What steps can organizations take to avoid corporate fraud and penalties