This is a very tricky one. Our experienced Office Manager (with finance responsibilities) sadly fell for a scam online. She received emails from our "School's Business Manager" who was abroad on holiday at the time, asking her to transfer some money (twice). To cut a long story short, she did transfer the money. It was only when the SBM returned that we realised what had happen, and the emails were not from the SBM at all but been sent by scammers.
The Office Manager sadly had not followed the protcol in place whereby there needs to be two signatures when dealing with money and transfers etc, but worse was that the Office Manager actually went into the bank and did the transfer and the bank didn't follow the protocol either. Luckily, due to this, it does look like we will receive the money back from the bank.
BUT, my question is should we start the disciplinary process with the Office Manager (following a full investigation etc) or should we just put it down to really bad judgment and know that everyone has learnt from this.
Thanks,
Jenny