Leakage is usually process
Most leakage is not fraud. It is missing codes, late changes and packages that never meet the forecast.
Controls that work
- Stable cost code map
- Forecast cadence owned by a named controller
- Change log before work proceeds
- Monthly three-way conversation: site, project, finance
Boundary
Operational control support is not a statutory audit opinion unless a licensed auditor is separately engaged.