It's the same old story. A "trusted" employee is given too much authority, internal controls are inadequate or circumvented. The person "who would never do such a thing" is the one who does just that. As an auditor for 25 years, it has been my neverending job to stress the need for internal controls and separation of duties to my clients. Those that listen don't have frauds, or catch them early. Those that don't unfortunately sooner or later get stung.