It’s good practice for organisations to have a written Fraud Policy stating a zero-tolerance to fraud, explaining what constitutes fraud and the consequences if an employee commits a fraudulent act.