| |
 |
 |
| Volume 3, Issue 1 |
November 2005 |
 |
|
About Per Mar
Contact Us
CORPORATE OFFICE Per Mar
Security Services Per Mar Centre 1910 East Kimberly
Rd Davenport, IA 52807 Tel# 1-800-4-PERMAR (737627) Fax #
563-359-6700
|
|
|
| Who
is Paying to Keep our Country Safe? |
|
According to a new report by the Internal
Revenue Service, high income earners appear to be paying more for
our national security than anyone else. An analysis of 2003 returns
(the most recent year available) reveals that the top 1% of filers
paid 34.3% of all federal income tax collected. While their adjusted
gross income (AGI) was more than $295,000, they made just 16.8% of
all AGI. The top 5% paid 54% of the total income tax collected and
made 31% of total AGI. They had incomes of $130,000 or more. The top
10% of all filers, those with an AGI of at least $94,900, bore 66%
of the income tax burden, while contributing a little more than 42%
of the total AGI. The bottom 50% of filers paid just 3.5% of the
total income tax. The lowest earners actually had a negative income
tax rate and received "refunds" while paying no taxes at all.
The report however does not tell the entire
story. While our gross domestic product exceeds $11.7 trillion, our
national debt is now more than $8 trillion, or approximately $26,963
for every man, woman, and child in the country. The day President
Bush took office in 2001, the debt was $5.7 trillion and the federal
budget had projected a surplus of more than $10 trillion over the
next ten years. 9/11, the global war on terrorism and more than our
share of natural disasters have since gobbled up that surplus. Today
instead, the U.S. is operating on a deficit of approximately $1.6
billion a day. No, it is not high income earners who are paying to
keep our country safe, it is our children and our grandchildren.
Unless our lawmakers get control of our spending, today's security
will be dearly paid with our children's money tomorrow.
top
|
|
| FDIC
Implements New Guidelines for Fraud Hotlines |
|
The Federal Deposit Insurance Corporation (FDIC) has
recently issued new guidance on the implementation of fraud hotlines
for financial institutions. The FDIC took notice of findings from
the Association of Certified Fraud Examiners (ACFE) in its 2004
"Report to the Nation," which indicated that organizations without
mechanisms in place to report fraud suffered losses that were more
than twice as high as organizations with anonymous incident
fraud-reporting systems.
The new FDIC guidelines instruct organizations on the
implementation of a hotline and the characteristics that should be
inherent within the hotline. The hotline should be anonymous and
adhere to privacy and whistleblower protections, specifically
allowing an employee who wishes to report fraud to do so in a
fashion that their identity remain anonymous. Ideally, a third party
should provide the hotline, therefore increasing the confidence the
complainants will have in reporting misconduct. Furthermore,
organizations are directed to have a tracking system in place so
that reports are followed up and investigated if necessary, so that
reporters and management can learn the disposition and the final
closure of the complaint.
Here are some good questions to ask when selecting an
anonymous incident reporting system:
- Do the calls go to a 24/7 call center?
- Can reports be made via the internet?
- Are the call takers trained to receive all types
of reports?
- What is the report dissemination and retention
system?
- How easy is the roll-out?
- Is the user interface easy to use?
- What level of consulting and support is there for
significant incidents?
top |
|
| Do
Employees' Tunes Hurt or Help? |
|
With the proliferation of high capacity
portable music players entering the workplace, the question has
arrived as to whether employees should be allowed to use these
devices while working or if they hurt productivity, communication,
and security.
As many offices have adopted the space-efficient cubicle to
house its' employees, those same employees have responded by
listening to personal, portable music players to compensate for the
workplace distractions of keyboards, copiers, and loud
co-workers.
Some companies encourage employees to listen to music, but
they have ulterior motives: Yahoo!, for example, just launched a
beta version of its Yahoo! Music product and is using its employees
to test the product.
Some workplace consultants argue that allowing workers to
listen to their own music gives them more personal freedom and
control over their work environment, which can improve employee
morale. Some studies suggest that music is associated with increased
productivity, especially classical music.
Other workplace experts assert that workers who are plugged
into their own music interact, talk, and socialize less with their
colleagues, which can mean more stress and undermine teamwork in the
long run.
Some companies recognize the security issues associated with
having portable music players in the workplace and have made policy
changes to compensate. Portable music players can be used to bypass
firewalls, download and store sensitive information, and even
introduce viruses, and, if connected to a company network when
performing these functions, can compromise the security of that
network. Our advice? Adopt a policy that clearly defines the
acceptable use of personal music players in the workplace.
top |
|
| Get
to Know: Benford's Law |
|
There are several methods employed by fraud examiners to
find instances of fraud, but one of the most useful tools is also
one of the oldest and most fascinating to boot.
In the 1920's, a General Physicist at General
Motors named Frank Benford observed that the pages of his logarithm
table book with an initial digit of "1" were far more worn out than
the pages for "2," which were more worn out than the pages for "3,"
and so on through "9" (the modern equivalent would be to notice that
the "1" and "2" buttons on a calculator were the most worn out).
Seeking to understand why logarithm tables, which were used to
multiply or divide large numbers, behaved this way, Benford
underwent years of exhaustive research. Benford's Law, as it came to
be known, determined that the first digits of real-world numbers,
such as populations, street addresses, numbers from a ledger, or any
other numbers with a quantitative relationship, fall into a
predictable distribution. In Benford's Law, a set of numbers will
have within it about 30.1% of its numbers starting with "1," about
17.6% starting with "2," about 12.4% starting with "3," and in
descending order all the way down to 4.5% starting with "9." The
distribution of the second, third, and fourth digits in a number set
can be similarly predicted.
What does Benford's Law mean for fraud detection? Well,
fraudsters typically cook the books with fictitious numbers, or what
Benford called anomalous numbers, like writing a check to a dummy
account for $9,987.23. In a large data set, one can look at the
distribution of the first, second, third, and fourth digits and find
individual numbers which are anomalous and don't conform to
Benford's Law. In a large data set, a number like 9,987 doesn't
occur very often (it occurs quite rarely compared to four-digit
numbers that start with "1") and, while the fraudster thinks they
are being clever and not arousing suspicion by staying just below
the 10,000 dollar mark, the check will be suspect.
There have been many advances in Benford's Law since the
1920's, and many other fascinating applications of the theory. To
learn more about Benford's Law, visit http://www.nigrini.com/Benford's_law.htm.
top |
|
|
Quote of the Month: "Better be despised
for too anxious apprehensions, than ruined by too confident
security." - Edmund Burke (1729 - 1797)
|
|
| New
Angle for Online Phishing Attacks: Job Hunters and Background
Checks |
|
Phishing, or the art of scamming compromising information
through Internet means, has once again mutated. We have all been
warned to be wary of giving personal information to bad guys posing
as credit card companies, banks, eBay, or PayPal, but it is now
necessary to be concerned about online job offers and background
check forms.
Many identity-theft con artists are contacting job hunters
who have posted resumes online. The phishers respond to the resume
by making a job offer and then ask for a Social Security number
and/or birth date, with the understanding that the victim will be
filling out an online job application. This practice can also occur
for those who are asked to complete a form for a background
check.
The reality is that few companies actually ask job
candidates to complete an online job application, as there is a high
cost to set up and maintain such a system. The exception would be
large companies that can handle such a cost and receive a high
volume of applicants.
The biggest red flag to watch for is the request for one's
date of birth. It is actually illegal to request one's date of birth
in such a fashion. In a legitimate online application process,
giving out one's Social Security number is necessary at some point,
but if the online form is sufficiently encrypted, your information
is protected.
top |
|
| Lessons from Katrina, Rita, and Wilma - Organizational
Disaster Preparedness |
|
Although no one could have predicted the terrible impact and
far-reaching scope of this season's hurricanes in the Gulf Coast,
particularly Katrina, many lessons have been learned in the
aftermath. Businesses, like citizens, have a civic duty to properly
prepare for any disaster, hurricane or otherwise, in an effort to
allow resources to be most effectively utilized. Communities rely on
their businesses to provide jobs and stability. Rather than scratch
our heads and look at each other for direction, businesses must be
proactive in assessing and improving, where necessary, their
existing disaster protocols.
Critical Issues for Consideration:
- Be a bit pessimistic and plan for the worst. Just
because a disaster has not necessarily ever occurred does not
guarantee that it won't.
- Small, upfront investments of time and money can
save you and your organization more in the long run. Spend time
identifying the potential hazards you face in your area and
prepare the appropriate evacuation and/or management
procedures.
- Understand your insurance coverage. Is it
adequate? What is covered and what isn't? How long can your
organization survive if shut down? Annually review your coverage
and your needs, making appropriate adjustments when
necessary.
- Don't forget to protect your property. Consider
upgrading/reinforcing facilities, equipment, and back up
systems.
For more in-depth tips, considerations, and forms in
properly safeguarding your business against disaster, download a
free copy of the Disaster Planning Toolkit published by The
Institute for Business and Home Safety (IBHS) at http://www.ibhs.org/business_protection.
top |
|
|
Travel Tip: Ever wonder which airline
has the fewest delays? The best record for baggage handling? The
worst customer service? You can view every major airline's Airline
Quality Rating at: http://www.aqr.aero/aboutaqr.htm.
|
|
| The
Good Old Days? |
|
In case you hadn't noticed, life has gotten pretty complex.
As our demands increase, and the time spent with our families
decrease (along with our vacations), it is easy to wonder whether
life was simpler 100 years ago.
Here are some 1905 U.S. statistics to help you
decide:
- The average life expectancy was 47 years.
- The leading cause of death was
pneumonia/influenza; diarrhea was third. * Less than 5% of births
occurred in hospitals.
- 6% of Americans were high school graduates.
- A full-time worker earned approximately $300 in a
year.
- One could purchase marijuana, heroin, morphine,
and cocaine over the counter.
- The total mileage of paved roads in the U.S. was
144.
- A three-minute long distance phone call cost
$11.
top |
|
|
| Copyright © 2003-2005 PerMar Security - All
rights reserved. |
Duplication and distribution for commercial
purposes is strictly prohibited. Powered by SecurityNewsletters.comTM
| |
|