2019 GLPS - Group LP Selfies
Your Team - Your Pride - Our Industry
Building Industry Pride - One Team Selfie at a Time

Dollar General Division 4 Loss Prevention Team

Featured in picture, left to right: Steve Burd (RLPM), Randy Lima (RLPM), Al Dauser (RLPM), Bernard Peterson (RLPM), Diana Lukash (RLPM), Scott Vollrath (RPLM), Lee Gower (RPLM), Brian Morrison (Dir. LP), Chris Scheutzow (RLPM)

Not pictured: Teresa Clark (RLPM)

---

Bloomingdale's AP Team

7-Eleven AP Team

Goodwill-Easter Seals

Marshall's Region 32 LP Team

Got a picture of your team on your cell phone?

Send it to us!

Axis Communications Integrated Systems & Solutions - Finally Able to Do More in Your Store Hedgie Bartol, Retail Business Development Manager, Axis Communications

As the global leader in network video, Axis Communications is helping retailers create the connected smart store of the future. With more secure, open and flexible platforms, Hedgie Bartol explains how retailers can utilize their network infrastructure and bring together their video surveillance, physical access control, audio systems, and now, add analytics to develop creative solutions that go beyond security, helping to grow the business and improve customer experience.

Quick Take 5 with Gatekeeper Systems
 

Robert Harling, CEO, Gatekeeper Systems with MCs Joe LaRocca and Amber Bradley

Loss Prevention professionals work in dramatic environments. With shoplifter confrontations becoming increasingly violent, many retailers have shifted from an apprehension to a prevention approach. Robert Harling shares how Gatekeeper's Pushout Theft solution supports this approach by helping retailers stop merchandise from leaving the store in the first place.

P.O.P. Security Invisi-Shield® System

Are you looking for a simple yet effective solution to secure products and reduce shrink? The innovative and easy-to-use P.O.P. Security Invisi-Shield® System from FFR Merchandising, a siffron company, can help you do just that. This open (not under lock and key) loss prevention system secures high-value, high-theft product while allowing customer access to the product for purchase.

The P.O.P. Security Invisi-Shield System features clear "invisible" panels that control inventory while providing an unobstructed view of consumer product. Panels slide along a rail to allow single product access for legitimate customers while preventing "shelf sweeping" theft. As customer slides panel to access product, a manual clicking sound alerts store personnel to activity. Available for narrow, wide, or tall products, the panels feature contoured edges that are intuitive and comfortable for shopping.

The plastic panels are nearly unbreakable, even in high-traffic environments, and have been designed to install easily on perforated gondola shelves with minimal to no impact on existing planogram. Optional accessories, such as locking panel, end panels, and security bar cover, provide additional security by further limiting access to the product.

To provide greater protection from shelf sweeping, reduced labor and improved organization, use with any of our Power Zone® Self-facing Systems.

To see how it works, check out the video here.

For more information on the P.O.P. Security Invisi-Shield System and how it works, contact FFR Merchandising at 800.422.2547 or visit www.ffr.com.

Collaboration Apps Hacked at Dozens of Big Companies & 1 LP Provider

Dozens of companies leaked sensitive data thanks to misconfigured Box accounts
With Schneider Electric Being 1 - left dozens of customer orders accessible
Security researchers have found dozens of companies inadvertently leaking sensitive corporate and customer data because staff are sharing public links to files in their Box enterprise storage accounts that can be easily discovered.

The discoveries were made by Adversis, a cybersecurity firm, which found major tech companies and corporate giants had left data inadvertently exposed. Although data stored in Box enterprise accounts is private by default, users can share files and folders with anyone, making data publicly accessible with a single link. But Adversis said these secret links can be discovered by others. Using a script to scan for and enumerate Box accounts with lists of company names and wildcard searches, Adversis found over 90 companies with publicly accessible folders.

Not even Box's own staff were immune from leaking data.

In a blog post, Adversis said Box administrators should reconfigure the default access for shared links to "people in your company" to reduce accidental exposure of data to the public.

Schneider Electric left dozens of customer orders accessible to anyone, including sludge works and pump stations for several towns and cities. Each folder had an installation "sequence of operation" document, which included both default passwords and in some cases "backdoor" access passwords in case of forgotten passwords. Schneider Electric did not return a request for comment for this article in techcrunch.com.

Adversis has open-sourced and published its scanning tool.

4 Ways At-Work Apps - Collaboration Apps - Are Vulnerable to Attack
Slack - Google Hangouts - Box - SharePoint
66% Have Been Attacked Via These Tools in Last 12 Months
Collaboration applications make users and IT teams more efficient. But they come with an added cost: security.

They haven't completely replaced phone calls or email, but communication and collaboration apps are becoming increasingly popular. Many rely on Slack, Google Hangouts, Box, SharePoint, and other applications to communicate, share files, and collaborate on projects to get their work done.

The collaboration apps brand takes care of outages or any other disruption; it ensures that communications are backed up and that the system is secured from data loss. Since the brand specializes in its tool, it will have the resources to ensure that things run smoothly and safely.

However a study we conducted in 2018 with 500 enterprise IT decision-makers, managerial level and above, who are involved in cybersecurity efforts in medium and large enterprises revealed that two-thirds of responding companies have been attacked via collaboration tools in the last 12 months, and three-quarters believe the sophistication of such attacks is increasing.

Phishing is a favorite. Attackers have already had great success using phishing techniques. According to the 2017 Verizon data breach report, as many as 95% of security breaches have their origins in socially engineered phishing attacks. Collaboration-tool phishing attacks are takeoffs on the "classic" email scam; rather than send a malicious URL via email, attackers can instead send it through messaging services. The message could come from an insider threat, a third party, or stolen credentials.

Email and notifications Auto-reply's sent in response to all messages that an inbox gets - and if that response is received by a thief, you could be tipping him off that it's open season on your house.

You can't see them? Doesn't mean they aren't there. Besides messages with "poison links," hackers have had great success in sending their malware to victims via files and documents emailed directly to victims' mailboxes. With a bit of social engineering, hackers can get their prey to open the document, thus unleashing the malware.

Who said that? With the credentials to a collaboration account in hand - obtained perhaps by tricking a member of the group into giving up their name and password - hackers could perpetrate all sorts of mayhem by posing as an employee. (Typically, all it takes is a message from "tech support" saying they need the information.) Then, using the private messaging component of a collaboration app, a skilled hacker could pump a member of the group for information about a contract, event, or other important data

Collaboration tools clearly provide great benefits for organizations - but they also provide hackers with a path to compromising IT systems. darkreading.com

Chief Information Security Officers
Taking On More Prominent Roles, Reporting To CEOs
Chief information security officers report to chief executives more often than to any other senior leader, according to new research from Deloitte & Touche LLP.

In a poll of 100 CISOs, 43% said they report directly to the CEO, while 37% said they report to the chief information officer. Deloitte surveyed 500 C-level executives in January about cybersecurity issues, including hierarchy, budgets and the outsourcing of security tasks.

Cybersecurity leaders are becoming more important as companies shift to business models built on technology, experts say. That includes the Internet of Things as well as data analytics products and services. CISOs also gain stature as boards get involved in monitoring cybersecurity.

"The biggest driver is the number of public breaches and the visibility that came with those breaches and then, to some degree, panic that ensued from corporate boards," said Emily Mossburg, a principal in Deloitte's risk & financial advisory.

CISOs need authority over budgets and to ensure members of their staff are present in crisis meetings about security issues, Ms. Mossburg said.

Many CISOs are learning to interpret cyber risks for their executive counterparts, highlighting their consequences to the business, according to Ms. Hanson, who previously worked as a director of information security at Target Corp.

"As long as the CISOs can make the shift to that spot and really talk about risk in a way that resonates with the CEO and impacts the bottom line, that's when they get heard and when they find a spot at the executive table," she said. cybersecurity.cmail20.com

Highlights of RSA Conference Updates on IoT and the Cloud, GDPR Compliance and Much More

3 reasons businesses are still failing at strong cybersecurity
Prioritizing risk under a deluge of vulnerabilities is stretching IT security professionals too thin, while the C-suite fails to provide adequate support, according to a Deloitte report.

Getting cybersecurity right is a difficult undertaking for enterprises, as high-profile data breaches underlie either a false sense of security or inadequate protections applied to systems in a given organization. With new norms such as BYOD, and the rise in popularity of applications written in Node.js that have extensive dependencies on third-party packages, the potential attack surface for IT security professional to cover has expanded significantly.

The 2019 Deloitte Future of Cyber Survey, which counts among its respondents 500 C-level executives who oversee cybersecurity at companies with $500 million or more in annual revenue, finds three primary challenges that businesses face in implementing strong cybersecurity measures:

1. Inability to better prioritize cybersecurity risk across the enterprise

Some 30% of respondents cited difficulties prioritizing potential risks across their organization. Given the volume of software vulnerabilities that are discovered, this is relatively unsurprising, particularly as the increase in officially-designated vulnerabilities is coinciding with a decreased understanding of them-and the security landscape in general. While wide-ranging, highly-publicized vulnerabilities like Spectre and Meltdown require patching, they are not particularly actively exploited, and exploits of those vulnerabilities are moderately challenging to pull off.

2. Lack of management alignment on priorities

Corralling the C-suite long enough to focus intently on a topic that does not bring in revenue can be a challenging task, as indicated by 28% of respondents claiming a lack of management alignment on priorities. Doing so comes at a great risk for companies, particularly as 2018 was the second most active year on record for data breaches, according to a Risk Based Security report.

3. Lack of adequate funding

Some 26% of respondents indicated a lack of adequate funding for cybersecurity measures, a problem that is pervasive among the C-suite, as IT departments at large are derided as money pits by those who lack understanding of the vital role that IT professionals play in their organization, or in the global digital economy. A Gartner report from November 2018 cited eight more reasons CEOs will be fired over cybersecurity breaches. If an appeal cannot be made on the merits of cybersecurity, perhaps an appeal toward self-preservation can shake free some funds from the threadbare pockets of stingy executives.

This is an IT problem, too

There is a mismatch in how IT approaches security as well, as the survey finds that 85% of respondents are reporting they use using Agile or DevOps for application development, but ranking DevSecOps lowest at 11% among cyber defense priorities and investments. techrepublic.com

When Will They Strike? Understanding Fraud in Online Shopping
E-commerce and m-commerce retailers and shoppers often assume these peak sales periods increase the possibility of fraud, but the data is in and that's actually not true. In last year's third quarter, Sift Science analyzed 165 billion transactions and other fraud-identifying data to see how fraud stacked up in 2017.

What we found is that - contrary to popular belief - the most fraud doesn't happen during the Thanksgiving and Christmas holidays. In 2017, May 9 actually saw much higher fraud rates than any other day of the year. What's more, July 14 was the highest fraud day of 2017 for online retailers. The common assumption is that because peak sale periods like Black Friday and Cyber Monday see heightened shopper traffic, fraudsters strike harder on those days. This leads retailers to put more into fraud detection efforts during specific peak shopping seasons, often neglecting the days not associated with these.

In reality, fraud ratios drop during peak sales periods due to the amount of legitimate transactions being filled. While the overall number of fraudulent transactions may increase during peak shopping events, it's overshadowed by the massive influx of legitimate transactions. The importance here for retailers is ensuring legitimate orders are filled, while fraudulent ones are caught - no matter the time of year.

Ways Retailers Can Ensure Legitimate Orders Are Fulfilled Year-Round
Getting ahead of fraud risks and empowering legitimate customers to shop without friction, especially during peak shopping events and seasons, will maximize your bottom line and help you to retain customers. To do this effectively, retailers need to do the following:

1. Armor Up With Information
2. Proper Staffing and Resources
3. Empathy is Key mytotalretail.com

Amazon May Sell Marijuana Sooner Than Expected
John Mackey, CEO of Amazon subsidiary Whole Foods, sees the organic grocer pushing into cannabis sooner rather than later.

Last Thursday, Feb. 28, Whole Foods CEO John Mackey said, courtesy of The Boston Globe, "If cannabis is ever passed in Texas, chances are good that grocery stores will be selling that too. For Amazon, it would be yet another step to keeping consumers within its retail sphere. fool.com

-Kroger Hits 58% Growth Online Sales
-Urban Outfitters Hits 40% Penetration in Q4
-Abercrombie Tops $1B in Digital sales
-Costco digital sales up 20% Q4

Update: Detroit, MI: Metro-Detroit group accused of multi-million dollar credit-card scheme targeting Walmart
Two Macomb County men and an Oakland County man are accused of participating in a theft ring that rang up millions of dollars in illicit credit-car charges at more than 75 Walmart stores nationwide, according to federal officials. A criminal complaint against the "Free Band Gang" was unsealed recently in U.S. District Court in Detroit, showing the members used "cloned" credit cards to purchase hundreds of gift cards they used at Walmart stores and purchased a variety items such as Apple iTune cards, men's clothes, prepaid phones, movies and video games, and food.

The members traveled alone or in small groups from this area to stores in 11 states, committing the illegal acts for two years through Sept. 2017, according to the feds. A federal grand jury originally indicted the members last September on 23 counts on charges of conspiracy to commit wire fraud, conspiracy to commit money laundering, and aggravated identity theft. "This type of identity theft and credit card fraud is not a victimless crime," said Special Agent in Charge Timothy R. Slater of the FBI's Detroit office. "It has a negative impact not only on the corporations involved but on the individual whose identity is stolen." A May 7 trial is scheduled, records say. macombdaily.com

Linn County, IA: Sheriff's Office investigating stolen motorcycles, mopeds, estimated more than $200,000
A Cedar Rapids business owner says someone stole more than $200,000 in merchandise after breaking in. The owner said it marked the tenth time they have seen their business burglarized in a five-year span, and after the most recent incident, now they are contemplating closing the business down entirely. A-1 Performance Power Sports on Mount Vernon Road in Cedar Rapids has seen their business broken into twice in the last three weeks. The owner says their security system, including a monitor and DVR system, was stolen. Chuck Hanson, who has owned the business since 1990, said they had not filed an official report with the Linn County Sheriff's Office because he did not have the time; Hanson said his time working with his snow removal company took time away from reporting the theft of the security system. kcrg.com

Kern County, CA: Stolen Disneyland souvenirs worth $13000 found in California traffic stop
A man caught illegally passing a school bus in Kern County last week got in even more trouble following a search of his car, according to California highway patrol officers. An officer stopped the driver of a Nissan Sentra Friday in the Rosamond area after he passed a school bus that had its red flashing stop sign extended, officers with highway patrol's Mohave area wrote on Facebook Saturday. The man, whom officers did not identify, was driving with a suspended license - and a search of his car revealed $13,000 in stolen Disneyland merchandise, officers wrote on Twitter. Highway patrol posted pictures of the stolen goods, which appear to be Disney-themed pins.  sacbee.com

Sandpoint, ID: Walmart Associate charged with Felony Theft based on "Criminal Episode"
A former Walmart employee accused of repeatedly stealing merchandise from the store pleaded guilty to one count of grand theft on Friday. Katherine Lauren Marie Draut is scheduled to be sentenced on May 24 in 1st District Court. Draut was charged with two counts of grand theft for allegedly stealing merchandise during episodes in September 2018. The value of the merchandise was below the $1,000 statutory threshold for a felony offense. However, the offenses rose to the felony level because the pattern of thefts qualified as a "criminal episode," according to the criminal complaint. Draut, a 19-year-old from Sandpoint, admitted committing the thefts when she was questioned by Ponderay Police, according to court documents. Draut entered a plea to one of the counts as part of a plea agreement with the state.  bonnercountydailybee.com

Daphne, AL: Police seek three retail theft suspects

Submit Your New Hires/Promotions or New Position

Featured Job Spotlights

NEW TODAY	Manager, Emergency Management & Planning, Global Safety and Security New York, NY Working in collaboration with other Emergency Management and Global Security professionals, the Manager for Emergency Management and Planning is tasked with the development and implementation of Emergency Management drills, trainings and exercises across WeCompany business lines at the Corporate, Regional, and Territory level...
	Area Loss Prevention Manager - Seattle, Portland or Salt Lake City Seattle WA, Portland OR, Salt Lake City UT Our Area Loss Prevention Managers ensure safe and secure stores through the objective identification of loss and risk opportunities. Our Area Loss Prevention Managers plan and prioritize to provide an optimal customer experience to their portfolio of stores...
	District Loss Prevention Manager Eastern PA/NJ The District Loss Prevention Manager ensures shrinkage control and improves safety in the stores through proper investigation and training. This position is responsible to provide feedback, guidance and protection for our Team Leaders and Associates. This role has oversight and responsibility for approximately 15-20 store locations...
	Field Manager, Asset Protection (Northeast & Midwest) New York, NY| Poughkeepsie, NY | Parsippany, NJ Recruiting a Field Manager, Asset Protection to support our Northeast & Midwest HD Supply Construction & Industrial locations. This role will be based in the Greater New York area...
	Asset Protection Officer Chicago, IL We're looking for dynamic individuals as an Asset Protection Associate, who is committed to maintaining a safe environment for American Girl customers and employees, as well as, safeguarding company assets. The individual we seek should be able to multi-task, have outstanding communication skills, and exhibit a high level of compassion and understanding...
	Loss Prevention Analyst Richmond, VA Protects company assets and increases profitability through the analysis, response and management of various data across a broad spectrum of internal financial and technology resources such as Exception Reporting, Sales Audit, FP&A, IT and Loss Prevention. The Loss Prevention Analyst works cross-functionally in a dynamic, fast paced and demanding environment providing critical guidance to the organization's asset protection and profit improvement initiatives...

Featured Jobs

To apply to any of today's Featured Jobs, Click Here

Today's Daily Job Postings from all around the net - Appearing today only

To apply to today's Internet Jobs, Click Here

Sponsor Today's Internet Jobs 

We want to post your tips or advice... Click here

Not getting the Daily? Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here