Comprehensive and Detailed in Depth Explanation:
A key element of vendor due diligence is ensuring that third-party vendors have robust ethics and compliance programs. This helps align values, mitigate fraud risks, and establish clear expectations. While audits and questionnaires are good practices, they are not always mandatory or feasible before engagement. Moreover, transparency in seeking vendor information (unlike in A) is a norm in legitimate vetting practices.
Reference:Fraud Examiners Manual, 2022, Fraud Prevention and Deterrence, Managing Third-Party Fraud Risks - Section 4.809.

ACFE research highlights that an unwillingness to share duties is one of the most common red flags exhibited by fraud perpetrators. This behavior often indicates a desire to conceal fraudulent activities.Most fraudsters do not have prior convictions, and frauds committed by executives tend to cause higher losses compared to those committed by staff-level employees.
====

According to the ISAs, auditors are required to communicate identified instances of fraud to those charged with governance of the organization. This ensures that the appropriate individuals within the organization are informed and can take necessary corrective actions. Reportingfindings to the media or confronting individuals directly is not considered an appropriate course of action.
====

Responsibilities of the Board of Directors:
* The board is primarily responsible for oversight, governance, and ensuring the organization operates in the best interest of stakeholders. Key responsibilities include:
* Acting as intermediaries between shareholders and management.
* Safeguarding resources and assets.
* Assessing management's strategies and decisions.
Why C is Correct:
* Directing employees is a management responsibility, not a board function. The board focuses on oversight rather than operational execution.
References:
* ACFE governance principles emphasize the separation of oversight and operational roles.