28
www.pwc.com/vn/crimesurvey-2018 Global Economic Crime and Fraud Survey 2018: Vietnam Perspectives Pulling fraud out of the shadows

Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

  • Upload
    others

  • View
    2

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

www.pwc.com/vn/crimesurvey-2018

Global Economic Crime and Fraud Survey 2018:

Vietnam Perspectives

Pulling fraud out of the shadows

Page 2: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam Perspectives.

Being a growing economy, Vietnam is attracting high levels of foreign direct investment. As often occurs in rapidly developing economies, anti-fraud measures may not develop at the same pace as the economy. Foreign investors, particularly those from developed economies, may not be prepared to face some of the difficulties that are present in such a dynamic, challenging environment. Hence, we see this present moment in Vietnam’s development as a relevant time to explore the insights from our survey relating to the economic crime landscape.

Respondents include personnel working in various roles, ranging from C-suite individuals to Internal Audit and Risk Management executives, representing companies from various industries, including key sectors of the Vietnamese economy such as Financial Services and Manufacturing. The ownership structure of these companies is diverse and includes publicly listed companies, private companies, and majority state-owned enterprises.

Grant Dennis

General DirectorPricewaterhouseCoopers Consulting (Vietnam)

2 PwC’s Global Economic Crime and Fraud Survey 2018

Foreword

Page 3: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

• Almost half of the Vietnamese respondents (47%) said they had been targeted by cybercrime in the previous two years. However, only 12% of Vietnamese respondents predicted that cybercrime will have the most disruptive impact during the next two years. This accounts for almost a half of the global response rate (26%) and less than the regional response (21%). Given the relative early development state of its economy, 37% of the Vietnamese respondents advised that they: a) did not know whether they had a cybersecurity programme or not (16%); b) did not have such a programme (13%); or c) were only now assessing the feasibility of implementing such a programme (8%).

• 46% of the Vietnamese survey respondents have performed a general fraud risk assessment during the last two years. However, fewer respondents have performed assessments that focus on specific risk areas, such as Anti- Bribery and Corruption (35%) or Cyber-Attack Vulnerability (29%). These statistics may increase in the future, given that 39% of the Vietnamese survey respondents reported having been asked to pay a bribe.

We hope this report will provide you with some interesting insights into Vietnam’s economic crime landscape and prompt you to start thinking about how to defend your business against the threats identified in this report.

The key results from this survey are as follows:

• 52% of respondents report having suffered economic crime/fraud in the past two years, a slightly higher incidence level than seen regionally (46% in Asia- Pacific) or globally (49%). Of those who reported being victims of fraud, the most common fraudulent activities were Asset Misappropriation, at 40%, and Bribery and Corruption, at 36%.

• Culture trumps controls in Vietnam: most fraudulent activities that were reported were identified through internal tip-offs (16%) or by accident (also 16%). However, Vietnam’s Internal Audit and whistleblowing hotlines each identified only 3% of the reported fraud, lagging far behind the Asia-Pacific and global statistics. At the global level, Internal Audit and whistleblowing hotlines were reported to have identified 14% and 7% of all fraud, respectively. At the Asia-Pacific level, the numbers were 18% and 7%, respectively. This is an area that Vietnamese companies could explore in order to mitigate the risks in achieving their strategic objectives.

Vietnam Perspectives 3

Page 4: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

About the survey

PwC’s 2018 Global Economic Crime and Fraud Survey was completed by 7,228 respondents from 123 territories. Of the total number of respondents, 52% were senior executives of their respective organisations, 42% represented publicly-listed companies and 55% represented organisations with more than 1,000 employees.

4 PwC’s Global Economic Crime and Fraud Survey 2018

Page 5: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

Overview of fraud and economic crime in Vietnam

A transparent picture

Organisational damage

Profile of perpetrators

Who are the fraudsters?

How are fraudsters detected?

How do companies deal with fraudsters?

Business ethics and compliance

How are these programmes operated?

How can we improve the programme?

Anti-money laundering

What is happening in Vietnam?

The roles of Vietnam Government

and State Bank of Vietnam

New disruptive technologies

Is Vietnam lagging behind?

Cyber response plans

Contents

6

10

14

18

21

Vietnam Perspectives 5

Page 6: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

Overview of fraud and economic crime in Vietnam

6 PwC’s Global Economic Crime and Fraud Survey 2018

Page 7: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

Fraud experienced by respondents in Vietnam

Types of fraud experienced in past 24 months

Economic crime comes in many forms, each with a different nature. The most common types of economic crime reported by respondents was Asset Misappropriation (40%) and Bribery and Corruption (36%). The figures for both of these crimes are higher than the corresponding Asia-Pacific and global figures. Surprisingly, only 7% of the respondents believe that Asset Misappropriation will reoccur in the next 24 months, while Bribery and Corruption is predicted to reoccur by 27% of respondents.

Is the risk of Asset Misappropriation underestimated? Or do Vietnamese companies have an insufficient level of awareness of risks associated with this type of fraud, despite the fact that incidence levels have risen considerably?

A transparent pictureOur survey indicates that companies in Vietnam have experienced a fraud rate of 52% during the last two years, a figure that is slightly higher than in the Asia-Pacific region or at the Global level, which stand at 46% and 49%, respectively.

However, given our experience with fraud, we suspect that the 40% of respondents who advised that they did not experience fraud may simply not have detected it as yet.

52%Yes

40%No

8%

Don’t know

13%Tax Fraud

7%Other

24%Procurement Fraud

16%Money laundering

9%Insider Trading

16%Human Resources Fraud

33%Fraud committed by consumers

20%Cybercrime

Intellectual Property (IP) theft 7%

7%Competition/Anti-Trust Law Infringement

29%Business Conduct/Misconduct

36%Bribery and Corruption

22%Accounting Fraud

40%Asset misappropriation

Vietnam Perspectives 7

Page 8: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

40%Vietnam has the highest Asset Misappropriation rate compared to Japan and Korea

Top two fraud types compared to Korea and Japan

As shown in the graphic below, as compared to Vietnam’s major trading partners, Japan and Korea, Vietnam (40%) leads the group for Asset Misappropriation. However, in terms of Bribery and Corruption amongst the trading partners, Korea leads (42%), followed

by Vietnam (36%), and then Japan (12%). These results may provide some level of insight into the respective priorities of the anti-fraud programmes in the countries specified.

JapanKoreaVietnam

Asset misappropriation Bribery and Corruption

36%38%

42%

22%

12%

40%

8 PwC’s Global Economic Crime and Fraud Survey 2018

Page 9: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

One-third of the Vietnamese survey respondents (32%) estimated that they lost more than $100,000 to fraud in the same period.

Financial damage reported

Non-financial impact assessment

Relations with

regulators

Reputation/brand

strengthShare price

Business relations

Employee morale

14% 12% 21% 7%5%

23%

30%

35%

28%5%7% 7%

9%

16%

61%

30%

23%

14%

30%

12%

30%

7%

14%

30%

30%

On one hand, our survey measured the damage from economic crimes in terms of its pure financial impact on Vietnamese organisations. 53% of the Vietnamese companies in our survey reported losses of less than $100,000 (approximately VND2.3 billion) as a result of economic crimes over the last two years. Just under one-third of the Vietnamese survey respondents (32%) estimated they lost more than $100,000 to fraud in the same period.

On the other hand, non-financial impact was also measured in our survey. The most severe impact the Vietnamese survey respondents identified was to their reputation/brand strength (28%). This was followed by the impact on employee morale and business relations, where 23% and 21% of respondents felt the greatest impact, respectively.

Surprisingly, six out of every ten respondents advised that economic crime had no effect on their share price.

Organisational damageDamages from economic crimes can be classified into financial and non-financial types. There are several types of quantifiable financial consequences of fraud, including remediation costs, legal fees, actual monetary losses, and even criminal penalties, for example. However, despite the fact that non-financial damages may not be quantifiable, they can lead to potentially worse consequences than financial losses (i.e. reputational damage, employee morale).

Don’t knowHigh Medium Low None

9%7%

2%7%

23%

16%

4%

0% 5% 10%1 5% 20% 25% 30% 35%

32%

Amount is immeasurable

Don’t know

5 million to < 50 million US dollars

1million to < 5 million US dollars

100,000 to < 1 million US dollars

50,000 to < 100,000 US dollars

25,000 to < 50,000 US dollars

Less than 25,000 US dollars

1

Vietnam Perspectives 9

Page 10: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

Profile of perpetrators

10 PwC’s Global Economic Crime and Fraud Survey 2018

Page 11: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

Who are the fraudsters?In Vietnam, the majority (53%) of reported economic crime is perpetrated by internal actors. The percentage of reported frauds that are carried out by external actors is 36%, by contrast, while 8% say they are unaware of the identity of fraudsters.

When it comes to internal actors, our survey reveals that Senior Management are reported to have committed 19% of internal fraud, while Junior Management are reported to have perpetrated 28%. However, the greatest perpetrators of internal fraud were reported to be Middle Management staff at 33% according to survey respondents.

Who Was the Main Perpetrator of the Fraud?

At what level was the main perpetrator of the internal fraud within your organisation?

8%3%

Internal actor

53%External actor Don’t

know

Prefer not to say

36%

19%

33%28%

10% 10%

0%

5%

10%

15%

20%

25%

30%

Senior Management

Middle Management

Junior Management

Don’t know

Other staff

Main perpetrators of external fraud

Approximately 24% of respondents advised internal fraud was most likely to be committed by Marketing and Sales personnel. By contrast, at both the Asia-Pacific and global levels, most internal fraud reportedly was perpetrated by Operational and Production personnel.

Our respondents identified the main driver for fraud was “Opportunity” leading to economic crime (38%), followed by “Incentives and/or Pressure to Perform” (33%).

In Vietnam, though, external threats are clearly substantial. These external actors include Customers (36%), Vendors (21%), and Agents, Hackers, and Organised Crime, at 14% each. We have termed the first three of these categories as “frenemies”. We believe this title is fitting for Southeast Asia, where relationships, related parties and potential conflicts of interest are a common and integral part of the business landscape. 7% 7%

14%14%14% 14%

36%

21%

Don’t know

Other Organised crime

Foreignstates

Hackers Agents/Intermediaries

CustomersVendors

Vietnam Perspectives 11

Page 12: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

Whistle blowing hotline and internal audit detection rates by location

How do companies deal with fraudsters?During the past two years, Vietnamese companies have purportedly undertaken fraud risk assessments on a regular basis – with just under half of respondents advising they had performed such an assessment (46%). However, 16% of respondents admitted that no assessments had been performed in the past 24 months. In addition, 15% of respondents weren’t sure whether they had performed any assessment (one can assume if you are unsure as to whether or not you have undertaken a fraud risk assessment, the odds are that it didn’t happen!).

We note companies worldwide are performing cyber risk assessments. In fact, Cyber-Attack Vulnerability was ranked as the second most important risk category, at 46% globally and 41% regionally. In Vietnam, however, it seems there is less concern regarding cyber risk, with only 29% of the respondents having performed a Cyber-Attack Vulnerability assessment.

Asia-PacificGlobal

7% 7%

14% 18%

Vietnam

3% 3%

Whistleblowing hotline Internal Audit

How are fraudsters detected?The Vietnam survey reveals most fraud and other economic crimes are detected via tip-offs (internal) or by accident, which both account for 16% of detected frauds. At the global level, where Internal Audit is a regular feature of businesses, the detection rate of fraud by Internal Audit is 14%, while respondents from the Asia-Pacific region advised 18% of frauds were discovered by Internal Audit. In Vietnam, a mere 3% of frauds were detected by Internal Audit.

Similarly, whistleblowing hotlines in Vietnam only resulted in the detection of 3% of frauds, while the Asia-Pacific and global detection rates were both noted at 7%. Clearly, companies in Vietnam could substantially improve their control environments and reduce fraud by implementing effective Internal Audit functions and whistleblowing hotlines. The downside of rapid economic development is that companies focus on sales growth and therefore internal controls are often overlooked as a priority.

Companies in Vietnam could substantially improve their control environments and reduce fraud by implementing effective Internal Audit functions and ethical hotlines

12 PwC’s Global Economic Crime and Fraud Survey 2018

Page 13: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

Similar to companies around the globe and in the Asia Pacific region, Vietnamese organisations are investing in improving their business processes in order to combat fraud. 42% of respondents rate their level of effort in this area as “high”. Fewer, however, are putting the same level of effort into other anti-fraud efforts, such as promoting and verifying ethical decision making by individual employees. Again, this is a potential area for improvement for Vietnamese companies and also presents a major challenge to educate employees of the potential wider impact their decisions have on the organisation.

Level of effort applied to combat fraud and/or economic crime internally

Areas on which risk assessments have been performed

High Medium Low None Dont’ know

12% %9%

General fraudrisk assessment

AML

Cyber-attack Sanctions andexport controls

Don’t know

Other

4%

15%16%16%19%20%

21%

28%29%

35%

46%

No risk assessments performed in the last

24 months

Industry-specific regulatory obligations

Anti-Bribery & Corruption

Anti-competitive / Anti-trust

Cyber response plan

Organizational and external influences

Promotion and verification of individual employees’

Decision-making

Business processes

32% 35% 12% 9% 12%

9% 4% 10%

12%12%10%38%28%

42% 35%

Vietnam Perspectives 13

Page 14: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

Business ethics and compliance

14 PwC’s Global Economic Crime and Fraud Survey 2018

Page 15: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

Approximately 64% of the respondents in Vietnam believe a formal business ethics and compliance programme is an urgent need for an organisation. This lags behind the Asia- Pacific region by 10%, and by 13% against global survey respondents, where 77% of respondents advised they already have implemented a formal Ethics and Compliance programme.

We anticipate Vietnamese companies will increase the adoption of these programmes in the near future, as they will not only be expected by local regulatory bodies, but also multinational partners and foreign investors. Early adoption of Ethics and Compliance programmes by Vietnamese companies increases their attractiveness to business partners and investors, which is critical for future growth prospects.

Unfortunately, our survey also indicates Vietnam is following a disturbing global and regional trend in that 39% of respondents advise they have been requested to pay bribes. The global rate of bribe requests is 23% in the current survey, which is 6% lower than the rate in the Asia-Pacific region.

Of the respondents in Vietnam, 30% believe they have lost opportunities to competitors who have paid a bribe. However, approximately 42% of Vietnamese organisations do not possess any knowledge about the rival that purportedly benefited from the bribe.

Ethics and compliance programme rate

Bribery request rate

30%of Vietnamese respondents believed they have lost opportunities to competitors who paid a bribe.

Global Asia-Pacific Vietnam

0 10 20 30 40 50 60 70 80

74%

5%

18%

9%

17%

8%

28%

77%

64%

Don’t know

No

Yes

Global Asia-Pacific Vietnam

39% 29% 23%39% 29% 23%39% 29% 23%

Vietnam Perspectives 15

Page 16: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

Who has primary responsibility for the business ethics and compliance program in your organisation?

How are these programmes operated? Unlike their overseas counterparts, 18% of the companies in Vietnam say their Chief Risk Officer (CRO) is responsible for the Ethics and Compliance programme, in addtion to other management officers including Chief Executive Officer (CEO) and the Chief

Compliance Officer (CCO). By contrast, the roles of General Counsel, Chief Audit Officer (CAE), Chief Operation Officer (COO) and Chief Finance Officer (CFO) tend not to include responsibility for Ethics and Compliance programmes. Roughly 6% of the respondents

CEO, CRO,HR Director, CCO and CAE all haveresponsibility over Ethics and Compliance Programmes,however, HR Director & CAE have primary responsibility

4%

7%

3%7%

17%5%

6%11%11%

30%

27%

37%

10%

6%

9%

6%

6%

6%

4%

19%

18%

9%

18%

4%

2%

5%

2%

5%

10%

CCO GeneralCounsel

HrDirector

CFO CAE CEO CRO COO Other Don’tknow

VietnamGlobal Asia-Pacific

16 PwC’s Global Economic Crime and Fraud Survey 2018

Page 17: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

0

10%

20%

30%

40%

50%

60%

28%

11%

56%

5%

17%

31%

42%

10%

Significant increase Some increase

About the same level Decrease

Who is responsible for the business ethics and compliance program in your organisation in Vietnam?

Anti-fraud investment level

37% 4%CCO General Counsel

CEO CAE

COOCRO

OtherDon’t know

CFOHR Director

18% 4%

2%18%

2%9%

0%6%

0

10%

20%

30%

40%

50%

60%

How can we improve Ethics and Compliance programmes ?In anti-bribery circles in the Western world, regulators will compare business expenses for compliance to the budget for office supplies. Companies that spend more on office supplies than compliance may be seen as not being serious in their quest to be compliant. Companies should give serious consideration to the level of resources they allocate to preventing and detecting fraud in their organisations.

Thus, we asked survey respondents to gauge their level of compliance expenditure over time. 56% of survey participants in Vietnam claimed that they have invested roughly the same level of funds in combatting fraud over the last two years as in previous years. Only 42% expect the level to stay the same over the next 2 years, while almost half of the respondents (48%) expect either an increase or a significant increase in their expenditure, in order to combat fraud related issues within their organsiation.

in the region, and roughly 6% of those around the globe, indicated that their CFOs “owned” the Ethics and Compliance programme, yet no respondents advised this was the case in Vietnam.

The HR Director and the Chief Audit Executive (CAE) have the primary responsibility for the Ethics and Compliance programmes, but only 10% of the respondents tagged these functions as having ownership. Rather, the CEO and the CRO roles have picked up the job in 36% of the respondents’ organisations.

In the past 24 months In the next 24 months

Vietnam Perspectives 17

Page 18: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

Anti-money laundering

18 PwC’s Global Economic Crime and Fraud Survey 2018

Page 19: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

What is happening in Vietnam?Money laundering is a global concern. Vietnam, being a largely cash-based economy, is considered a prime target for money laundering criminals, as cash leaves no audit trail. Encouragingly, Vietnamese organisations appear to be aware of AML regulations, as 86% of the respondents reported that their organisations are subject to AML regulations.

As with cyber threats and all fraudulent activity, it is preferable to prevent money laundering, rather than to “cure” after the fact. The 2018 survey suggests that Vietnam actually has a markedly higher rate of organisations that conduct the Anti-Money Laundering and Combat Financing of Terrorism (75%) assessments than at the global (62%) or Asia-Pacific (61%) levels

86%of the respondents reported that their organisations are subject to AML regulations. AML regulations subjection rate

AML/CFT assessment performed

72% 14% 7% 7% 0%

Yes, subject to both local and international AML regulations

Yes, only to local AML regulations

Don’t know No Yes, only to other countries’ AML regulations

Asia-Pacific

Global

Vietnam

75%

62%

61%

Vietnam Perspectives 19

Page 20: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

Yes we had a regulatory inspection

and received major feedback to adddress

Yes we were/are currently under an

enforced remediation program

Don’t know No we have not had a regulatory inspection in the last 24 months

Yes we had a regulatory inspection with no major feedback / consequences

Regulatory inspection experienced

Asia-Pacific VietnamGlobal

Money laundering has been officially classified as a crime through the Vietnam Penal Code since July 2000. The Penal Code insofar as it relates to money laundering has been amended and superseded on two further occasions - July 2016 and January 2018. The Vietnamese Government and the State Bank of Vietnam have also implemented a number of regulations relating to money laundering including regulations relating to threshold reporting values.

The roles of Vietnam Government and State Bank of Vietnam (SBV)

11% 11%14%

24%

57%

31%

18%

11%

23%

7%

21%

15%

26%

14%17%

20 PwC’s Global Economic Crime and Fraud Survey 2018

Page 21: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

New disruptive technologies

Vietnam Perspectives 21

Page 22: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

Is Vietnam lagging behind?

Digital technologies are reshaping the way that work is done. As it might be expected, economic criminals and fraudsters are also using technology to enable crimes.

In Vietnam, 12% of the respondents believe this type of crime is likely to have the most disruptive impact upon their organisation in the next two years. This accounts for almost half in comparison to the global response rate (26%) and less than the regional response (21%). We note these statistics indicate that cybercrime is perceived as an emerging threat to businesses in Vietnam.

Our 2018 GECS survey – Vietnam perspectives highlights almost half of all respondents in Vietnam (47%) have been targeted by cyber-attacks during the last 2 years. These respondents reported the most common method of cyber-attack was through Malware (the insertion of malicious software into the devices of the victims), which accounted for 23% of all incidences. Phishing, the use of e-mails to deceive recipients into divulging sensitive information, followed at 17%. More sophisticated or resource- intensive types of attacks, like “Man in the Middle” (intercepting sensitive information by misrepresentation) and brute force, appear to be less prevalent in Vietnam.

Forecasted cybercrime rates

Cyber-attack rates by type

Global Asia-Pacific Vietnam

26% 21% 12%

15%

38%

13%

1%

23%

9%

17%

6%

16%

No

Don’t know

Yes, but do not know the specific technique

Other techniques

Malware

Man in the middle

Phishing

Brute force attack

Network scanning

22 PwC’s Global Economic Crime and Fraud Survey 2018

Page 23: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

Vietnam

Technology as an instrument for monitoring fraud in Vietnam and worldwide

As with all fraud-related statistics, these are also subject to interpretation – for the 15% who ‘don’t know’, or the 38% who said they were not subject to a cyber-attack, is that really the case? Or could it simply be they have not yet detected the attacks to which they may have fallen victim? This is one of the many reasons we recommend undertaking periodic preventative risk assessments – to identify vulnerabilities before disaster strikes.

We also recommend to our clients they take advantage of the capabilities of technology in order to detect and monitor economic crime. Technological tools have become more powerful and less expensive, some even freely available to users in a limited/reader format. However, we note the Vietnamese respondents lag well behind the rest of the world when it comes to using certain key technologies to protect themselves by detecting fraud. For example, 75% of the respondents in Vietnam (in contrast to only 48% of respondents globally) don’t know if they use or do not use technology to perform Third-Party Due Diligence on their business

partners. In today’s business world, it is not just a regulatory expectation but a key requirement of compliance to understand your business partners reputation. Automated due diligence systems can help to protect companies in the event their prospective business partners have a poor reputation (or no reputation), or are linked to potentially corrupt or otherwise criminal behaviour, or an extensive litigation history.

Similarly, in terms of general fraud detection, 57% of the survey respondents in Vietnam either don’t know if they use or do not use technology to monitor this risk. At the global level, by contrast, 62% of respondents utilise technology for fraud prevention. For Vietnamese companies, this is clearly an area that could be improved if fraud losses are reduced through relatively inexpensive monitoring technologies, resources, including cash and management time, can be utilised for more strategic items.

Primary monitoring technique

Part of a wider program of monitoring

Do not use technology for monitoring

Don’t know

18%

15%

11%

9%

13%

10%

17%

21%

17%

5%

16%

13%

23%

15%

17%

17%

38%

27%

37%

29%

24%

19%

25%

22%

26%

20%

35%

20%

32%

25%

39%

28%

25%

19%

34%

29%

27%

33%

37%

40%

30%

33%

27%

27%

27%

41%

33%

38%

22%

30%

24%

20%

11%

18 %

18%

23%

28%

32%

32%

35%

30%

32%

21%

34%

19%

24%

16%

27%

33%

44%

17%

26%

Global

Vietnam

Vietnam

Vietnam

Vietnam

Vietnam

Vietnam

Vietnam

Vietnam

Vietnam

Global

Global

Global

Global

Global

Global

Global

Global

Business Conduct

Anti competitive /

Export Controls

Sanction Screening

Third Party Due Diligence

Anti-bribery / Anti-corruption

Fraud Detection

AML Detection

Cyber Attacks /

Anti-trust

Vulnerabilities

-

Vietnam Perspectives 23

Page 24: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

Availability of a Cybersecurity Programme

Cyber response plansThe 2018 GECS survey – Vietnam perspectives reveals that a large number of companies have an incident response plan for dealing with cyber-attacks. 62% of the respondents said

53% 16% 13% 9% 8%

Yes, this plan is fully in operation

Don’t know No, we do not have a plan

Yes, but it has not been implemented yet

No, but we are currently assessing the feasibility of implementing such a plan

Due to the nature of cybercrime, where methods of attack are relatively consistent, one of the best defenses is to keep informed regarding the latest threats and vulnerabilities. This, however, requires victims to share information about how they are being targeted, either with law enforcement, private cybersecurity specialists, or both. Amongst our

Likelihood of sharing information

5%11%

12%

21% 23%

28%

Don’t know

Very unlikely

Unlikely

Neither likely nor unlikely

Likely

Very likely

%

%%

2

1

they had either a ‘fully-in-operation’ or a ‘yes, but-not-yet- implemented’ plan in order to deal with cyber-attack issues.

survey respondents, however, only one third advised they would be likely to share information regarding potential cyber-attacks with government/law enforcement agencies. Another 28% said that they did not know, while 21% were “on the fence” and could not say whether they would be likely to share information about cybercrimes.

24 PwC’s Global Economic Crime and Fraud Survey 2018

Page 25: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

Reason for not sharing information

Of the 17% respondents who advised they would not share information regarding cybercrime, the three most common reasons provided include:

a) the risk of uncontrolled public disclosure; b) they did not believe the law enforcement agencies possessed the expertise to assist; or c) they did not trust the law enforcement agencies.

Don’t trust the enforcement agencies

Other

Don’t believe that the law enforcement agencies have the required expertise

Local law restricts the sharing of internal data

Previous negative experiences

Risk of liability for the crime

Risk of uncontrolled public disclosure

Legal privilege not to share

May lead to additional regulatoryenforcement action

0 5 10 15 20 25 30 35 40

7%

36%

25%

11%

7%

11%

32%

7%

14%

Vietnam Perspectives 25

Page 26: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

26 PwC’s Global Economic Crime and Fraud Survey 2018

Page 27: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

Conclusion

Our survey indicates economic crime is a common problem facing businesses in Vietnam. Often, certain types of fraud (for example, procurement kickbacks) are considered as a cost of doing business, and as such, compliance and fraud risk management are perceived as low priorities for management. There is often a misconception that the costs of good governance outweighs the benefits, however as highlighted in this survey, fraud has not only financial but also non- financial impacts such as organization reputation and staff morale. Both of these impacts have lasting negative consequences for businesses. In weighing up the decision to be compliant companies must ask themselves, “What is the cost of doing the right thing?”

Therefore, when taking into account an organization’s strategic goals in any frontier or emerging market, we believe there are sufficient incentives for organizations to invest in fraud risk management, corporate governance and compliance. As the Vietnam becomes further integrated internationally, there will be an increasing need and obligation to adapt to international ethical and compliance standards, which are becoming a demand from international business partners and local regulators.

This survey highlights the challenges faced by respondents with respect to anti-bribery and anti-corruption where local business culture

often clashes with western ideals and policies. However, as foreign investment continues to increase in Vietnam, local companies will be required to adapt to increasing standards in order to comply with anti-bribery and corruption regulations.

We recommend companies undertake regular training programs in order to communicate the importance of anti-bribery and anti-corruption policies to raise organizational awareness of the wider ramifications with respect to non-compliance regarding these policies. In addition, companies that decide to invest in anti-corruption and anti-bribery policy frameworks benefit by becoming more attractive from a foreign investor perspective.

Although, cyber risk mitigation appears to be a low priority for Vietnamese businesses. Perpetrators of cyber frauds tend to target and capitalise on countries and businesses that are not prepared or have little knowledge in this area. Therefore, it is important for country regulators and companies to maintain a level of awareness of potential cyber threats.

Given the number of companies that reported to be affected by economic crime and frau, we recommend companies conduct periodic reviews of their potential exposure and develop and implement the appropriate frameworks, policies and procedures to protect themselves from potential financial and non-financial damages.

“Awareness, preparation and education are fundamental in preventing economic crime.”

Vietnam Perspectives 27

Page 28: Global Economic Crime and Fraud Survey 2018: …PricewaterhouseCoopers Consulting (Vietnam) Ltd. (PwC) is proud to present its first-ever Global Economic Crime and Fraud Survey: Vietnam

www.pwc.com/vn/crimesurvey-2018

This content is for general information purposes only, and should not be used as a substitute for consultation with professional advisors. ©2019 PricewaterhouseCoopers Consulting (Vietnam) Ltd. All rights reserved. PwC refers to the Vietnam member firm, and may sometimes refer to the PwC network. Each member firm is a separate legal entity. Please see www.pwc.com/structure for further details.

Want to know more about what you can do in the fight against fraud? Contact our experts

Contacts

Grant DennisGeneral DirectorPricewaterhouseCoopers Consulting (Vietnam) Ltd.+84 903 749 [email protected]

Alex TanPartnerPwC Consulting Services (M) Sdn [email protected]

Dinh Hong HanhPartnerFinancial Services Consulting PricewaterhouseCoopers Consulting (Vietnam) Ltd.+ 84 904 178 [email protected]

Peter ViksninsExecutive Director PwC Consulting Services (M) Sdn [email protected]

Francis Timings SeanDirectorForensicsPwC Consulting Services (M) Sdn [email protected]

Vo Tan Bich Ngoc Manager Financial Services Consulting PricewaterhouseCoopers Consulting (Vietnam) Ltd.+84 909 129 [email protected]