external audits should not be relied upon as an organization's primary fraud detection method. such audit were the most commonly implemented control in our study; however, they detected only 3% of the frauds reported to us, and they ranked poorly in limiting fraud losses.