Are the right messages being sent from the top of the organisation? Are policies and procedures being followed? Have crisis management controls been activated? Are staff aware of the heightened risk and what to look for?
Most organisations are adept at assessing risk but this process will need to be adapted for the unique circumstances of COVID-19.
Monitoring and detection
Do your capabilities and systems to identify fraud reflect the COVID-19 risk assessment?
Investigation and response
Is it feasible to investigate an issue remotely? Can your processes be adapted and can you access the data to undertake the investigation?