I don't have specifics, but it's something like the embezzler being in charge of the accounting. so that scheme holds up as long as no one else looks at the books. Sensible companies have enforced vacations for anyone who has that sort of responsibility.