Fraud Risk & Internal Control Training

Fraud does not announce itself. It hides inside weak approval chains, unreviewed reconciliations, and staff who assume someone else is checking. This one-day programme equips finance, audit, risk, procurement and management teams to recognise fraud risk, apply internal control fundamentals, and understand the corporate liability and anti-corruption exposure Malaysian organisations face under Section 17A of the MACC Act 2009.

The course connects fraud risk to the control environment that either prevents it or does not, and is aimed at finance, audit, risk and operations staff together. Participants work through the fraud triangle applied to real cases, control design and the specific weaknesses fraudsters exploit, and the detection routines that catch what prevention misses.

Participants leave with a practical roadmap to review their organisation's anti-corruption controls against the T.R.U.S.T. adequate procedures principles, alongside a control design template and a red flag checklist they can put to work the same week.

HRD Corp Training Provider Malaysia HRD Corp Claimable

Programme Agenda

01

Registration

8:45 to 9:00 AM
02

Module 1: The Fraud Landscape in Malaysia

9:00 to 10:00 AM
  • Fraud triangle, pressure, opportunity, rationalisation
  • Common typologies, asset misappropriation, procurement fraud, payroll fraud, financial statement fraud
  • Cost of fraud, ACFE Report to the Nations benchmark figures
  • Case snapshot, anonymised Malaysian corporate fraud cases
03

Morning Break

10:00 to 10:15 AM
04

Module 2: Legal & Regulatory Exposure

10:15 to 11:30 AM
  • Section 17A of the MACC Act 2009, corporate strict liability and the adequate procedures defence
  • The T.R.U.S.T. principles: Top Level Commitment, Risk Assessment, Undertake Control Measures, Systematic Review, Monitoring and Enforcement, Training and Communication
  • Director duties and liability exposure under the Companies Act 2016
  • Whistleblower Protection Act 2010 overview
05

Module 3: Internal Control Fundamentals

11:30 AM to 12:45 PM
  • COSO Internal Control-Integrated Framework, five components
  • Segregation of duties in practice
  • Approval matrices and authorisation limits
  • Reconciliation and review controls
  • Exercise, control gap identification on a procure-to-pay process
06

Lunch Break

12:45 to 1:45 PM
07

Module 4: Red Flags & Detection

1:45 to 3:00 PM
  • Behavioural red flags
  • Transactional red flags, ghost vendors, split purchases, duplicate payments, round-tripping
  • Basic exception reporting and data analytics awareness
  • Exercise, spot the red flag, group case scenarios
08

Afternoon Break

3:00 to 3:15 PM
09

Module 5: Response, Reporting & Whistleblowing

3:15 to 4:15 PM
  • Escalation protocol when fraud is suspected
  • Evidence preservation, do's and don'ts
  • Whistleblowing channel design
  • Understanding when and how matters may be escalated to MACC, police, management, legal advisers, or external auditors
10

Module 6: Building Your Adequate Procedures Roadmap

4:15 to 5:00 PM
  • Self-assessment against the T.R.U.S.T. principles
  • Action planning template
  • Q&A and close

Learning Outcomes

By the end of this programme, participants will be able to:

  • Identify the fraud triangle and common fraud typologies affecting Malaysian organisations
  • Explain Section 17A corporate liability and the adequate procedures defence
  • Apply the COSO Internal Control-Integrated Framework to identify control gaps
  • Recognise behavioural and transactional red flags
  • Design basic controls, segregation of duties, approval matrices, and reconciliation checks
  • Understand whistleblowing mechanisms under the Whistleblower Protection Act 2010
  • Respond correctly when fraud is suspected

Who Should Attend

Finance and accounts teams, internal audit, risk and compliance officers, procurement, department heads with approval authority, and company secretaries.

Training Mode   Physical, Online, or Hybrid

HRD Corp   Claimable, subject to programme registration and applicable HRD Corp requirements

Level   Intermediate

Duration   1 Day (6.5 Training Hours)

Training Hours   9:00 AM to 5:00 PM

Venue   Online, or in-house at the client's premises

Certificate   Certificate of Completion, awarded upon full attendance

Inclusions   Training materials, case study workbook, control design templates, red flag checklist, and Certificate of Completion

Enquiries   Contact us for a quotation or to discuss scheduling

Frequently Asked Questions

Finance and accounts teams, internal audit, risk and compliance officers, procurement, department heads with approval authority, and company secretaries. Anyone who approves, records or reviews a transaction is in scope.

No. The level is intermediate and the material is built around worked examples rather than standards text, so procurement, operations and management staff follow it as easily as finance and internal audit do.

Yes. Module 2 covers Section 17A corporate strict liability and the adequate procedures defence in full, alongside the T.R.U.S.T. principles, director duties under the Companies Act 2016, and the Whistleblower Protection Act 2010. Module 6 ends on a self-assessment of your own controls against T.R.U.S.T.

One day, 6.5 training hours, running 9:00 AM to 5:00 PM with registration from 8:45 AM. It is delivered as a closed group session, so the schedule can be adjusted to fit your team's working hours.

Yes. It runs online over your preferred platform, or in-house at your premises anywhere in Malaysia.

Training materials, a case study workbook, control design templates, a red flag checklist, and a Certificate of Completion. Module 6 also produces an action plan scored against the T.R.U.S.T. adequate procedures principles.

Yes. This course is also available through the Orbix LMS and e-learning platform, where participants work through the material on their own schedule and device rather than attending one fixed session. A knowledge assessment and certificate on completion work the same way as the instructor-led session.

Minimum 2 participants for an in-house or live online session. With only 1 participant, we deliver it as a one-to-one online session instead.

Yes. Many clients pair this course with our one-day team building and high-performing teams programme on the same engagement, so the budget and the day cover both.

Yes. Participants can follow up by email with questions that come up while applying what they learned, and we will point you to the right template, checklist or framework reference even after the session is over.

Training content is for general educational purposes and does not constitute legal advice. Specific legal or compliance matters should be referred to appropriately qualified professionals.