Ahead of the new 'failure to prevent fraud' (FTP) law, HR must have reasonable training, policies and processes for preventing fraud.