Improving processes are really easy, first map and document your processes !
There is a popular scam in the UK whereby people who are in the process of buying a house are told by the “Bank” their account numbers / email addresses / contacts have changed … then low and behold you have just lost 100k deposit and the Bank has no idea what you are talking about !
Your friend needs to protect his reputation and assets, his bank doesn’t care so processes and controls and procedures are super important but not sexy at all.