While a segregation-of-duties policy primarily mitigates the risk of a single individual perpetrating fraud, it introduces the increased risk of collusion between parties. Collusion can circumvent the controls established by the segregation of duties, making it a significant concern for internal auditors to monitor in environments where duties are segregated.References: Institute of Internal Auditors (IIA) - Practice Advisories on Assessing Fraud Risks

Best practices for minimizing resentment towards controls include involving employees in the design process of controls, transparently communicating their purpose, and how these controls benefit the organization and potentially the employees themselves. Such practices help in building a culture of compliance and acceptance, rather than resistance. Active participation and clear communication are key factors in achieving employee buy-in and minimizing resentment.
References: General best practices in change management and internal control implementation as advised by various management and audit frameworks, including those suggested by the IIA and related governance bodies.
Top of Form

The scenario indicates a lack of communication competency. Effective communication involves not only presenting audit findings clearly but also ensuring that management is adequately informed and understands the findings prior to the closing meeting. Sharing draft findings in a way that management was not familiar with and found confusing suggests shortcomings in how information was conveyed.
* Option B: Business acumen is understanding the business context, which is not the primary issue here.
* Option C: Persuasion involves influencing others, which is secondary to clear communication.
* Option D: Critical thinking is about analysis and judgment, not directly related to the communication issues described.
References:
* IIA Standard 2420: Quality of Communications.
* IIA Practice Guide: Communication.

Detective internal controls are a limitation in fraud management because they are not designed to prevent fraud but to identify fraud after it has occurred. Their primary purpose is to detect and provide feedback on incidents of fraud, thereby allowing corrective action to be taken. However, they do not stop the initial occurrence of fraudulent activities.References: IIA guidance on types of controls and their effectiveness in fraud prevention.

The driver of fraud that is directly controllable by an organization is Opportunity. By designing and implementing strong internal controls, clearly defining roles and responsibilities, and conducting regular audits and reviews, an organization can significantly reduce the opportunities for fraud to occur within its environment.References: Fraud Triangle theory and IIA guidance on fraud risk management.