I worked at one place where failure to lock your computer if you were away from your desk was a disciplinary offence.
The reason was that someone who was about to do a supplier payment run left their desk with her computer open and one of the other staff members went in and changed the supplier bank details to their own, executed the payment and left the building.
By the time the fraud was detected and investigated the person had transferred the money offshore and left the country.