Until recently, a percentage of organizations discounted risk related to external fraud attempts. Most were only concerned with protecting physical assets such as inventory or fixed assets. However, because of the many highly publicized corporate hacking events, such as the ones that affected the Colonial Pipeline and JBS Meats, more attention is being paid to external fraud risk of all type. In this session, we look at what is included in a definition of external fraud and then delve into specific control issues that can give rise to increased risk. We then discuss measures that organizations can employ to help reduce exposure to external attacks.