Misconduct Risk Simulation – Working Copy
This model is based on findings from fraud investigations conducted by Prosecure Consulting Inc. and
case studies from Turkey,
and is structured according to ACFE's Fraud Triangle (Pressure, Opportunity, Rationalization)
and Fraud Tree methodologies (Transactional Risks, Conflict of Interest,
Compliance / Governance).
/* ===================== ACFE UYUMLU RİSK MOTORU ===================== */// Şıkların puan karşılıkları
const ANSWER_POINTS = { evet: 4, emare: 2, hayir: 0 };// Risk eşikleri (isteğin doğrultusunda)
const RISK_THRESHOLDS = [
{ name:"Düşük", min:0, max:29, badge:"low" },
{ name:"Orta", min:30, max:59, badge:"med" },
{ name:"Yüksek", min:60, max:84, badge:"high" },
{ name:"Kritik", min:85, max:100, badge:"crit" }
];// 21 soru: id, kategori, ağırlık, label
const QUESTIONS = [
// Pressure (5)
{ id:1, cat:"Pressure", weight:3.0, label:"gelirle uyumsuz yaşam tarzı" },
{ id:2, cat:"Pressure", weight:2.5, label:"borç/avans/yatırım talebi" },
{ id:3, cat:"Pressure", weight:2.0, label:"kumar/bağımlılık duyumu" },
{ id:4, cat:"Pressure", weight:1.5, label:"kişisel kriz kaynaklı stres" },
{ id:5, cat:"Pressure", weight:2.5, label:"iş devrinden veya tatilden kaçınma ve yalnız çalışma" },// Opportunity (4)
{ id:6, cat:"Opportunity", weight:2.5, label:"görevler ayrılığı/tekil onay" },
{ id:7, cat:"Opportunity", weight:2.0, label:"erişim/yetki gözden geçirme yok" },
{ id:8, cat:"Opportunity", weight:2.0, label:"bağımsız denetim/rotasyon yok" },
{ id:9, cat:"Opportunity", weight:2.5, label:"tedarikçi/müşteri ile yakınlık" },// Rationalization (3)
{ id:10, cat:"Rationalization", weight:1.5, label:"adil olmayan muamele algısı" },
{ id:11, cat:"Rationalization", weight:2.0, label:"küçük etik ihlalleri tolere ediliyor" },
{ id:12, cat:"Rationalization", weight:3.0, label:"zayıf tone at the top" }, // yükseltildi// Transactional (5)
{ id:13, cat:"Transactional", weight:2.5, label:"sık düzeltme/mutabakat farkları" },
{ id:14, cat:"Transactional", weight:2.5, label:"dönem sonu şişirme/cut-off hatası" },
{ id:15, cat:"Transactional", weight:2.0, label:"tekrarlı/aynı IBAN-adres ödemeler" },
{ id:16, cat:"Transactional", weight:2.0, label:"tek tedarik/olağandışı yoğunluk" },
{ id:17, cat:"Transactional", weight:2.0, label:"stok/varlık sayım sapmaları" },// Conflict of Interest (2)
{ id:18, cat:"Conflict", weight:3.0, label:"doğrudan çıkar çatışması emareleri" },
{ id:19, cat:"Conflict", weight:1.5, label:"olumsuz medya/söylenti/geçmiş dosya" },// Compliance / Governance (2)
{ id:20, cat:"Compliance", weight:3.0, label:"etik hattı/ihbar mekanizması zayıf" }, // yükseltildi
{ id:21, cat:"Governance", weight:3.0, label:"düzenli fraud risk değerlendirmesi yok" } // yükseltildi
];// Kritik faktör amplifikasyon haritası (12,20,21 için)
const CRITICAL_IDS = new Set([12,20,21]);
// 0/1/2/3 adet "Evet" durumuna göre çarpanlar
const AMPLIFIERS = { 0:1.00, 1:1.08, 2:1.15, 3:1.22 };// Elemanlar
const warnEl = document.getElementById("warn");
const boxEl = document.getElementById("resultBox");
const scoreEl = document.getElementById("score");
const badgeEl = document.getElementById("levelBadge");
const barEl = document.getElementById("bar");
const reportLeadEl = document.getElementById("reportLead");
const findingsSummaryEl = document.getElementById("findingsSummary");
const analysisSummaryEl = document.getElementById("analysisSummary");
const riskGridEl = document.getElementById("riskGrid");
const impactListEl = document.getElementById("impactList");
let lastResult = null;// Yardımcılar
function getAnswerKey(qid){
const sel = document.querySelector(`input[name="q${qid}"]:checked`);
return sel ? (sel.value || "").toLowerCase() : null; // "evet" | "emare" | "hayir" | null
}
function getSelectedPoints(qid){
const key = getAnswerKey(qid);
if(!key) return null;
return ANSWER_POINTS[key] ?? null;
}
function allAnswered(){
for(const q of QUESTIONS){
if(getSelectedPoints(q.id) === null) return false;
}
return true;
}// Skor hesaplama + amplifikasyon
function calculate(){
let sumWeighted = 0;
let sumWeights = 0;const catAgg = {};
let criticalYesCount = 0;for(const q of QUESTIONS){
const pts = getSelectedPoints(q.id);
if(pts === null) continue;sumWeighted += pts * q.weight;
sumWeights += q.weight;if(!catAgg[q.cat]) catAgg[q.cat] = { w:0, s:0 };
catAgg[q.cat].w += q.weight;
catAgg[q.cat].s += pts * q.weight;// kritik sorulara "evet" ise say
if(CRITICAL_IDS.has(q.id) && pts === 4) criticalYesCount++;
}// normalize baz skor (%)
let percent = sumWeights > 0 ? (sumWeighted / (4 * sumWeights)) * 100 : 0;// amplifikatör uygula, 0–100 aralığına sabitle
const amp = AMPLIFIERS[criticalYesCount] || 1.0;
percent = Math.min(100, Math.round(percent * amp));// bandı bul
let band = RISK_THRESHOLDS[0];
for(const b of RISK_THRESHOLDS){
if(percent >= b.min && percent {
const c = catAgg[k];
const p = (c.s / (4 * c.w)) * 100;
return { cat:k, percent: Math.round(p) };
}).sort((a,b)=> b.percent - a.percent);return { percent, band, cats };
}function highlightFirstMissing(){
for(const q of QUESTIONS){
const el = document.querySelector(`input[name="q${q.id}"]`);
if(el && !document.querySelector(`input[name="q${q.id}"]:checked`)){
const card = el.closest(".question");
card.style.boxShadow="0 0 0 2px #fecaca, 0 2px 10px rgba(239,68,68,.25)";
card.scrollIntoView({behavior:"smooth",block:"center"});
setTimeout(()=>card.style.boxShadow="0 2px 8px rgba(0,0,0,.03)",1400);
break;
}
}
}const CATEGORY_LABELS = {
Pressure:"Davranışsal baskı göstergeleri",
Opportunity:"Kontrol ve yetki yapısı",
Rationalization:"Kurum kültürü",
Transactional:"İşlemsel göstergeler",
Conflict:"Üçüncü taraf ilişkileri",
Compliance:"Uyum mekanizmaları",
Governance:"Yönetişim ve gözetim"
};function customerLeadText(bandName){
if(bandName === "Kritik") return "Yanıtlarınız, gecikmeden profesyonel değerlendirme gerektirebilecek risk göstergeleri olabileceğine işaret etmektedir. Sonuçların kapsamı ve önemi yalnızca uzman değerlendirmesiyle belirlenebilir.";
if(bandName === "Yüksek") return "Yanıtlarınız, birden fazla alanda birlikte değerlendirilmesi gereken risk göstergeleri olabileceğine işaret etmektedir. Bu göstergeler mali, operasyonel veya itibari etkilerle ilişkili olabilir.";
if(bandName === "Orta") return "Yanıtlarınız, bazı süreçlerde daha ayrıntılı değerlendirme gerektirebilecek risk göstergeleri olabileceğine işaret etmektedir. Bu göstergelerin kaynağı ve olası etkileri simülasyonla kesin olarak belirlenemez.";
return "Yanıtlarınız, değerlendirilen alanlarda sınırlı sayıda risk göstergesi olabileceğine işaret etmektedir. Bu sonuç risk bulunmadığı anlamına gelmez.";
}function impactLabels(cats){
const m = new Map(cats.map(c=>[c.cat,c.percent]));
const impacts = [];
if((m.get("Transactional")||0) >= 30) impacts.push("Mali kayıp riski");
if((m.get("Opportunity")||0) >= 30) impacts.push("Yetkisiz işlem riski");
if((m.get("Conflict")||0) >= 30) impacts.push("Çıkar çatışması riski");
if((m.get("Compliance")||0) >= 30 || (m.get("Governance")||0) >= 30 || (m.get("Rationalization")||0) >= 40) impacts.push("İtibar ve uyum riski");
return impacts.length ? impacts : ["Kontrol sürekliliği"];
}function publicFindingsText(){
const strong = [], partial = [];
QUESTIONS.forEach(q=>{
const pts = getSelectedPoints(q.id);
if(pts === 4) strong.push(q.label);
else if(pts === 2) partial.push(q.label);
});if(!strong.length && !partial.length){
return "Yanıtlarda belirgin veya kısmi düzeyde bir risk göstergesi işaretlenmemiştir. Bu sonuç risk bulunmadığı anlamına gelmez.";
}const parts = [];
if(strong.length){
const shown = strong.slice(0,4);
parts.push(`Daha belirgin işaretlenen göstergeler: ${shown.join(", ")}${strong.length > shown.length ? ` ve ${strong.length - shown.length} gösterge daha` : ""}.`);
}
if(partial.length){
const shown = partial.slice(0,3);
parts.push(`Kısmi düzeyde işaretlenen göstergeler: ${shown.join(", ")}${partial.length > shown.length ? ` ve ${partial.length - shown.length} gösterge daha` : ""}.`);
}
return parts.join(" ");
}function publicAnalysisText(res){
const focused = res.cats.filter(c=>c.percent > 0).slice(0,2);
if(!focused.length){
return "Yanıtlar belirli bir risk alanında yoğunlaşmaya işaret etmemektedir. Değerlendirme yalnızca verilen yanıtlara dayanır ve mevcut risklerin tamamını dışlamaz.";
}const areas = focused.map(c=>`${CATEGORY_LABELS[c.cat] || c.cat} (%${c.percent})`).join(" ve ");
const impacts = impactLabels(res.cats).join(", ").toLocaleLowerCase("tr-TR");
return `Yanıt örüntüsü özellikle ${areas} alanlarında yoğunlaşmaktadır. Bu görünüm ${impacts} ile ilişkili olabilir. Bulguların kaynağı, kapsamı ve önem derecesi yalnızca bu simülasyonla kesinleştirilemez.`;
}function allAnswersText(){
return QUESTIONS.map((q,i)=>{
const checked = document.querySelector(`input[name="q${q.id}"]:checked`);
const label = checked ? document.querySelector(`label[for="${checked.id}"]`) : null;
return `${i+1}. ${q.label} => ${label ? label.textContent.trim() : "-"}`;
}).join("\n");
}function internalFindingsText(){
const high = [], partial = [];
QUESTIONS.forEach(q=>{
const pts = getSelectedPoints(q.id);
if(pts === 4) high.push(q.label);
else if(pts === 2) partial.push(q.label);
});
return `Yüksek ağırlıklı cevaplar: ${high.length ? high.join(", ") : "Yok"}.\nKısmi göstergeler: ${partial.length ? partial.join(", ") : "Yok"}.`;
}function internalReviewText(cats){
const review = [];
const m = new Map(cats.map(c=>[c.cat,c.percent]));
if((m.get("Transactional")||0) >= 40) review.push("muhasebe kayıtları ve ödeme hareketlerinin kapsamı");
if((m.get("Opportunity")||0) >= 40) review.push("yetki matrisi, görevler ayrılığı ve erişim yönetimi");
if((m.get("Conflict")||0) >= 40) review.push("tedarikçi/çalışan ilişkileri ve çıkar çatışması göstergeleri");
if((m.get("Pressure")||0) >= 40) review.push("davranışsal göstergelerin dayanağı ve zamanlaması");
if((m.get("Compliance")||0) >= 40 || (m.get("Governance")||0) >= 40) review.push("ihbar, iç denetim ve risk raporlama mekanizmaları");
return review.length ? "Ön görüşmede doğrulanabilecek konular: " + review.join("; ") + "." : "Ön görüşmede cevapların dayanağı ve mevcut kontrol yapısı genel olarak doğrulanabilir.";
}// Hesapla ve müşteri raporunu yaz
function computeAndRender(){
if(!allAnswered()){
boxEl.style.display="none";
warnEl.style.display="block";
highlightFirstMissing();
return;
}
warnEl.style.display="none";const res = calculate();scoreEl.textContent = res.percent;
barEl.style.width = res.percent + "%";
badgeEl.className = "badge " + res.band.badge;
badgeEl.textContent = res.band.name;lastResult = res;
reportLeadEl.textContent = customerLeadText(res.band.name);
findingsSummaryEl.textContent = publicFindingsText();
analysisSummaryEl.textContent = publicAnalysisText(res);
riskGridEl.innerHTML = res.cats.slice(0,3).map((c,i)=>`It does not replace an evidence-based investigation; it provides a preliminary assessment of potential misconduct risk indicators within the organization and may indicate the need for professional evaluation. Each question item is evaluated with its unique weighting factor; results are presented in Low / Medium / High / Critical risk bands.
1. Does the employee have a lifestyle that cannot be explained by their income level?
No
2. Does the employee frequently request loans, investments or advances from internal or external sources?
No
3. Are there any reports of the employee engaging in gambling, betting or similar addictive behaviours?
No
Is the employee under significant emotional pressure due to family or health issues or major changes in their life?
No
5. Does the employee frequently work late hours alone, avoiding handing over tasks or taking holidays?
No
6. Is there a lack of separation of duties, or is payment approval concentrated in one person?
No
7. Are system accesses and user permissions not reviewed regularly?
No
8. Is independent auditing or rotation not applied in critical financial processes (procurement, accounting, payment)?
No
9. Is there any unusual closeness between the employee and the supplier, customer or intermediary (gifts, joint activities, personal benefits)?
No
10. Does the employee frequently express that the organisation is not treating them fairly or that they are underpaid?
No
11. Are there any examples of minor ethical violations being overlooked or not punished?
No
12. Is the senior management's commitment to ethical values and the principle of integrity weak (weak tone at the top)?
No
13. Are there frequent adjustment entries or unexplained reconciliation differences in the accounts?
No
Are there any signs of income/expense inflation or cut-off errors at the end of the 14th period?
No
15. Are there any recurring payments with the same amount or the same IBAN/address?
No
16. Is there an unusually high volume of transactions with the same supplier, or is the alternative supplier unavailable?
No
17. Are discrepancies identified in asset or inventory counts that are not reflected in the records?
No
18. Is there any indication of a conflict of interest between the employee and the supplier, such as kinship, partnership, or the same IBAN/address?
No
19. Are there any negative media reports, rumours or past investigations concerning the supplier or employee?
No
20. Is there an Ethics Hotline or reporting system within the company; however, is it not technically operational, or is it unknown to employees or not actively used?
No
21. Does the internal audit or risk management unit regularly assess potential fraud risks and report them to senior management?
No
Please answer all the questions. I'm taking you to the missing question...
Total Risk
Low
0 / 100
Key Findings
Responses will appear here after evaluation.
Analysis Summary
The combined evaluation of risk areas will be summarized here.
Priority Risk Areas
This result does not constitute a finding of misconduct, evidence, or an accusation against any person or institution. The existence, source, and scope of potential risks cannot be determined solely by this simulation.
Let's confidentially discuss what the results mean.
Prosecure experts can evaluate the scope of the indicators and the appropriate professional approach during an initial consultation.
Confidential Initial Consultation Request
Leave your contact information; the Prosecure team will contact you regarding your assessment.
Your personal data will be processed for the purpose of evaluating your initial consultation request. For details, see the Disclosure Text and Personal Data Protection and Processing Policy.
Please fill in the required fields correctly.
Your request has been received. The Prosecure team will contact you.
0${i+1} · Öncelikli alan${CATEGORY_LABELS[c.cat] || c.cat}
`).join("");
impactListEl.innerHTML = impactLabels(res.cats).map(x=>`${x}`).join("");boxEl.style.display="block";
boxEl.scrollIntoView({behavior:"smooth",block:"start"});
}// Hesaplama ve ön görüşme formu
document.getElementById("computeBtn").addEventListener("click", computeAndRender);
document.getElementById("openLeadForm").addEventListener("click", ()=>{
const form = document.getElementById("leadForm");
form.classList.add("open");
form.scrollIntoView({behavior:"smooth",block:"start"});
});document.getElementById("submitLead").addEventListener("click", async ()=>{
const name = document.getElementById("leadName").value.trim();
const email = document.getElementById("leadEmail").value.trim();
const phone = document.getElementById("leadPhone").value.trim();
const company = document.getElementById("leadCompany").value.trim();
const err = document.getElementById("leadError");
const success = document.getElementById("leadSuccess");
const submit = document.getElementById("submitLead");
const emailOk = /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email);
const phoneOk = phone.replace(/\D/g,"").length >= 8;
if(!lastResult || !name || !emailOk || !phoneOk){ err.style.display="block"; return; }err.style.display="none";
submit.disabled = true;
submit.textContent = "Gönderiliyor…";
const fd = new FormData();
fd.append("action","ps_risk_lead_9941");
fd.append("nonce",window.psRisk9941Nonce || "");
fd.append("name",name);
fd.append("email",email);
fd.append("phone",phone);
fd.append("company",company);
fd.append("score",String(lastResult.percent));
fd.append("band",lastResult.band.name);
fd.append("categories",lastResult.cats.map(c=>`${CATEGORY_LABELS[c.cat] || c.cat}: %${c.percent}`).join("\n"));
fd.append("customer_summary",`${customerLeadText(lastResult.band.name)}\nÖne Çıkan Bulgular: ${publicFindingsText()}\nAnaliz Özeti: ${publicAnalysisText(lastResult)}`);
fd.append("internal_findings",internalFindingsText());
fd.append("internal_review",internalReviewText(lastResult.cats));
fd.append("answers",allAnswersText());
fd.append("page_url",window.location.href);
fd.append("privacy_version","Aydınlatma Metni 2026/01");
fd.append("website",document.getElementById("leadWebsite").value);try{
const response = await fetch(window.psRisk9941AjaxUrl || "/wp-admin/admin-ajax.php",{method:"POST",body:fd,credentials:"same-origin"});
const json = await response.json();
if(!json.success) throw new Error("request_failed");
success.style.display="block";
submit.style.display="none";
}catch(e){
err.textContent="Talep şu anda gönderilemedi. Lütfen daha sonra tekrar deneyin.";
err.style.display="block";
submit.disabled=false;
submit.textContent="Başvurumu Gönder";
}
});