What are the risks related to the OC078 rule related to Create and Maintain Customers vs Create and Maintain AR Receipts?

Without access to physical cash, the risk requires collusion with the customer. With access to cash risk is that an employee could set up a fictitious customer, order goods to be sent to them at their home or other address and a fictitious cash receipt entered to clear the transaction.