• Section 1 - Purpose
• Scope
• Section 2 - Policy
• Section 3 - Procedure
• Responsibilities and Required Actions
• Section 4 - Guidelines
• Section 5 - Definitions

Section 1 - Purpose

(1) This Procedure outlines the activities undertaken to prevent and respond to fraud and corruption.

Scope

(2) This Procedure applies to all staff, students, customers, contractors, external service providers and Controlled Entities of Macquarie University.

Section 2 - Policy

(3) Refer to the Fraud and Corruption Control Policy.

Section 3 - Procedure

Responsibilities and Required Actions

(4) This Procedure requires actions by the following:

1. Director;
2. Executive Dean / Dean;
3. Human Resources Officer;
4. Fraud Control Officer;
5. Fraud Investigation Officer;
6. Head of Office / Head of Department;
7. Manager;
8. Staff member;
9. The Executive; and
10. Vice-Chancellor.

(5) This Procedure includes the following activities:

1. Develop and Implement Plans and Policies;
2. Comply with Controls, Policies and Procedures;
3. Establish Internal Controls;
4. Review Internal Controls;
5. Review Effectiveness of Risk Assessment Strategies;
6. Report Suspected Fraud and Corruption;
7. Determine Whether to Investigate;
8. Select a Fraud Investigation Officer;
9. Investigate Allegations;
10. Report to Relevant External Agencies;
11. Take Annual Leave; and
12. Screen Candidates.

Vice-Chancellor

(6) Ensure that appropriate and cost-effective internal control systems are in place to prevent / reduce / detect fraudulent and corrupt activities.

(7) Delegate to the Vice-President, Finance and Resources the role of Fraud Control Officer.

Staff Member

Comply with Controls, Policies and Procedures

(8) You are required to:

1. comply with all controls, policies, procedures, the Staff Code of Conduct and the Macquarie University Ethics Statement;
2. identify items at risk in your area and devise and implement controls to minimise fraud and corruption; and
3. assist with any enquiries and investigations of fraudulent or corrupt activity.

Report Suspected Fraud and Corruption

(9) If you become aware of fraudulent or corrupt behavior, you have a duty under legislation to immediately report such activity. Discuss the activity with your supervisor. Any such allegations will be treated in strict confidence and investigated as appropriate.

(10) If you do not consider it appropriate to disclose an allegation of suspected corrupt conduct to your supervisor, you should make disclosure to one of the following:

1. Executive Dean;
2. Head of Office;
3. Fraud Control Officer;
4. Protected Disclosures Co-ordinator;
5. Deputy Vice-Chancellor;
6. Vice-President, Finance and Resources; or
7. Vice-Chancellor.

(11) You may report by telephone, in writing or in person. The Protected Disclosures Act 1994 offers protection for public officials who make disclosures concerning corrupt conduct, maladministration or serious or substantial waste of public money.

(12) If you are concerned about publicly approaching any of the above people, you can request a meeting with the relevant officer in a discreet location away from the workplace.

Anonymous Disclosure

(13) If you wish to remain anonymous, you may make anonymous disclosure. However, you are encouraged not to make anonymous complaints as they may be difficult to pursue if further information is required. Anonymity will prevent the University reporting back to any complainant. Although the University does not encourage anonymous reporting, it recognises that there may be useful information in the University community that can assist in preventing and / or detecting fraud and corruption.

Take Annual Leave

(14) One of the indicators in an organisation that fraud or corruption may be occurring is a reluctance to take regular and uninterrupted annual leave. The Leave - Annual Leave Policy takes this into account and encourages staff to take regular annual leave.

(15) The Audit and Risk Committee, as an audit precaution, requires staff involved in financial management to:

1. take one period of annual leave of at least two (2) weeks’ duration each year; and
2. take a period of two (2) weeks’ annual leave in each year and take no more than 10 single annual leave days each year, if staff are involved in the handling of money.

Fraud Control Officer

Develop and Implement Plans and Policies

(16) Develop and maintain the Fraud and Corruption Control Policy and this Procedure.

(17) Prepare and implement a Fraud and Corruption Prevention and Response Strategy.

(18) Co-ordinate compliance with the annual review of fraud mitigation strategies.

(19) Examine results from Internal Control Reviews and make recommendations for their improvement.

Determine Whether to Investigate

(20) When a suspected fraudulent or corrupt activity is reported to you, determine who should be responsible for overseeing an investigation according to the nature and scope of the allegation. Depending upon the area of responsibility within the University, determine which one of the following will make the decision to investigate:

1. Vice-Chancellor;
2. Deputy Vice-Chancellor (Academic);
3. Vice-President, Finance and Resources; or
4. Deputy Vice-Chancellor (Research).

(21) Determine whether to investigate anonymous disclosures of serious allegations on the basis of if they are supported by sufficient evidence to justify an investigation. In making a determination, give regard to the:

1. seriousness of the issue raised;
2. credibility of the complaint;
3. evidence provided;
4. prospects for further investigation; and
5. fairness to the person being investigated.

Select a Fraud Investigation Officer

(22) Decide, according to the nature of the suspected fraud, whether the investigation will be done internally or by an external investigator, and determine the required resources to assist with the investigation.

(23) Internal Investigations:

1. Determine the responsibility for the investigation according to the nature and scope of the allegations of fraud or corruption. Assign an internal Fraud Investigation Officer.

(24) External Investigations:

1. There may be occasions when you require the use of external investigators to investigate matters arising from allegations of fraud and corruption. If selecting an external investigative service as the Fraud Investigation Officer, give due consideration to the following issues:
   1. depth of experience, including the outcomes of past work;
   2. relevant levels of competency;
   3. solvency;
   4. potential for conflict of interest where the external service provider is a client of, or provides other services to the University; and
   5. commitment by the contractor to abide by the Information Privacy Principles under the Privacy Act 1988 (Cwlth) as amended by the Privacy Amendment (Private Sector) Act 2000 (Cwlth).

Report to Relevant External Agencies

(25) Refer to, or notify, any relevant external agencies of any allegations of fraudulent or corrupt behaviour that have been identified by the University.

(26) Report to another University:

1. Where an investigation discloses fraud or corruption involving another University's activities or programs, report the matter to that University.

(27) Report to the Police:

1. Criminal prosecutions are vital in deterring future instances of fraud and corruption and for educating staff about the seriousness of fraud and corruption. You must refer information to the Police if the preliminary investigation of a matter indicates that a criminal offence may have been committed by an individual. Where a matter involves offences under NSW State law, refer the matter to the NSW Police for investigation and possible prosecution, in accordance with Section 316 of the Crimes Act 1900 (NSW).
2. When you refer a matter to the NSW Police, you should provide as a minimum:
   1. a summary of the allegations(s);
   2. a list of suspected offender(s) (where known);
   3. a chronological account of the facts giving rise to the allegation(s);
   4. details of witnesses or potential witnesses;
   5. copies of relevant documents;
   6. copies of all records of interviews, statements, depositions or affidavits obtained including any written statement made by the subject of the investigation; and
   7. a nominated contact officer.
3. Report to the Independent Commission Against Corruption (ICAC):
   1. Perform the role of compliance officer in accordance with Section 11(2) of the Independent Commission Against Corruption Act 1988 (NSW).
   2. Report to ICAC any matter that you ‘suspect on reasonable grounds concerns, or may concern, corrupt conduct’. The words ‘suspect on reasonable grounds’ mean there is a real possibility that corrupt conduct is, or may be, involved.
   3. You must report corrupt conduct even if the corrupt conduct did not involve a staff member of the University.
   4. You must provide the following information when making a report of alleged corrupt conduct:
      1. a complete description of the allegations;
      2. the name and position of any public official/s alleged to be involved;
      3. the name and role of any other person/s relevant to the matter;
      4. the dates and / or time frames in which the alleged conduct occurred;
      5. an indication as to whether the conduct appears to be a one-off event or part of a wider pattern or scheme;
      6. the date the allegation was made or the date you became aware of the conduct;
      7. what the University has done about the suspected conduct, including notification to any other agency (for example, the Police or the Ombudsman);
      8. what further action is proposed by the University;
      9. approximate amount of money (if any) involved;
      10. any other indicators of seriousness; and
      11. any other information deemed relevant to the matter.

Fraud Investigation Officer

Investigate Allegations

(28) When directed by the Fraud Control Officer, investigate allegations of fraud or corruption as follows:

1. define the subject matter of the investigation;
2. develop an investigation plan;
3. determine what questions need to be answered, what information is required to answer those questions and the best way to obtain that information; and
4. structure the investigation to allow the gathering of sufficient reliable information to enable the issue to be properly addressed by proving or disproving matters relevant to the allegation.

(29) Investigative activities can include, but are not limited to:

1. interviewing relevant witnesses, both internal and external to the University, including obtaining statements;
2. reviewing and collating documentary evidence;
3. forensic examination of computer systems;
4. examining telephone records;
5. enquiring with banks and other financial institutions, subject to obtaining appropriate court orders;
6. enquiring with other third parties;
7. searching and seizing data;
8. tracing funds / assets and goods;
9. preparing a brief of evidence;
10. liaising with the Police or other law enforcement body;
11. interviewing persons suspected of fraud or corruption; and
12. preparing reports.

The Executive / Executive Dean / Dean / Director / Head of Office / Head of Department / Manager

Establish Internal Controls

(30) You are responsible for the prevention and detection of fraud and corruption within your area of responsibility and for the implementation and operation of controls that minimise fraudulent and corrupt activities.

(31) Note that there is a strong link between the incidence of fraud and corruption and internal control systems that either allow an incident to occur or fail to detect it after it occurred.

(32) Establish and maintain adequate internal controls for the security and accountability of University resources and to prevent / reduce the opportunity for fraud and corruption to occur. These include:

1. use of suitable recruitment procedures;
2. segregating duties;
3. identifying and declaring conflict of interest or stated interests;
4. security of physical and information systems;
5. supervision and internal checks;
6. approvals within delegated authority;
7. reconciliations;
8. budget control;
9. regular review of management reports; and
10. clear reporting lines.

(33) Implement mechanisms to:

1. promote staff awareness of the Staff Code of Conduct, Macquarie University Ethics Statement and the Fraud and Corruption Control Policy and this Procedure;
2. educate staff about fraud prevention and detection;
3. promote a positive and appropriate attitude towards compliance with laws, rules, policies and regulations;
4. assess the risk of fraudulent and corrupt behaviour through awareness of the risks and exposures inherent in your area of responsibility;
5. respond promptly to all allegations or indications of fraudulent or corrupt acts; and
6. perform initial enquiries of any complaints of fraudulent and corrupt activity and assist with any further investigations.

Review Internal Controls

(34) Evaluate internal controls, requesting support from either the Internal Auditor or the Fraud Control Officer as needed.

(35) Refer reports and recommendations regarding internal control weaknesses to the Fraud Control Officer.

(36) Where the Fraud Control Officer recommends improvements, implement these as soon as possible.

Review Effectiveness Of Risk Assessment Strategies

(37) Review the results of fraud risk assessments at least annually to ensure that strategies developed during the course of the most recent fraud risk assessment are reviewed for effectiveness and amended where necessary.

Human Resources Officer

Screen Candidates

(38) Many employees who commit fraud against their employer are found subsequently to have had a history of dishonesty with previous employers.

(39) During recruitment procedures, include any or all of the following strategies, depending on the requirements and responsibility of the position:

1. avoid recruitment that could potentially lead to, or be perceived as involving, conflict of interest;
2. verify identity from a birth certificate or driver’s licence;
3. contact referees;
4. reference check with the most recent employers;
5. consider gaps in employment and the reasons for those gaps;
6. verify transcripts, qualifications, publications and other certification or documentation; and
7. perform criminal background checks where the position warrants it.

(40) You will need the express permission of the candidate to carry out this pre-employment screening.

Section 4 - Guidelines

(41) Refer to the Fraud and Corruption Prevention Guideline.

Section 5 - Definitions

(42) Commonly defined terms are located in the University Glossary. Definitions specific to this Procedure are contained in the accompanying Fraud and Corruption Control Policy.