<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd"
xmlns:rawvoice="http://www.rawvoice.com/rawvoiceRssModule/"
>

<channel>
	<title>The Security Catalyst&#187; fraud prevention</title>
	<atom:link href="http://www.securitycatalyst.com/tag/fraud-prevention/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.securitycatalyst.com</link>
	<description>harnessing the human side of security</description>
	<lastBuildDate>Wed, 25 Jan 2012 15:57:57 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
<!-- podcast_generator="Blubrry PowerPress/2.0.4" -->
	<itunes:summary>harnessing the human side of security</itunes:summary>
	<itunes:author>The Security Catalyst</itunes:author>
	<itunes:explicit>no</itunes:explicit>
	<itunes:image href="http://www.securitycatalyst.com/wp-content/plugins/powerpress/itunes_default.jpg" />
	<itunes:subtitle>harnessing the human side of security</itunes:subtitle>
	<image>
		<title>The Security Catalyst&#187; fraud prevention</title>
		<url>http://www.securitycatalyst.com/wp-content/plugins/powerpress/rss_default.jpg</url>
		<link>http://www.securitycatalyst.com</link>
	</image>
		<item>
		<title>Organized Fraud Prevention: Putting the L.E.D.E.R To Work</title>
		<link>http://www.securitycatalyst.com/2010/02/organized-fraud-prevention-putting-the-l-e-d-e-r-to-work/</link>
		<comments>http://www.securitycatalyst.com/2010/02/organized-fraud-prevention-putting-the-l-e-d-e-r-to-work/#comments</comments>
		<pubDate>Thu, 25 Feb 2010 14:38:36 +0000</pubDate>
		<dc:creator>Guest Blogger</dc:creator>
				<category><![CDATA[Catalyst Considerations]]></category>
		<category><![CDATA[fraud]]></category>
		<category><![CDATA[fraud awareness]]></category>
		<category><![CDATA[fraud prevention]]></category>

		<guid isPermaLink="false">http://www.securitycatalyst.com/?p=2752</guid>
		<description><![CDATA[By Sharon M. Shaw, CFE Preparing for successful fraud prevention is like preparing for a first child: the environment is carefully scoped out from the childâ€™s level, and anything that could possibly cause the little darling harm is removed. Drawers and cupboards are locked and anything valuable is put out of sight. After the first [...]]]></description>
			<content:encoded><![CDATA[<p><strong>By Sharon M. Shaw, CFE</strong></p>
<div id="attachment_2754" class="wp-caption alignright" style="width: 310px"><a href="http://www.securitycatalyst.com/wp-content/uploads/2010/02/pinkboot.jpg"><img class="size-medium wp-image-2754" title="pinkboot" src="http://www.securitycatalyst.com/wp-content/uploads/2010/02/pinkboot-300x226.jpg" alt="The Pink Boot" width="300" height="226" /></a><p class="wp-caption-text">The Pink Boot (its real)</p></div>
<p>Preparing for successful fraud prevention is like preparing for a first child: the environment is carefully scoped out from the childâ€™s level, and anything that could possibly cause the little darling harm is removed. Drawers and cupboards are locked and anything valuable is put out of sight.</p>
<p>After the first child, prevention becomes more proficient: obvious dangers &#8212; and some not so obvious ones &#8212; are known and accounted for. For example: even though a 250lb, six foot tall man cannot get the paint can open, a three-year-old will &#8212; within seconds &#8212; and no matter how wonderful neon pink looks on the walls, it doesnâ€™t look quite the same on Daddyâ€™s new work boots, or as footprints on the new carpet.</p>
<p>Fraud prevention is similar to childproofing.</p>
<p>Unfortunately fraud footprints are not neon pink and are not always obvious. They can, however, be prevented with some basic common sense. The environment needs to be examined from a potential fraudsters perspective; lessen any obvious risks, and plan for the not so obvious risks.</p>
<p>I have developed a five-part system, dubbed LEDER (pronounced LEADER), to help with this process:</p>
<ul>
<li>Look</li>
<li>Exploit</li>
<li>Define</li>
<li>Explore</li>
<li>Re-Evaluate</li>
</ul>
<h3>LOOK at what rules are currently in place</h3>
<p>First of all define what fraud or wrongdoings are within the organization.</p>
<p>There is no one-size fitâ€™s all: every organization is different and what is acceptable to one company or organization is not acceptable to another.</p>
<p>Does the organization have an ethics policy?</p>
<p>The ethics policy should clearly define what is acceptable behavior, be easy to understand and follow, and should be adhered to from the top down and bottom up.</p>
<p>Many ethicsâ€™ policies say wonderful things but do not clearly define boundaries. They are often generalized with no real meaning to individual employees. A compliance officerâ€™s definition of ethical behavior may be different than a sales agentâ€™s view when he or she is trying to meet the monthly goals.</p>
<h3>Push the Boundaries and EXPLOIT rules</h3>
<p>Permission granted to behave like a three year old &#8211;Â  <strong>e</strong>xploit the defined boundaries.</p>
<p>See how they measure up to everyday protocol. Are they adhered to vigilantly or are deviations used to make the process smoother? Where does the system break down?</p>
<h3>Set the standard, DEFINE the intended rules in plain language</h3>
<p>Without a policy that clearly defines boundaries, it is difficult for people to do the right thing even if they want to. Itâ€™s like being blindfolded and told not to walk off the cliff. Ethical standards need to be set throughout the organization if fraud prevention is to be successful. A well-written policy that clearly defines what can and cannot be done has little meaning if the CEO does not adhere to it, or the top sales person regularly violates it with no consequences.</p>
<h3>EXPLORE, the magic eight balls saysâ€¦</h3>
<p>Brainstorm and <strong>e</strong>xplore the unknown.</p>
<p>Pull out the ethics policy and look at it objectively. What does it really say?</p>
<p>Does it clearly say what can and cannot be done?</p>
<p>What does â€œProtect and ensure proper use of company assetsâ€ actually mean? Maybe it is okay to use the company fuel card to fill up personal vehicles; after all, the card was kept safe and only used for its intended purpose.</p>
<p><strong> </strong></p>
<p>Plan for the unusual (but believable).</p>
<p>The more events that are planned for the more likely the organization is to stave off fraud in the future. Creating extra steps to obtain valuable information or assets will deter would be fraudsters since most fraudsters follow the path of least resistance.</p>
<p>Organizations whose employees clearly understand the ethical values of the company, and adhere strictly to them, have a far better chance of preventing and detecting fraud than a company who has a well-written ethics policy that nobody really understands.</p>
<h3>RE-EVALUATE and adapt</h3>
<p>Were procedures exploitable?</p>
<p>Are there possible events that were not planned for?</p>
<p>Successful fraud prevention requires that knowledge be turned into power. To have power against fraud, policies and procedures must be continually <strong>r</strong>e-evaluated to ensure they are resilient. Look again; what can be adapted to thwart those magic eight ball scenarios.</p>
<p>By â€œfollowing the LEDERâ€ it is possible to get better results:</p>
<ul>
<li><strong>Look</strong> â€“ What have you got?</li>
<li><strong>Exploit</strong> â€“ Can it be broken?</li>
<li><strong>Define</strong> â€“ What do the rules really mean?</li>
<li><strong>Explore</strong> â€“ What could happen</li>
<li><strong>Re-Evaluate</strong> &#8212; Redefine policies so there are fewer opportunities for fraud to occur. .</li>
</ul>
<p>Share your experience in the comments below.</p>
<p>Knowledge is power and together we are stronger in the fight against fraud.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.securitycatalyst.com/2010/02/organized-fraud-prevention-putting-the-l-e-d-e-r-to-work/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Are You Using The Three â€œPâ€™sâ€ Of Successful Fraud Prevention?</title>
		<link>http://www.securitycatalyst.com/2010/01/are-you-using-the-three-%e2%80%9cp%e2%80%99s%e2%80%9d-of-successful-fraud-prevention/</link>
		<comments>http://www.securitycatalyst.com/2010/01/are-you-using-the-three-%e2%80%9cp%e2%80%99s%e2%80%9d-of-successful-fraud-prevention/#comments</comments>
		<pubDate>Wed, 27 Jan 2010 11:11:12 +0000</pubDate>
		<dc:creator>Guest Blogger</dc:creator>
				<category><![CDATA[Catalyst Considerations]]></category>
		<category><![CDATA[fraud]]></category>
		<category><![CDATA[fraud awareness]]></category>
		<category><![CDATA[fraud prevention]]></category>

		<guid isPermaLink="false">http://www.securitycatalyst.com/?p=2708</guid>
		<description><![CDATA[By Sharon Shaw Their SUV deeply submerged in a snowdrift John and Starry, through marital â€œdiscussion,â€ determine their GPS might have been wrong to suggest that last turn. Effective fraud prevention requires an encompassing approach that looks at the chain of events before and after the current point &#8212; often called a 360-degree review. Skip [...]]]></description>
			<content:encoded><![CDATA[<p><strong>By Sharon Shaw</strong></p>
<blockquote><p><em>Their SUV deeply submerged in a snowdrift <a href="http://www.oregonlive.com/news/index.ssf/2009/12/couple_stranded_3_days_in_east.html">John and Starry</a>, through marital â€œdiscussion,â€ determine their GPS might have been wrong to suggest that last turn.</em></p></blockquote>
<p>Effective fraud prevention requires an encompassing approach that looks at the chain of events before and after the current point &#8212; often called a 360-degree review. Skip this step and end up charting a course of action that has similar results to John and Starryâ€™s adventure. Blindly relying on technology alone like John and Starry did does not ensure an unscathed surfacing from a potential fraud whiteout.</p>
<h2>Use the three Ps: Past, Present and Potential</h2>
<p>Potential is only realized after acknowledgement of the present and the past.</p>
<p>To be successful in fraud prevention requires a plan to effectively utilize all known facts, good or bad, and accounts for potential outcomes.</p>
<h3>Accept the Past &#8212; No Matter How Unbelievable</h3>
<p>Ask Harry Markopolos, the whistleblower in the Madoff downfall, how it ends if the reality of a situation is ignored. Had authorities taken heed of his earliest warnings the Madoff losses may not have been quite so devastating for so many.</p>
<p>As children we learn to avoid the truth (and responsibility) to escape the wrath of the unknown. As adults this learned response is sometimes forced to continue to satisfy unrealistic goals.</p>
<p>Accepting responsibility for what is happening is one of the hardest lessons to learn and some are determined to never master this ability.</p>
<p>Accepting the past â€“ as it happened â€“ is important in order to understand the path to effective fraud prevention in the future.</p>
<h3>Realize the Present</h3>
<p>Take a deep breath and acknowledge the current situation.</p>
<p>This is often an iterative process, and may require a bit more thought than initially considered. When it comes to business â€“ the initial situation may appear that sales are being lost (and revenue declining) at an alarming rate. But is this the symptom, or the problem?</p>
<p>In this example, acknowledging the present requires going a bit deeper. Probe the cause(s) of the loss in sales. Is the service quality lacking, are delivery times unacceptable or is a competitor undercutting the pricing structure with major clients?</p>
<p>To uncover the truth often requires questions, conversations, patience and the stomach to face what the real challenge may be.</p>
<p>The upside of taking the time to do this is that preventing fraud is much easier when the real problem is known and defined. By dealing with the surface issues and ignoring underlying problems, the opportunity to prevent the seeds of fraud from germinating is missed. Only by removing the seed can fraud prevention be effective.</p>
<h3>Harness the Potential</h3>
<p>So where does the third P, potential, come in to play?</p>
<p>Once the problem is analyzed to the root, it needs to then be considered with the lens of â€œpotentialâ€ â€“ what will happen if action is not taken?</p>
<p>In our example, a loss of sales and revenue can easily put an organization out of business and these affects can be further reaching:Â  they can have a detrimental effect on the community and the world economy as a whole.</p>
<h2>Ready to strap on a cape and save the world?</h2>
<p>Baby steps lead to great things and the first step is the most important.</p>
<p>Resolve to step back and engage the three Pâ€™s of a current challenge. By analyzing the real challenge, it is possible to take control, move forward and devise a more productive plan.</p>
<p>Taking control is scary it means assuming responsibility for future, unknown, events.</p>
<h3>To Decrease Fraud Risks, Review The Alternatives</h3>
<p>The effects of fraud may not yet be felt, however if the situation goes unchecked it may not be long until they are. Talk with those involved and ask what suitable solutions could be. If both sides understand and are committed to a common goal an effective solution is easier to implement and has a higher chance of success.</p>
<h3>Donâ€™t hang up the cape yet; there is still work to be done.</h3>
<p>The real problem has been found, the solution evaluated and a plan devised to implement that solution so, thatâ€™s it right?</p>
<p>Wrong, the process is not complete.</p>
<p>Successful fraud prevention is a continuous cycle that never stops. A plan devised from future goals and past experiences must be continually re-evaluated in order to be continually successful. Organizations and goals change from minute to minute so what works to prevent fraud today may not work tomorrow.</p>
<p>To stay one step in front of fraud, prevention plans have to be continually adapted to encompass new discoveries.</p>
<p>The journey of fraud prevention is only successful if everyone involved is willing to communicate and share insights. The past is key to understanding how the present became present and without understanding the present potential cannot be envisioned.</p>
<p>I challenge you to use the three Pâ€™s to improve one of your current activities and reduce the potential for fraud within the organization.</p>
<p>Share your ideas; questions and experience in the comments below to help us all improve.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.securitycatalyst.com/2010/01/are-you-using-the-three-%e2%80%9cp%e2%80%99s%e2%80%9d-of-successful-fraud-prevention/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

