It's not that hard to design internal controls that prevent a few compromised individuals from stealing too much.
It is that hard to design internal controls that prevent a theft when 100% of the staff are in the same room with their computers and guns to all of their heads.
