This study aims to manage fraud risks related to asset misappropriation or other frauds with limited resources, aligned with the typical internal audit structure in the mining industry. DOID, a coal contractor and mining service provider, is part of the mining industry. Fraud risk management generally follows the internal control framework issued by COSO, which includes 5 components: control environment, risk assessment, control activities, information and communication, and monitoring activities. Currently, DOID focuses solely on control activities, where fraud risk management handles fraud cases directly based on reports received through fraud reporting channels. This research uses a qualitative approach with in-depth interviews of 5 informants who possess experience and expertise in fraud risk management within their organizations. The interview results, analyzed through axial coding, reveal that risk assessment is the most significant component in mitigating fraud risks, followed by monitoring activities. While control environment and information and communication are essential, they have less impact compared to the previous 2 components. To reduce reliance on control activities, effective integration of risk assessment and monitoring activities is necessary. Based on these findings, the study recommends that organizations identify high fraud risks (fraud risk assessment) and implement regular monitoring activities as preventive measures. This improvement aims to reduce control activities, enabling more efficient fraud case handling, considering that not all internal control components can be implemented simultaneously, ideally, or comprehensively within an organization.
Copyrights © 2025