Coordination Mechanisms (Fraud and Corruption Control)

Coordination mechanisms are the first of the ten components in the Queensland Crime and Corruption Commission's Fraud and Corruption Control Framework. They comprise the governance structures, documented policies, and operational plans that give an organisation's fraud and corruption control effort clear ownership, authority, and accountability. Without coordination mechanisms, other components of the framework, such as risk management and internal controls, tend to operate as disconnected, ad hoc activities rather than as a coherent system.

1 Policy versus plan

The guide draws a sharp distinction between two documents that are frequently, and mistakenly, treated as interchangeable: the fraud and corruption control Policy and the fraud and corruption control Plan.

A Policy is a short, principle-level statement of why the organisation commits to controlling fraud and corruption, what its objectives are, and what scope of activity and personnel it covers. It is typically stable over long periods and is pitched at a level readable by the whole workforce and, often, the public. A Plan, by contrast, is an operational document. It sets out the specific actions the organisation will take, the timelines for those actions, and who within the organisation owns each action item. Where the Policy might state an objective such as "the organisation will not tolerate corrupt conduct," the Plan translates that into concrete, scheduled tasks, for example a data-matching exercise, a training rollout, or a review of delegations. Conflating the two produces either an operational plan with no stated rationale or a values statement with no mechanism for implementation.

2 The oversight structure

The guide reproduces an oversight structure, sourced from KPMG and presented as Figure 4, that illustrates how coordination mechanisms typically sit within an agency's governance architecture. At the top of the structure is the Chief Executive or governing Board, which holds ultimate accountability for fraud and corruption control. Reporting into that level are three linked functions: the Audit Committee, the Fraud Control Officer, and the Internal Auditor. These three functions feed information and recommendations into two operational outputs: the Fraud Control Plan and the Fraud Risk Assessment.

This structure is designed to ensure that no single function has unchecked authority over fraud control activity. The Internal Auditor provides independent assurance, the Fraud Control Officer provides operational expertise and day-to-day coordination, and the Audit Committee provides governance-level oversight and challenge, with all three ultimately accountable to the Chief Executive or Board. The Fraud Risk Assessment produced through this structure directly informs the organisation's broader corruption risk management process.

3 Key roles

Several roles recur across agencies that implement coordination mechanisms effectively.

The Chief Executive Officer holds ultimate responsibility for ensuring the framework is resourced, implemented, and reviewed, and is typically the officer accountable to Parliament or the governing body for the agency's integrity performance.

The Risk Management Committee is recommended to be chaired by an independent chairperson serving a term of at least three years, to insulate the committee from short-term organisational politics. Membership should include the internal auditor and at least two staff members with relevant risk management qualifications or experience, ensuring the committee has the technical capacity to interrogate risk assessments rather than merely endorsing them.

The Fraud Control Manager or Coordinator is the operational lead for day-to-day fraud and corruption control activity, typically responsible for maintaining the fraud risk register, coordinating training, and liaising with investigators when matters are referred for action under the organisation's investigation processes.

Larger agencies often formalise a Fraud and Corruption Control Committee or dedicated Unit, bringing together representatives from human resources, legal, internal audit, and operational business units to ensure the framework's requirements are embedded across the organisation rather than confined to a single compliance team.

4 The Audit Committee

The Audit Committee plays a pivotal role in the coordination structure, providing independent oversight of the adequacy of the organisation's fraud and corruption controls, financial reporting, and risk management arrangements. Queensland Treasury's Audit Committee Guidelines, at Section 3.3, set out expectations for audit committee composition, independence, and functions in the Queensland public sector context, including the expectation that a majority of members be independent of management and that the committee have direct access to the internal auditor and, where relevant, the external auditor.

Effective coordination mechanisms link the Audit Committee's oversight function directly to the operational work of the Fraud Control Officer and Internal Auditor, so that risk assessments, control weaknesses, and investigation outcomes are escalated to a body with the authority and independence to demand remediation. Where this linkage is absent, agencies can accumulate known control weaknesses that are documented but never acted upon, a failure mode the guide identifies as one of the most common reasons fraud and corruption control frameworks fail in practice.

See also: Fraud and Corruption Control Framework, Internal Controls Against Corruption.

References

1. Crime and Corruption Commission (Queensland), Fraud and Corruption Control: Best Practice Guide, March 2018, ISBN 978-1-876986-86-5.
2. KPMG, oversight structure diagram reproduced as Figure 4 in the CCC Best Practice Guide.
3. Queensland Treasury, Audit Committee Guidelines, Section 3.3.
4. Standards Australia, AS 8001:2008 Fraud and Corruption Control.