I am a big fan of internal controls and they are imperative to any organisation, big or small. They protect your organisation’s assets, including your most valuable asset, your employees. Recent statistics point to 'insiders' being responsible for over half of reported frauds. In my experience with internal fraud it is not always malicious or planned at the outset. Often the individual involved had every intention of paying the funds back. From that point of view, it is often a trusted, longer term employee.