "The organization selects and develops control activities that contribute to the mitigation of risks..." The commentary on this principle identifies segregation of duties as a key type of control activity. It states, "Segregation of duties is typically built into the selection and development of control activities. Where segregation of duties is not practical, the organization selects and develops alternative control activities." This confirms its role in risk mitigation.

3. Singleton, T. W., & Singleton, A. J. (2010). Fraud Auditing and Forensic Accounting (4th ed.). John Wiley & Sons. Chapter 4, "Internal Control," explains that a key element of the control environment is an organization's structure. A well-designed structure provides a framework for planning, executing, controlling, and monitoring activities. This includes the separation of duties, which is described as a "widely used and well-known internal control" (p. 85).