What should the internal audit function promote to most effectively deter fraud?

An ethical culture is the strongest organization-wide deterrent to fraud because it influences behavior before fraudulent acts occur. Effective fraud deterrence begins with governance, tone at the top, clear expectations, accountability, and consistent consequences for misconduct. Fraud data mining is mainly a detection technique, while fraud risk assessments identify and evaluate exposures. Whistleblowing mechanisms are important because they enable reporting and can increase the likelihood that wrongdoing will be detected, but they do not by themselves create the behavioral environment that discourages fraud. The IIA’s fraud guidance emphasizes that fraud risk management is a shared responsibility and that organizational culture is central to preventing and deterring misconduct. Therefore, promoting a strong ethical culture provides the broadest and most preventive effect across the organization.