D, ideally lower. The fraud and cheating will usually start small but if they get away with it, they are likely to scale up, so it must be dissuaded from the start.
I have a friend who ran a private midsize tech company. His cofounder, who oversaw the financial side of the business, hired his secret mistress as an office manager and when they got larger, the controller. Over several years she embezzled many hundreds of thousands, possibly more than a million, including using corporate cards for family vacations and such. The cofounder couldn't do anything because the mistress was blackmailing him, and my friend had no idea until they had an outside audit done. In the end she basically got a slap on the wrist.