Category: sustainability

Posted on

Payment Card Roll Call: “Not Present” fraud likely to increase as EMV takes hold

Payment Card Roll Call: “Not Present” fraud likely to increase as EMV takes hold

rollingballNo retailer wants to become the next Target (pun intended).  Payment card fraud costs businesses and consumers billions of dollars every year.  What’s even more frightening, many of the breaches in the news are the result of innocent participants inadvertently granting access to the bad guys.  The Target breach in 2013 exposed the data of 110 million payment cards.  Hackers got into the network using perfectly good credentials of the HVAC company.  Sometimes password security just isn’t enough, which might bring in to question the security of all those SaaS subscriptions and online shopping sites folks use these days.

EMV chip technology, the standard around the world which has just recently become a standard in the United States, has done a lot to stem the tide of credit card fraud in other countries.  As it was implemented in various countries, guess where it pushed the fraudsters?  Where the anti-fraud technology wasn’t, of course! The United States was among the laggards in requiring EMV chip technology for payment cards, opening the door for bad guys and turning the US into a veritable haven for credit card fraud, “accounting for nearly 50% of global fraud losses, according to the Nilson Report[1]”.

EMV chip (or chip and pin) technology will go a long way to prevent credit card fraud for businesses accepting payment cards… in-person and counterfeit card fraud, anyway. Online retail, on the other hand, not so much.  A chip on the card doesn’t really help when the transaction is completed with the card not present (CNP).  Some industry analysts suggest that CNP fraud losses will exceed $6 billion within the next few years, making e-commerce and online payment security a high stakes game for even the smallest of retailers.  As it gets more difficult to hack the payment system when the card is presented, bad guys will fall back in even greater numbers to the card-not-present model to find their victims.

Online retailers and service providers must take additional steps to secure their systems and protect customers and business partners, and face the challenge with the understanding that effort must be ongoing as new threats emerge. Tokenization is a prime method of layering the system with security, making the merchant system somewhat less of a worthy target by not storing the card data in the system.  Even if the system becomes compromised, the bad guys wouldn’t find customer payment card information.  There are numerous other steps a business can take to secure the CNP sales, including applying behavioral analytics which might identify rogue activities, or using 3D Secure to authenticate a cardholder’s identity at the time of purchase.   The point is that CNP fraud is likely to spike as EMV technology takes a firm hold in the US.

Card fraud is already escalating rapidly for ecommerce retailers and other card not present channels – it didn’t take EMV to start on that roll but it will surely give it a push.  Paperless payment systems, SaaS subscription services and online application service usage are increasing dramatically and there’s no chip to get in the way of these transactions.  Sellers of any and every service utilizing online payments need to now pay particular attention to system and information security.  The risk has always been there, and EMV chips and other shifts in pay card technology simply give it a push.

jmbunnyfeetMake Sense?

J

 

[1] Chipping away at Credit Card Fraud with EMV; Information Week Tech Digest powered by Dark Reading, Nov 2015; NilsonReport http://www.nilsonreport.com/publication_newsletter_archive_issue.php?issue=1071

Posted on

Mobile Device Security is a Moving Target

Mobile Device Security is a Moving Target

mobile-devicesAs businesses mobilize their workforces and processes the volume and variety of sensitive data passing through and sitting on mobile devices increases dramatically.  Even though the business owner or IT manager may recognize the importance of mobile data and device security, doing something useful about it is altogether another issue.  New considerations enter into the picture frequently, turning mobile security into a moving target. Protecting the business – the organization, its employees and its customers – requires adopting mobile security strategies that cover a broad range of issues.

First of all, is there any means of monitoring the activities of the connected or mobile devices?  Knowing which devices are interacting with your information would seem to be an essential part of business information security, yet smartphones and tablet devices often fall under the proverbial radar of IT or business management.  Actually, business management is likely among the base of users with the very mobile devices in question.

Are there ways to limit what information is accessible via these mobile devices, and is that data encrypted?  Consider also that data is sometimes at rest (like when it is just sitting on a hard drive) and sometimes in transit (like being uploaded/downloaded/transmitted over the wire).  In either state, the data should be encrypted in order to be more secure.

Is there a standard set of apps or services that users can enable, or is it pretty much personal choice?  Too often a user will innocently install a malicious app on their device, exposing the business to a variety of potential threats.  Creating strict policies around app selection and use is a really good idea, and finding a way to actually enforce them is even better.

The big issue is separation of work and personal apps and content.  Especially in small businesses where personal devices are the norm (well, not just in small business… Hey Hillary!) it is quite a challenge to create any useful separation between personal and business use.  The mobile device is often adopted as a personal choice of the user – who elects to invest their personal mobile device in their work – so exacting any real level of control in how the device is used is tough.  The security of the information is only as good as the security of the device, meaning that it is usually up to the device owner to decide if a password or pin is required.  Unfortunately and for the sake of convenience, there is often little or no real security on the device meaning there is no real security around the information on the device in the event that it becomes lost, stolen or compromised.

There are a lot of things that the business can do in order to improve the security of their business data in a mobile device environment.  Here are a few of the basics:

  1. Have defined procedures for what happens when a device is lost or stolen; make sure they’re followed
  2. Have a way to do a remote wipe of the device
  3. Make sure all devices lock after a period of inactivity, and that they have password or pin protection
  4. Have a mobile device use policy, and make sure all employees understand why it matters and agree to it.

jmbunnyfeetMake Sense?

J

Posted on

Why Offering Anytime, Anywhere Work Works

Why Offering Anytime, Anywhere Work Works

An Anytime, Anywhere Work Survey was completed by ConvergenceCoaching, LLC this spring, and they’ve published the results.  In the survey, they asked firms to provide feedback on the results of flexible work programs, asking for both the good and the bad aspects of having an anytime/anywhere working model.  It isn’t much of a surprise that the positive outweighed the negative, given the popularity of cloud computing and mobile working models.

anywhere-anydeviceThe benefits of providing flexibility where and when people work is something that many businesses are just realizing.  It took a while for the idea to catch on (and for the technology to catch up) but enterprise and small business alike are now taking advantage of flexible work programs to improve employee morale and the business bottom line. Keeping employees happy and engaged is critical to running and growing a successful business, and providing a level of flexibility in work programs can deliver a big boost to worker satisfaction.

Supporting a flexible work environment and mobile employees takes some additional attention to detail, especially when it comes to communication. If workers aren’t certain of their responsibilities and boundaries, then expectations may not be fully met.  Training and communication become key elements in the business, making sure that employees understand what to do and how to get it done before they are allowed to operate remotely and with less on-site support.

There may also be some workers who feel that disconnecting is not an option when they are allowed some flexibility in hours and place of work.  Often electing to error on the side of caution, these users may put in more hours than usual simply to make sure that their work and contribution is recognized.  It is the “out of sight, out of mind” scenario they play over and over again, fearing that they will be forgotten or their usefulness minimized simply because they are not present in the office.  On the other hand, many workers describe being more effective in their jobs because they’re able to focus better and find themselves to be more creative or efficient when working away from the office. The company must provide clear lines of communication and work validation which support offsite employees and allows workers to embrace the freedom an anytime/anywhere approach offers if they want positive and productive results.

The survey demonstrated that businesses offering flexibility in work programs saw improvement of employee work/life balance and better overall morale than those offering no such flexibility.  Building and improving trust among teams was another cited benefit, as was the positive impact to the job of finding and retaining staff.  I think the best attribute of the Anytime/Anywhere working model listed from the survey was “It is worth it!”. Maybe it’s just because I agree.

jmbunnyfeetMake Sense?

J

Source: Why Offer Anytime, Anywhere Work? | ConvergenceCoaching, LLC

Posted on

Analysis, forecasts and modeling: What’s the point?

Analysis, forecasts and modeling: What’s the point?

financeIn today’s business world, risk, uncertainty and volatility are just par for the course – everyday realities of simply being in business.  Nothing is certain, they say, except death and taxes.  Yet there is a fine art to driving profitable growth in a business, and adapting to existing and emerging risk takes a great deal of experience, information and agility.  While planning and process development may occur at many levels within the organization, it is the FP&A (financial planning and analysis) capability which helps top performing businesses be top performers.

Financial planning and analysis are activities central to enterprise performance management (EPM) and must necessarily extend beyond finance.  Integrating various functional domains in the business (financial, operational and strategic), FP&A should bring data together from the various facets of the business and use the information to help structure and guide the organization toward meeting short-term and long-term goals.  Among the most critical of the duties of FP&A is calculating the financial impact, the monetary effects, of potential business decisions.  Everything in business means money, so there is always an impact to a decision.  With the right information supporting the decision, it is far more likely to have a positive impact and a level of sustainability.

While many CFOs may recognize the importance of performance measurement, planning and forecasting, a great many also believe the process isn’t very effective. The cause is frequently the divide between the various domains in the business and the information systems supporting them.  Operational data are distilled into summary financial information and fed to finance systems, losing much of the underlying intelligence that might be gained from analysis of the details.  Strategic development and planning may overlook certain volatile elements in the market, or may base successful outcomes on an expectation that conditions within the business will not change.  Finding ways to integrate the data from the respective domains into a comprehensive model is essential to developing a better and more robust forecasting and scenario-playing capability.  With the right information, analytics may be applied to all facets of management decision-making, anticipating and shaping business outcomes far more effectively than could be done without the insight.

Small business owners may believe that things like “predictive modeling” and “enterprise performance management” aren’t things they need to worry about, but the small business could use this information just as beneficially as a larger enterprise – perhaps even more as the insight could be the key to small business survival and growth.

Using analytics, the owner is able to adjust and re-align strategy in real-time to keep on the right path and goals clearly in sight.  Analytics can also help a business better understand what really drives revenue, working capital and profits.  Analytics can even help managers align compensation and strategy with business objectives, preventing compensation issues from outpacing business benefit.

There is a cost to growing a business, and some strategies might be more sustainable than others.  Time will tell, but it is great if the business owner has some business intelligence that might indicate what’s going to happen before it actually does.

Make Sense?

J

 

Posted on

Skinny Isn’t Just for Jeans: Lean Business and the Service Sector

Skinny Isn’t Just for Jeans: Lean Business and the Service Sector

elastic-2Doing more with less is the mantra of today’s business.  Hiring more people or throwing money at a problem is almost never the best way to solve it… even if there are people and dollars to throw.  Businesses are feeling the crunch today more than ever, in some part due to advancements in technology and the emergence of retail and “self-service” service. Once upon a time it was OK to be a fat dumb and happy business, but those days are long gone.  With competitive pressures increasing – and emerging from new sources – just about every business is feeling the need to trim some fat – cutting costs and streamlining processes even as customer demand increases.

Lean and efficient business isn’t of concern just to manufacturing sector, even though that is where you most frequently hear about initiatives relating to process improvements tied to quality management. Professional service firms should also seek to identify areas where cost or time efficiencies could be gained while at the same time preserving (or improving?) quality of service delivery.  Price of service isn’t necessarily the largest factor in meeting the competition, but quality of service for the price and delivering on customer expectation are right up there as top priorities for buyers.

Quick: What do legal professionals and assembly-line workers have in common?

More than either one might think, apparently. After all, the “lean” approach to manufacturing—a concept which rolled off the Toyota Production System, only to be delivered to ailing U.S. auto giants in the late 1970’s—wouldn’t immediately seem applicable to workplaces where the heaviest lifting involves leather briefcases. As for paring resources, such as inventory, down to a minimum—it seems like overkill when applied to pens, yellow pads, laptops and file folders.

But the lean concept long ago roared out of manufacturing and parked its principles in service industries: lean accounting, lean healthcare, lean startups.

http://performance.cfo.com/2015/05/11/the-real-skinny-on-lean/

Professional service firms are being compelled to reduce costs just to compete, and are finding that cost-cutting isn’t all that is required.  Rather than doing more with more people, firms have begun to recognize that getting more done with fewer human resources is the goal – a goal which must be achieved without sacrificing quality of service.  In fact, most firms are now actively seeking ways to increase production and improve service levels, and to do it without increasing headcount and cost.  Client needs are changing and demands for higher levels of service continue to increase as society more fully embraces social computing and DIY.  Technology is impacting how businesses do business, and sometimes is the basis for establishing a new standard by which all competitors are then measured.  

Technology advancements are among the primary drivers moving service firms to explore leaner and more efficient ways of working. As more sophisticated tech and the resultant capability it delivers is made available in the market, more businesses begin to recognize that the “traditional” providers of certain services may no longer be the most cost efficient suppliers.  Competition often emerges from some of the most unlikely of sources, and this new reality is impressing itself upon even the sturdiest of professional service firms who find themselves facing new threats to the status quo. 

Like all customers, legal clients seem to have grown fussier than ever. One study estimates that about 60% of large clients replaced one of their top two law firms last year—citing mediocre service. As is true across industries, the cost of acquiring new clients only heightens the appeal of retaining existing ones.

via The Real Skinny on Lean: It’s out of the Factory and into the Service Sector – Performance.

There is much talk among accounting and legal professionals as to what the “firm of the future” might look like.  Are these firms highly efficient producers of service that rival the lean manufacturers, leveraging insight and innovation to deliver more value? Or are they adopting technology simply for the sake of change?  There is a difference between change and improvement, and not all changes result in the desired improvements to operations, efficiency or quality of service.  For the firms seeking to increase their competitiveness in a rapidly changing market, applying measurements to the various processes the business performs can reveal the secrets to improving not only process performance and product quality, but resultant profitability. https://coopermann.com/2013/03/18/philosophy-of-process-improvement-todays-cfo-focusing-on-operations/

jmbunnyfeetMake Sense?

J

Posted on

Formula for Success: The Cloud and a Pair of Bunny Slippers

Formula for Success: The Cloud and a Pair of Bunny Slippers

drawn-bunny-slippersInformation technology and the “cloud” is amazing.  With the right IT resources and connectivity, individuals and small businesses are able to compete at global levels with much larger organizations, and are proving that placing focus and attention on the right aspects of the business helps the business perform better. The right IT approach is to use technology to make the business smarter so more gets done in less time and with fewer resources – this is wearing the bunny slippers.  The goal is leveraging systems, software and connectivity to be more efficient and effective, creating the time to stop and think for a while, innovate, or simply relax.

Too often the business owners or managers are tending to computers and systems which simply support status quo and aren’t spending their quality time growing and managing the business – getting more clients, creating new products, rising above the competition. Cloud computing models play a big part in changing that standard, supporting new levels of business sustainability and supporting process improvements never before imagined.

Cloud computing is now integral to many business technology models because the potential benefits are great.  Cloud computing solutions and outsourced information technology management allow businesses to focus on what they do best, and  not on the IT supporting it. These solutions and services are in high demand because they allow businesses to scale easily and affordably, paying only for what is needed at the time.  Improved collaboration and centralized access to applications and data make cloud computing models an important consideration for every business.

I’m not the only one who recognizes how beneficial the right IT approach and anytime/anywhere access can be. Others have recognized the freedom and flexibility these new technology models have enabled… and know the value of a pair of bunny slippers.

Joanie Mann Bunny FeetMake Sense?

J

Doing Business In Bunny Slippers Around The Globe.

Susan Solovic

When I first started my business, like many start-up operations, I decided to work from home.

I equipped an empty bedroom with a card table for a desk, cardboard boxes for filing cabinets and my dogs served as my office assistants. Voila! I was ready to roll, and it was great.

I could go to work in my fuzzy pink robe and bunny slippers. After all, no one other than the dogs would know.

Start-up business operations are always strapped for cash. It’s much less expensive to conduct business from your home than to rent commercial office space. And thanks to the Internet and technology home-based businesses can easily become international enterprises.

Read more at http://www.business2community.com/startups/doing-business-in-bunny-slippers-around-the-globe-01252506