When considering the costs of fraud and non-compliance with financial regulations, most people immediately focus on the large headline numbers.