Skip to main content

4.3.3 Third Party Fraud Awareness

No: 000044021528 Date(g): 11/10/2022 | Date(h): 16/3/1444 Status: In-Force
Principle 
 
Member Organisations should define and deliver a proportionate fraud awareness programme to third parties outlining expectations in respect of Counter-Fraud activity and prompt reporting of suspicious activity. 
 
Control Requirements 
 
a.Third party fraud awareness requirements should be documented and agreed in contractual arrangements where applicable.
 
b.Member Organisations should provide risk-based fraud awareness materials to third parties at the outset of a relationship and refresh periodically as required.
 
c.Third party fraud awareness requirements should as a minimum include:
 
 1.The creation of a positive Counter-Fraud culture.
 
 2.Third party roles and responsibilities regarding fraud.
 
 3.Tailored messaging aligned to the fraud risks of the services provided by the third party.
 
 4.Reporting mechanisms available to the third party.