Could your organisation respond properly when something does not add up?
Fraud and insider harm rarely arrive with a clear label. They surface as an unusual payment, a supplier relationship, missing stock, a data export, a complaint, an access anomaly or a trusted person whose conduct no longer makes sense.
Mid-sized organisations have valuable systems, people and transactions, but often no dedicated integrity or investigations function. This free 20-question readiness check helps leadership test whether it can detect a warning, protect evidence, make fair decisions and act quickly.
Printable PDF. Practical questions. No generic compliance theory.
What the readiness check covers
Twenty questions you can answer from what your organisation could evidence today, not from what policy says.
- 01
Payments and procurement
Supplier creation, invoice approval and payment release — and whether a single person can carry all three without an independent check.
- 02
People, access and insider threats
Permissions matched to current roles, privileged accounts reviewed, and unusual access or exports actually noticed.
- 03
Reporting and early warning
A confidential way to raise a concern, consistent assessment of complaints, and patterns visible to leadership.
- 04
Evidence and investigation readiness
What managers preserve on day one, how records and devices are secured, and when an independent specialist is engaged.
- 05
Executive and board response
Who directs the response when a senior person is implicated, and whether decisions can be reconstructed afterwards.
The risk is not limited to large organisations
Exposure follows how an organisation operates, not how many people it employs. These conditions are common in mid-sized organisations and each one widens the gap between something going wrong and someone noticing.
- Decentralised purchasing across teams or sites
- Contractors and labour hire with system access
- Multiple sites with local discretion
- Valuable stock, equipment or materials
- Significant payroll and allowances
- Sensitive customer, clinical or commercial information
- Rapid growth outpacing controls
- Leadership change and handover gaps
Four pages you can print and work through
Take it into a leadership or board meeting and answer it against a plausible scenario.
20 questions
Grouped into five areas, written for leadership rather than auditors.
Yes / Partly / No scoring
Two points, one point, none — a total out of forty.
Three action steps
What to do first with the answers you are least comfortable with.
Response thresholds
Response ready, exposed under pressure, or high response risk — with what each band means.
Talk the gaps through with us.
A confidential briefing costs nothing. We work with boards and executives on investigations, digital forensics and integrity assurance across Australia.