Controls reviewed after fraud?