Internal control systems, risk management, and fraud prevention in indonesian regional financial management

Abstract

This study examines how internal control systems and risk management are linked to fraud prevention in Indonesian regional financial management through a qualitative integrative literature review rather than causal estimation. The revised corpus comprises 42 sources: 16 regulations, professional standards, or official reports and 26 scholarly works. Sources were purposively selected from official repositories, publisher pages, DOI records, and academic indexes using four criteria: direct relevance to the focal constructs, traceable bibliographic identity, methodological or normative authority, and contribution to mechanism explanation. Unverifiable metadata, duplicate materials, popular opinion, and statistical claims without an original source were excluded. Source-type-specific appraisal assessed provenance and scope for official materials and design transparency, construct relevance, and stated limitations for scholarly studies. A pre-specified codebook guided extraction and deductive-inductive coding, followed by cross-source triangulation, pattern matching, negative-case analysis, and explanation building. Official statistics are used only as contextual signals and are not treated as comparable fraud outcomes: Indonesia’s 2024 National Integrity Index was 71.53 and remained in the vulnerable category; the Audit Board reported 491 unmodified, 53 qualified, and one disclaimer opinion for 545 local government financial statements for fiscal year 2024; and the ACFE global benchmark reported that 43% of occupational fraud cases were initially detected through tips. The synthesis indicates that internal controls restrict opportunity and improve traceability, while risk management strengthens anticipatory identification and prioritisation of fraud scenarios. These mechanisms are most credible when risk sensing is translated into controls that are actually executed, tested, and improved. The study develops the Regional Financial Risk-Control and Antifraud Integration Model (MIPRA-KD), consisting of risk sensing, risk-calibrated control response, behavioural integrity, digital traceability, and an assurance-learning loop. It provides a diagnostic typology, testable propositions, and measurable implementation indicators while explicitly limiting inference to qualitative, mechanism-based conclusions.

Keywords
  • Fraud prevention,
  • Internal control,
  • Local government finance,
  • Public-sector risk management,
  • Regional financial management
References
  1. Arena, M., Arnaboldi, M., & Azzone, G. (2010). The organizational dynamics of enterprise risk management. Accounting, Organizations and Society, 35(7), 659–675. https://doi.org/10.1016/j.aos.2010.07.003
  2. Association of Certified Fraud Examiners. (2024). Occupational fraud 2024: A report to the nations. ACFE. https://www.acfe.com/fraud-resources/report-to-the-nations
  3. Badan Pemeriksa Keuangan Republik Indonesia. (2025a). Ikhtisar Hasil Pemeriksaan Semester I Tahun 2025. BPK RI. https://www.bpk.go.id/ihps
  4. Badan Pemeriksa Keuangan Republik Indonesia. (2025b). BPK sampaikan LHP atas LKPP Tahun 2024 dan IHPS II Tahun 2024 kepada DPD RI. https://www.bpk.go.id/news/bpk-sampaikan-lhp-atas-lkpp-tahun-2024-dan-ihps-ii-tahun-2024-kepada-dpd-ri
  5. Badan Pengawasan Keuangan dan Pembangunan. (2021). Peraturan BPKP Nomor 5 Tahun 2021 tentang Penilaian Maturitas Penyelenggaraan Sistem Pengendalian Intern Pemerintah Terintegrasi pada Kementerian/Lembaga/Pemerintah Daerah. BPKP.
  6. Beasley, M. S., Clune, R., & Hermanson, D. R. (2005). Enterprise risk management: An empirical analysis of factors associated with the extent of implementation. Journal of Accounting and Public Policy, 24(6), 521–531. https://doi.org/10.1016/j.jaccpubpol.2005.10.001
  7. Committee of Sponsoring Organizations of the Treadway Commission, & Association of Certified Fraud Examiners. (2023). Fraud risk management guide (2nd ed.). COSO/ACFE.
  8. Committee of Sponsoring Organizations of the Treadway Commission. (2013). Internal control—Integrated framework. COSO.
  9. Committee of Sponsoring Organizations of the Treadway Commission. (2017). Enterprise risk management—Integrating with strategy and performance. COSO.
  10. Cressey, D. R. (1953). Other people’s money: A study in the social psychology of embezzlement. Free Press.
  11. Donelson, D. C., Ege, M. S., & McInnis, J. M. (2017). Internal control weaknesses and financial reporting fraud. Auditing: A Journal of Practice & Theory, 36(3), 45–69. https://doi.org/10.2308/ajpt-51608
  12. Dorminey, J., Fleming, A. S., Kranacher, M.-J., & Riley, R. A., Jr. (2012). The evolution of fraud theory. Issues in Accounting Education, 27(2), 555–579. https://doi.org/10.2308/iace-50131
  13. Free, C. (2015). Looking through the fraud triangle: A review and call for new directions. Meditari Accountancy Research, 23(2), 175–196. https://doi.org/10.1108/MEDAR-02-2015-0009
  14. Hogan, C. E., Rezaee, Z., Riley, R. A., Jr., & Velury, U. K. (2008). Financial statement fraud: Insights from the academic literature. Auditing: A Journal of Practice & Theory, 27(2), 231–252. https://doi.org/10.2308/aud.2008.27.2.231
  15. Institute of Internal Auditors. (2020). The IIA’s three lines model: An update of the three lines of defense. IIA.
  16. International Organization for Standardization. (2018). ISO 31000:2018 risk management—Guidelines. ISO.
  17. International Organization of Supreme Audit Institutions. (2019). GUID 5270: Guideline for the audit of corruption prevention. INTOSAI.
  18. Jeppesen, K. K. (2019). The role of auditing in the fight against corruption. The British Accounting Review, 51(5), 100798. https://doi.org/10.1016/j.bar.2018.06.001
  19. Kementerian Dalam Negeri Republik Indonesia. (2020). Peraturan Menteri Dalam Negeri Nomor 77 Tahun 2020 tentang Pedoman Teknis Pengelolaan Keuangan Daerah.
  20. Komisi Pemberantasan Korupsi. (2025). KPK rilis hasil SPI 2024: Skor indeks meningkat, namun masih di kategori rentan. https://kpk.go.id/id/ruang-informasi/berita/kpk-rilis-hasil-spi-2024-skor-indeks-meningkat-namun-masih-di-kategori-rentan
  21. Lenz, R., & Hahn, U. (2015). A synthesis of empirical internal audit effectiveness literature pointing to new research opportunities. Managerial Auditing Journal, 30(1), 5–33. https://doi.org/10.1108/MAJ-08-2014-1072
  22. Mikes, A., & Kaplan, R. S. (2015). When one size doesn’t fit all: Evolving directions in the research and practice of enterprise risk management. Journal of Applied Corporate Finance, 27(1), 37–40. https://doi.org/10.1111/jacf.12102
  23. Muhtar, M., Winarna, J., & Sutaryo, S. (2023). Internal control weakness and corruption: Empirical evidence from Indonesian local governments. International Journal of Professional Business Review, 8(6), e01278. https://doi.org/10.26668/businessreview/2023.v8i6.1278
  24. Nadirsyah, N., Indriani, M., & Mulyany, R. (2024). Enhancing fraud prevention and internal control: The key role of internal audit in public sector governance. Cogent Business & Management, 11(1), 2382389. https://doi.org/10.1080/23311975.2024.2382389
  25. Neu, D., Everett, J., Rahaman, A. S., & Martinez, D. (2013). Accounting and networks of corruption. Accounting, Organizations and Society, 38(6–7), 505–524. https://doi.org/10.1016/j.aos.2012.01.003
  26. Organisation for Economic Co-operation and Development. (2020). OECD public integrity handbook. OECD Publishing. https://doi.org/10.1787/ac8ed8e8-en
  27. Paul, J., & Criado, A. R. (2020). The art of writing literature review: What do we know and what do we need to know? International Business Review, 29(4), 101717. https://doi.org/10.1016/j.ibusrev.2020.101717
  28. Power, M. (2009). The risk management of nothing. Accounting, Organizations and Society, 34(6–7), 849–855. https://doi.org/10.1016/j.aos.2009.06.001
  29. Presiden Republik Indonesia. (2023). Peraturan Presiden Nomor 39 Tahun 2023 tentang Manajemen Risiko Pembangunan Nasional.
  30. Republik Indonesia. (2008). Peraturan Pemerintah Nomor 60 Tahun 2008 tentang Sistem Pengendalian Intern Pemerintah.
  31. Republik Indonesia. (2019). Peraturan Pemerintah Nomor 12 Tahun 2019 tentang Pengelolaan Keuangan Daerah.
  32. Roussy, M. (2013). Internal auditors’ roles: From watchdogs to helpers and protectors of the top manager. Critical Perspectives on Accounting, 24(7–8), 550–571. https://doi.org/10.1016/j.cpa.2013.08.004
  33. Safkaur, O., Hanasbey, L., & Sakti, E. (2025). The role of political pressure, fraud risk management and organizational culture in moderating public governance on Indonesian local government financial performance. Pacific Accounting Review, 37(3), 455–476. https://doi.org/10.1108/PAR-08-2024-0183
  34. Snyder, H. (2019). Literature review as a research methodology: An overview and guidelines. Journal of Business Research, 104, 333–339. https://doi.org/10.1016/j.jbusres.2019.07.039
  35. Spira, L. F., & Page, M. (2003). Risk management: The reinvention of internal control and the changing role of internal audit. Accounting, Auditing & Accountability Journal, 16(4), 640–661. https://doi.org/10.1108/09513570310492335
  36. Sumiyana, S., Susanto, E. A., Rahajeng, D. K., & Winardi, R. D. (2025). Indonesia’s local government internal auditors (LGIAs): Reflecting on low motivation in enhancing their dynamic capabilities while being the spearhead of responsible auditing. Journal of Accounting & Organizational Change, 21(1), 24–47. https://doi.org/10.1108/JAOC-10-2022-0159
  37. Tarjo, T., Anggono, A., Alim, M. N., Said, J., & Mohd-Sanusi, Z. (2024). Religiosity, ethical leadership and local wisdom in moderating the effect of fraud risk management on asset misappropriation: Evidence from local government in Indonesia. Journal of Islamic Accounting and Business Research. Advance online publication. https://doi.org/10.1108/JIABR-09-2022-0227
  38. Tarjo, T., Vidyantha, H. V., Anggono, A., Yuliana, R., & Musyarofah, S. (2022). The effect of enterprise risk management on prevention and detection fraud in Indonesia’s local government. Cogent Economics & Finance, 10(1), 2101222. https://doi.org/10.1080/23322039.2022.2101222
  39. Vousinas, G. L. (2019). Advancing theory of fraud: The S.C.O.R.E. model. Journal of Financial Crime, 26(1), 372–381. https://doi.org/10.1108/JFC-12-2017-0128
  40. Wolfe, D. T., & Hermanson, D. R. (2004). The fraud diamond: Considering the four elements of fraud. The CPA Journal, 74(12), 38–42.
  41. Woods, M. (2009). A contingency theory perspective on the risk management control system within Birmingham City Council. Management Accounting Research, 20(1), 69–81. https://doi.org/10.1016/j.mar.2008.10.003
  42. Zahra, F., Abdullah, M. I., Kahar, A., Din, M., & Nurfalah, N. (2021). Preventing procurement fraud in e-purchasing for Indonesian local governments. The Journal of Asian Finance, Economics and Business, 8(2), 505–511. https://doi.org/10.13106/jafeb.2021.vol8.no2.0505