Boards are responsible for setting the risk appetite of the organization, but few banks conduct formal fraud risk assessments ...