“Fraud, cyber, and strategy do not fail separately; they collapse together when the board asks the wrong question.” What if the biggest risk in your organisation is not fraud, not cyber, not strategy, but the fact that you treat them …
The case looked ordinary when it landed on my desk. A mid-level finance officer, quiet, reliable, known for completing what they start, had been flagged after a routine audit picked up small inconsistencies in transaction logs. Nothing dramatic, just numbers …
It started with a reconciliation difference that was too small to trigger escalation and too persistent to ignore. A financial institution closed its weekly books with a variance of just under UGX 18 million spread across mobile money collections and …
It was Tuesday morning in Kampala, 08:17 a.m., when a mid-sized financial services firm opened for business as usual, staff logging into their systems, coffee cups still warm, unaware that somewhere across the city, a young man in a dimly …
The incident began in early 2024 within the operational accounts of an international non-governmental organisation headquartered in Kampala. Funds earmarked for water, sanitation, and health projects were diverted systematically over several months. Donor reports showed deliverables vastly out of alignment …
A young loans officer, slightly built, always neatly dressed, was outperforming everyone. His loan book was growing at a pace that made management proud and uncomfortable at the same time. The numbers looked clean, repayments, at least on paper, and …
It started quietly on a Thursday evening. A mid-sized private hospital, known for its efficient outpatient services, reported nothing unusual. Systems were running, patients were being attended to, and bills were being issued. But somewhere outside the hospital walls, a …
How many of you have approved something in the last 30 days, not because you were fully convinced but because it looked normal? Take a moment. Be honest with yourself. Because that is exactly how fraud begins, not with criminals …
It started as a reconciliation gap that refused to behave. Not large enough to trigger panic, but not small enough to ignore. A mid-tier institution in Kampala noticed that supplier payments cleared cleanly in the system, yet the supporting trail …
Last year, during a routine advisory assignment, I walked into a SACCO that believed it had strong cybersecurity. The board had approved a budget for antivirus software. Staff attended annual security training. The IT manager proudly showed me a firewall …