Corporate fraud and relationships: a systematic literature review in the light of research onion

Abstract

Purpose This paper aims to investigate how the literature has been addressing the relationships between corporate fraud and executive behavior and corporate fraud and information technology (IT) controls. Design/methodology/approach A systematic literature review was performed following the planning phases proposed by Levy and Ellis (2006), illuminated by the research onion, developed by Saunders et al. (2007). Findings The main findings of the studies analyzed refer basically to models to assess the risk of fraud. These risks originate from the market, from the organization itself or from individuals and also from their relationship networks. Subsequently, the main risks identified by the authors were classified according to their origin, the main theories approached and the “solutions” for the risks presented by the authors as the product of their work. Research limitations/implications It should be noted that this study is not free of limitations, of which two stand out: the full body of articles on the subject was certainly not evaluated. Although the search has been systematic and judicious both by the combination of keywords for the searches, as well as by the use of the main databases and also by the rigor in the description of the procedures and the analysis of the articles in the light of Research Onion was based on the authors’ knowledge that may have been limited in some respect. Practical implications As a practical implication, there is the relationship of red flags and their classification by origin, as they can be very useful for planning the work of internal and external auditors. Social implications It is considered that this work can be a starting point for scholars who are interested in the corporate fraud phenomenon, given that the data was collected and organized systematically. Originality/value The analysis of the articles in relation to Research Onion shed light on the main philosophical and methodological characteristics of the studies. Also, regarding the relationships between corporate fraud and IT controls, existing scientific research appears to be limited. Searches for the terms information technology and information systems were extended, as well as search strings tested with the terms data governance and IT governance without results. This fact demonstrates that there may be (as far as the results have reached) a vast area of research on corporate fraud in the field of systems knowledge and information technology.