[lordlimecat]

Why not just claim that your network could not possibly be compromised despite no IDS / HIDS / AV? I'm sure there would be no evidence there, either.

What evidence of fraud would you expect? How would anyone know? And given the sophistication of fraud these days (bypassing 2fa, number porting, etc) - - how could you possibly expect zero fraud in a system whose only controls are human?