It all started with a small anomaly. An invoice didn’t match a PO. A supplier’s name was altered. A payment was approved ...