EXHIBIT 101 / THE HANDBOOK
EXHIBIT#38HIGH
Payroll & LaborComposite score: 68/100

Mandatory Vacation & Termination Access Control Failure

A "vacation" where the manager still logs in remotely never actually tests anything — whatever scheme they're hiding stays hidden. And revoking only a departed employee's own login misses the shared password they also knew, which is exactly how settings get deleted and operations paralyzed after they're gone.

Risk Scores

Frequency70
Financial Loss80
Detection Difficulty60
Prevention Ease80
Composite Score68/100

Perpetrator Roles

IT / TechManagerAccounting

Affected Formats

QSRFast CasualFine Dine-inCloud Kitchen

Detection Difficulty

Moderately difficult. Requires consistent audit procedures and data analysis to surface.

HOW IT WORKS
Order placed online
Fraudulent payment used
Order fulfilled and delivered
Chargeback filed
Restaurant absorbs loss
Handbook Chapter · F-038

Online Order Manipulation

Full chapter with identity card, real examples, warning signs, detection and prevention guidance.

Exhibit AI Detection

AI-Powered Detection Design

Cross-reference system access logs directly against HR-recorded vacation and departure dates.

Prevention Guidance

Audit Controls

Standard audit procedures are effective. Regular cash counts and reconciliation catch this scheme early.

Technology

Automated POS monitoring, real-time exception reporting, and AI-driven anomaly detection significantly reduce exposure.

Culture & Training

Staff awareness programs, anonymous reporting channels, and clear consequence policies deter opportunistic fraud.

Seen this in your operation?

Submit an anonymous report to help build the next edition of the handbook.

Report This Scheme