Addressing the risk of fraud (CAS 240)