When Powerful Executives Believe the Rules Do Not Apply to Them: The Walmart Vice Chairman Fraud Case

11 minutes ago

12 min read

What Tom Coughlin's Expense Fraud Reveals About Executive Entitlement, Organizational Culture, and the Failure of Governance

John C. Blackshire, Jr. The Accountware Group (TAG) | Corporate Governance, Executive Accountability, and Internal Controls

Why would an executive earning millions of dollars annually commit fraud involving personal expenses that he could easily afford?

Why would someone who had achieved extraordinary professional success risk his reputation, career, and freedom for comparatively modest financial benefits?

And why would employees help a powerful executive process questionable transactions rather than challenge his conduct?

These questions are at the center of the remarkable case of Thomas M. "Tom" Coughlin, former Vice Chairman of Walmart.

Coughlin was not an obscure employee operating without supervision. He was one of the most influential executives in one of the world's largest corporations.

He had spent decades helping build Walmart's operations, had worked closely with founder Sam Walton, and had achieved a position of extraordinary corporate influence.

Yet in January 2006, Coughlin pleaded guilty to five felony counts of wire fraud and one count of filing a false tax return.

His misconduct involved false expense reimbursements, manipulated invoices, corporate gift cards, and the improper use of company resources.

The case illustrates a fundamental governance problem:

What happens when an executive becomes so powerful that employees hesitate to enforce the organization's rules against him?

That question is relevant far beyond Walmart.

It applies to corporations, banks, nonprofit organizations, government agencies, and public school districts.

The Accountware Group believes the most important lesson from the Coughlin case is not simply that a highly compensated executive committed fraud.

It is that organizations must maintain internal controls capable of functioning even when the person being controlled is the most powerful executive in the room.

1. The Walmart Vice Chairman Who Did Not Need the Money

Tom Coughlin joined Walmart in 1978 and rose through the company's management ranks.

He held senior operating positions and ultimately became Vice Chairman.

By 2004, his annual compensation reportedly exceeded $4 million.

His professional standing, compensation, and access to corporate resources made him an unlikely candidate for the kind of expense fraud commonly associated with employees facing personal financial pressure.

Yet Walmart's internal investigation identified misconduct involving expense reimbursements, invoices, gift cards, and merchandise.

Coughlin pleaded guilty in January 2006 to five wire fraud counts and one false-tax-return count.

In August 2006, he was initially sentenced to five years of probation, including home detention, a fine, and restitution. That sentence was subsequently reversed and remanded for resentencing.

The financial misconduct was real, but the underlying motivation remains an important unanswered question.

Why would an executive with substantial compensation engage in such behavior?

A useful starting point is to recognize that financial need and the desire to obtain financial benefits are not the same thing.

People can misuse organizational resources without experiencing financial hardship.

This distinction is particularly important when evaluating executive fraud.

2. The Fraud Triangle Does Not Tell the Entire Story

The traditional Fraud Triangle identifies three conditions commonly associated with fraud:

Pressure: The individual experiences a motivation or incentive to commit misconduct.
Opportunity: Weak controls or management override allow the misconduct to occur.
Rationalization: The individual develops a justification for behavior that would otherwise be recognized as dishonest.

The model is useful, but executive fraud can be more complicated.

In Coughlin's case, the opportunity to misuse company resources is relatively easy to understand.

He possessed significant organizational authority.

Employees and business processes were subject to his influence.

The traditional financial-pressure explanation is less obvious.

The available public record does not establish that financial hardship motivated his conduct.

That raises the possibility that other factors, such as entitlement, status, personal gratification, or perceived privilege, may help explain why some executives commit fraud.

These are analytical possibilities, not proven conclusions about Coughlin's private thoughts.

3. The M.I.C.E. Model: Understanding Executive Motivation

The M.I.C.E. model provides another way to examine possible fraud motivations.

It identifies four categories:

Factor	Potential motivation
Money	Financial gain, personal benefits, or greed
Ideology	Beliefs, loyalty, or perceived organizational purpose
Coercion	Pressure, threats, or influence from others
Ego	Entitlement, status, recognition, or perceived superiority

The model does not establish why a particular person committed fraud.

It helps investigators and governance professionals develop questions and examine potential risks.

For the Coughlin case, Money is evident in the improper personal benefits obtained.

Ego presents an interesting hypothesis because of his extraordinary corporate position.

Ideology is relevant to examining an explanation he offered concerning purported union-related activities, although Walmart reported that its investigation did not substantiate that explanation.

Coercion raises questions about the influence senior executives may exercise over employees who process questionable transactions.

The M.I.C.E. model is particularly valuable when the perpetrator is already financially successful.

4. Executive Entitlement: When Leadership Becomes Personal Privilege

One possible explanation for misconduct by powerful executives is entitlement.

Entitlement develops when individuals come to believe that their position, contributions, or authority justify privileges unavailable to others.

An executive might begin to regard organizational resources as an extension of personal resources.

A questionable expense may be rationalized as a small reward for years of service.

An exception to policy may become routine.

Employees may learn that challenging the executive is unwelcome.

Over time, these practices can weaken the organization's ethical culture.

Was entitlement the motivation behind Coughlin's misconduct?

The available record does not establish that conclusion.

However, the case demonstrates why organizations should assess whether executive authority creates opportunities for inappropriate personal benefits.

A corporate policy that applies to employees but is routinely bypassed for senior leadership is not an effective control.

The real test of an organization's ethical culture is whether its rules apply to the people with the greatest power.

5. The Sidekick Problem: Why Employees May Help Executives Commit Fraud

One of the most important aspects of executive fraud is the involvement of other employees.

The Coughlin case involved manipulated documentation and transactions processed through company personnel and systems.

This raises a fundamental question:

Why would employees participate in transactions that benefited a senior executive improperly?

Several possibilities exist.

An employee may believe the executive has authority to approve the transaction.

Another may recognize the irregularity but fear career consequences for refusing.

Some may feel personal loyalty to the executive.

Others may knowingly participate for their own benefit.

The actual motivations of individual employees require evidence.

Nevertheless, the governance problem is clear.

An employee cannot provide truly independent approval when the employee believes that questioning the executive could threaten their employment or advancement.

This is why traditional segregation of duties may not prevent executive fraud.

Segregation of duties assumes that separate individuals will perform their responsibilities independently.

But when a senior executive can influence multiple employees, the apparent separation may provide little protection.

Organizations must design controls that account for authority, influence, and potential collusion.

6. The Organizational Culture Problem

Corporate culture is not defined primarily by mission statements, codes of conduct, or employee training materials.

It is reflected in what leaders actually do and what the organization tolerates.

If employees are disciplined for violating expense policies while executives receive exceptions, the organization sends a powerful message.

If managers are discouraged from questioning leadership, the control environment becomes weaker.

If executives can override established procedures without meaningful review, the organization creates opportunities for abuse.

The COSO Internal Control–Integrated Framework recognizes the importance of integrity, ethical values, and independent oversight.

COSO Principle 1 addresses the organization's commitment to integrity and ethical values.

Principle 2 addresses the oversight responsibilities of the Board.

These principles are especially important when evaluating senior executive conduct.

An organization can have excellent written procedures and still operate with an ineffective control environment.

The key issue is whether those procedures function when an influential executive wants an exception.

7. Management Override Is an Entity-Level Risk

Management override occurs when individuals with sufficient authority circumvent established internal controls.

It is a particularly significant risk because many controls depend on management's willingness to enforce them.

Consider a hypothetical organization with a purchasing policy requiring independent approval for expenditures above $10,000.

The policy appears reasonable.

But what happens if the CEO instructs a subordinate to divide a $30,000 purchase into smaller transactions?

What happens if the CFO is directed to approve an unsupported reimbursement?

What happens if employees are told that an unusual payment is confidential and should not be questioned?

The organization may have technically documented controls while failing to enforce them.

Executive fraud prevention therefore requires more than transactional controls.

It requires effective Board oversight, independent escalation channels, and the ability to investigate senior management without interference.

8. Why the Board Cannot Rely Exclusively on the CEO

Boards of Directors often depend heavily on the CEO for information about organizational operations.

That dependence is understandable.

The CEO has access to employees, financial systems, operational reports, and management discussions.

However, excessive dependence creates a serious governance vulnerability.

If the CEO controls the information provided to the Board, influences the employees responsible for internal controls, and determines which concerns are escalated, the Board may lack an independent understanding of significant risks.

The Board must therefore establish information channels that do not depend entirely on the CEO.

These should include appropriate direct access to Internal Audit, external auditors, legal counsel, compliance personnel, and protected reporting mechanisms.

When allegations concern the CEO, the Board should be capable of commissioning an independent investigation.

The executive under review should not control the investigation's scope, evidence, or conclusions.

9. What Should an Audit Committee Learn From Walmart?

The Coughlin case raises several questions that Audit Committees should examine.

Who reviews the CEO's expenses?

A review performed by an employee who reports directly to the CEO may not provide sufficient independence.

Can the CEO override established policies?

The Committee should understand how exceptions are approved and documented.

Can employees report concerns without retaliation?

Reporting channels should allow concerns involving senior management to reach an appropriate independent authority.

Does Internal Audit evaluate executive expenses and benefits?

Senior executive transactions should not automatically be excluded from the audit universe.

Are small but repeated exceptions investigated?

Repeated misconduct involving modest amounts may reveal significant weaknesses in the control environment.

Who investigates allegations against senior management?

The organization should have procedures for assigning independent responsibility when the subject is the CEO or another influential executive.

These questions are relevant to every organization entrusted with significant resources.

10. The Special Risk in Public School Districts

The Walmart case offers important lessons for public education.

A school district superintendent occupies a position of considerable authority.

The superintendent typically influences senior management appointments, organizational priorities, financial decisions, and the information presented to the Governing Board.

The CFO and other senior administrators may report through the superintendent's management structure.

That arrangement creates a legitimate chain of command.

But it can also create challenges when the conduct or decisions of the superintendent require independent review.

Consider hypothetical situations involving a school district:

A superintendent submits travel expenses without adequate supporting documentation.
A senior administrator authorizes expenditures that do not comply with district policies.
Employees are asked to process questionable payments because the request came from executive leadership.
A manager hesitates to report an irregularity involving the superintendent.
The Governing Board receives assurances from management without independent supporting evidence.

These scenarios do not establish wrongdoing by any particular superintendent or district.

They illustrate risks that a Governing Board should consider when evaluating its governance structure.

Public school districts face an additional accountability obligation because the resources involved belong to taxpayers.

A superintendent should not receive less financial scrutiny than an ordinary employee merely because the superintendent holds the district's highest administrative position.

11. The GAO Green Book: Ethical Leadership and Oversight

The Government Accountability Office's Standards for Internal Control in the Federal Government, commonly known as the Green Book, provides a useful framework for evaluating these risks.

The Green Book is mandatory for federal agencies and may serve as an internal control framework for state and local governments where applicable.

Several principles are particularly relevant.

Principle 1 — Demonstrate Commitment to Integrity and Ethical Values
Management should establish and reinforce expectations for ethical conduct.
Principle 2 — Exercise Oversight Responsibility
The oversight body should evaluate the organization's internal control system.
Principle 3 — Establish Structure, Responsibility, and Authority
Management should define responsibilities and establish appropriate reporting relationships.
Principle 5 — Enforce Accountability
Management should hold individuals accountable for their internal control responsibilities.
Principle 8 — Assess Fraud Risk
Management should consider the potential for fraud when identifying and analyzing risks.

These principles demonstrate that preventing executive misconduct is not solely an Internal Audit responsibility.

Management owns the internal control framework.

The governing body exercises oversight.

Internal Audit provides independent assurance.

If a CEO or superintendent is implicated in misconduct, the governing body must ensure that an appropriately independent process addresses the concern.

12. The Danger of a Board That Does Not Ask Difficult Questions

A Board can unintentionally weaken its own oversight role by becoming overly dependent on executive management.

Board members may assume that an experienced CEO has already addressed important control issues.

They may hesitate to challenge a successful executive.

They may accept explanations without requesting supporting documentation.

In some organizations, the Board's culture may emphasize maintaining a cooperative relationship with management more than independently evaluating management's performance.

The result can be an oversight process that works adequately during routine operations but struggles when serious executive concerns arise.

The Walmart case illustrates why Board oversight must be capable of examining even highly respected and influential leaders.

The relevant question is not whether the executive has a strong reputation.

It is whether the organization's controls provide reliable evidence that its resources are being used appropriately.

13. Why Small Frauds Can Reveal Large Governance Problems

One of the most important lessons from the Coughlin case concerns the relationship between transaction value and governance significance.

An improper reimbursement of a few hundred dollars may not materially affect the financial statements of a multibillion-dollar organization.

However, the same transaction may reveal that a senior executive can direct employees to falsify records or bypass established procedures.

That is a fundamentally different risk.

The amount involved may be financially small.

The control environment implications may be substantial.

This is why auditors should consider qualitative materiality.

Evidence of intentional executive misconduct can be important even when the immediate financial loss is modest.

A governing body should not dismiss established dishonesty simply because the dollar amount is small relative to the organization's annual budget.

14. Internal Audit Must Be Independent of Executive Influence

An effective Internal Audit function should have sufficient organizational independence to evaluate management conduct and control effectiveness.

The IIA Global Internal Audit Standards emphasize governance arrangements that support

Internal Audit's independence and direct interaction with the Board.

In an organization where the Chief Audit Executive reports administratively to the CEO, functional oversight by the Audit Committee becomes especially important.

The Committee should be able to communicate privately with Internal Audit and receive reports concerning significant management risks.

When an allegation involves the CEO, the Committee should ensure that the investigation is not controlled by the executive under review.

Internal Audit should evaluate the effectiveness of controls, identify supported findings, and report significant risks.

Management should own corrective action plans.

The Board should make decisions concerning executive accountability.

These responsibilities should remain clearly separated.

15. Seven Governance Improvements Every Board Should Consider

The Coughlin case supports a practical governance agenda.

Establish independent review of senior executive expenses. No executive should have unrestricted authority to approve personal reimbursements or benefits.
Require documentation for exceptions to policy. Exceptions should be justified, independently authorized, and available for review.
Protect employees who report executive misconduct. Reporting mechanisms must operate outside the control of the executive implicated.
Include management override in fraud risk assessments. The organization should evaluate how executives could circumvent normal procedures.
Give Internal Audit meaningful access to the Audit Committee. Significant concerns should be capable of reaching the governing body without management interference.
Review organizational culture, not merely written policies. The Board should understand whether employees believe the rules apply equally to senior management.
Require documented corrective action when weaknesses are identified. Management should establish corrective actions, and independent assurance should evaluate their effectiveness.

These practices are relevant to corporations, public agencies, nonprofit organizations, banks, and school districts.

16. The Most Important Question: Does Executive Power Change the Rules?

The Coughlin case is compelling because of the contrast between his financial success and the relatively ordinary nature of the misconduct.

He did not need to be impoverished to misuse company resources.

He did not need to be an accounting specialist to manipulate expense procedures.

His organizational authority created opportunities that might not have been available to an ordinary employee.

The precise psychological reasons for his decisions remain uncertain.

But the case demonstrates a broader governance risk:

When executives can influence the people responsible for enforcing internal controls, the organization may have less effective protection against senior management misconduct than against ordinary employee misconduct.

That possibility should concern every Board and Audit Committee.

The answer is not to presume that executives are dishonest.

It is to establish a governance system that does not depend on assuming they will always act appropriately.

Conclusion: The Higher the Authority, the Greater the Need for Independent Oversight

Tom Coughlin's misconduct provides an important lesson about the relationship between executive power and organizational accountability.

The traditional Fraud Triangle helps explain how pressure, opportunity, and rationalization may contribute to fraud.

The M.I.C.E. model broadens the analysis to consider Money, Ideology, Coercion, and Ego.

In Coughlin's case, financial benefits and misconduct are documented.

Ego and entitlement are possible explanations, but they are not proven psychological findings.

The involvement of other employees raises important questions about authority, loyalty, and the effectiveness of independent controls.

For the Accountware Group, the central lesson is about governance.

A Board cannot rely exclusively on the character, reputation, or professional success of the CEO.

An Audit Committee cannot assume that controls are effective merely because policies exist.

And Internal Audit cannot provide meaningful assurance if it lacks the independence necessary to examine senior executive conduct.

The same principles apply to public school districts, where superintendents and senior administrators exercise substantial authority over taxpayer resources.

The true strength of an organization's internal control environment is demonstrated when its controls operate effectively against the people who have the greatest power to override them.

A strong governance system does not exempt its leaders from accountability.

It holds them to the same ethical standards expected of everyone else.