Skip to main content
← All Case Studies Corporate Governance

Whistleblowing Framework (QSR Leader)

Designed email-based reporting and investigation protocols from scratch.

Outcome Signal

Uncovered SAR 12M procurement tender collusion within months of launch.

Engagement Confidentiality Names, identifiers, and proprietary facts are abstracted where required. The underlying operational patterns and outcomes remain faithful to the real engagement.

Engagement Summary

Designed email-based reporting and investigation protocols from scratch.

Key Outcome

Uncovered SAR 12M procurement tender collusion within months of launch.

Audit 4.0 Code Library
Anonymized Production-Grade Scripts

1. Benford's AP Anomaly Engine (Python)

Audit Purpose: Scans accounts payable (AP) journal data to identify statistical deviation from Benford's distribution, signaling potential invoice splitting under delegation of authority (DoA) thresholds.

import pandas as pd
import numpy as np

def run_benford_audit(df_ap_transactions, amount_col='amount'):
    """
    Analyzes transaction distribution against Benford's Law.
    Flags vendors/employees exhibiting high chi-square deviation.
    """
    # 1. Extract the first digit (ignoring zeros, negatives, and decimals)
    df = df_ap_transactions[df_ap_transactions[amount_col] >= 1.0].copy()
    df['first_digit'] = df[amount_col].apply(lambda x: int(str(abs(x)).replace('.', '').lstrip('0')[0]))
    
    # 2. Calculate actual frequencies
    digit_counts = df['first_digit'].value_counts().reindex(range(1, 10), fill_value=0)
    total_count = len(df)
    
    # 3. Calculate Benford expected frequencies
    benford_probs = {d: np.log10(1 + 1/d) for d in range(1, 10)}
    expected_counts = {d: benford_probs[d] * total_count for d in range(1, 10)}
    
    # 4. Perform Chi-Square Goodness-of-Fit test
    chi_square_stats = {}
    for d in range(1, 10):
        observed = digit_counts[d]
        expected = expected_counts[d]
        chi_sq_val = ((observed - expected) ** 2) / expected
        chi_square_stats[d] = {
            'observed': observed,
            'expected': round(expected, 2),
            'deviation': round(observed - expected, 2),
            'chi_sq': round(chi_sq_val, 4)
        }
        
    total_chi_sq = sum(c['chi_sq'] for c in chi_square_stats.values())
    critical_value_99 = 20.09  # df=8, p=0.01
    
    return {
        'total_chi_sq': round(total_chi_sq, 2),
        'audit_verdict': 'SIGNIFICANT ANOMALY DETECTED' if total_chi_sq > critical_value_99 else 'NORMAL DISTRIBUTION',
        'details': chi_square_stats
    }
python
Executive Control Context

By running this engine daily, we transition from examining a tiny 5% random audit sample to a complete 100% population scan, instantly flagging invoice splitting (e.g. breaking a single AED 100K transaction into three separate AED 33K invoices to bypass Director-level approval).

Disclosure

All client names, employer names, and specific figures have been anonymised in accordance with confidentiality obligations and professional standards.