Redesigning controls after a major fraud and resilience failure