Executives say poor internal controls contribute most to fraud