I’ve been working with a small local non-profit org on their internal control system. You keep reading about these things and nobody expects it to happen to them until it does.
I currently work with a lot of smaller churches to help them set up a system to keep track of their finances. The board is often highly offended that I suggest yearly audits.
I have a nice speech that can summed up with, even good people can have a moment of weakness so lead them not into temptation.
It generally works.