There is no universally correct ratio of vendor-to-in-house fraud detection, and anyone selling you one is selling you something.

https://www.securitymagazine.com/articles/102553-the-vendor-you-cant-see-behind-the-curtain