Steve Welk, CFI promoted to Senior Director of Loss Prevention for Barnes & Noble College
Steve was previously the Director of Loss Prevention for the retailer before earning this promotion in May. He's held other senior leadership loss prevention positions during his over 29 years in the loss prevention industry including Director of Loss Prevention for Laura Ashley and Director of Asset Control for Linens 'n Things. Steve earned his Bachelors of Arts in Political Science from the University of California, Berkeley. Congratulations Steve!


Kroll Names Steve Scarince Associate Managing Director in Cyber Risk Practice,
Los Angeles
Law Enforcement Co-Chair of the Los Angeles Organized Retail Crime
Association - LAORCA
Kroll, a division of Duff & Phelps, a global leader in risk mitigation, investigations, compliance, cyber resilience, security and incident response solutions, today announced the appointment of Steve Scarince as an Associate Managing Director in its Cyber Risk practice, based in Los Angeles. Scarince joins Kroll after serving for more than 20 years in several prominent roles with the United States Secret Service. In addition to his experience serving a near-five year assignment in the Presidential Protective Division, Scarince has significant expertise in crisis management, intelligence, and personal and physical security. Additionally, he is an authority in fraud investigations and cyber-related attacks on financial and payment systems, and has often served as an expert witness in court proceedings.

Scarince earned a Bachelor of Arts degree in International Relations/Russian at the University of Minnesota. He is a member of the International Association of Financial Crime Investigators (IAFCI) and the Law Enforcement Co-Chair of the Los Angeles Organized Retail Crime Association. thecourierexpress.com

Submit Your New Corporate Hires/Promotions or New Position

eBay's PROACT Program Continues to Support Retailers'
ORC Investigations

Did you know that eBay has a team that is not only dedicated to assisting law enforcement with criminal investigations, but also retail partners as well? This is known as eBay's PROACT program (Partnering with Retailers Offensively Against Crime and Theft), and it started in 2008 to assist retailers who are investigating Organized Retail Crime cases.

To date, eBay has enrolled hundreds of retail partners globally into the PROACT program, and we have investigators in the US and UK that are able to assist retailers on their investigations. We are able to provide information on individual accounts as well as volumes associated to those accounts. We also maintain a rolodex of thousands of law enforcement contacts around the globe, so we can assist our partners in getting in touch with the correct law enforcement agency for their investigation.

To obtain additional information on the PROACT program, please contact proact@ebay.com. We look forward to working with you!

7 Crime Prevention Strategies Every Retailer Should Follow

Developing a store security strategy for a retail operation with multiple locations involves far more than taking the plan for one store and applying it to all the rest. Each location presents specific risks and opportunities, and managing retail loss prevention should reflect that.

To avoid wasting your security budget, you need to deploy your resources where they are actually needed, and not where your gut tells you they're needed. To do that, retail security best practices call for developing a scalable, sustainable, and holistic plan for all locations.

7 Essential Crime Prevention Strategies

Take these best practices into account as you develop your store security strategy:

1. Use an objective risk matrix for each of your locations to be sure you're allocating security resources where they are most needed. Security should not be one-size-fits-all; instead, resources should be tailored to risk.

2. Survey your locations routinely. Make sure that the designated security equipment, consistent with your risk level guidelines, is in good working order. Also, ascertain that all security-related policies and procedures are being adhered to at the location. Pay special attention to the stores in areas with elevated risk and/or heightened loss experience.

3. Track criminal events as they occur and document your company's response. Where remedial measures are necessary, design them to help prevent future crimes from occurring. Gathering this sort of information is invaluable in tracking patterns and developing appropriate countermeasures and evaluating their effectiveness.

4. Develop relationships with local law enforcement for each of your locations. These partnerships will help you better understand neighborhood issues that may affect you, positively or negatively. One effective strategy is to reach out to the local crime prevention officer on a quarterly basis to find out what's going on and to share your own challenges and successes. Relationships like these will benefit both sides.

Read the Full Article Here

The Global Resilience Federation
New Industry-Wide Effort Roll-Out - With R-CISC & Industry-Wide Partners

New Summit From R-CISC & Industry Partners
Third Party Vendor Risks
Retail Sector Third Party Vendor Breaches:
Over the last couple of months, the retail sector has observed a number of third-party vendor compromises affecting large big-box retailers. Earlier this week, software provider Inbenta's live chat widget was compromised and used to deliver malicious software to Ticketmaster users. The malicious software logged and exfiltrated customer details. The data breach included names, addresses, email addresses, telephone numbers, payment details, and Ticketmaster login details. A couple of months prior, a similar breach affected software provider [24]7.ai's live chat widget and was used to breach Sears, Delta, and BestBuy.

Overview

These small-company-to-large-enterprise breaches are the result of smaller shops not having the necessary security controls in place to ensure that their data and their partners' data is secured at all times. The focus on the business is always on the service being rendered and making sure the service is of the highest quality, performance and, uptime. The administration of daily business affairs follows as the next priority— with trust put into the contractors and internal IT teams that all configurations are set with the utmost care to ensure consistent performance. Information security is the last priority. These business service concepts are especially true when it comes to the recent new wave of tech startups which are basing their entire models on lightweight, rapid development and deployment of automated business services.

Conclusion

A continuous communication loop between security teams of partner organizations is essential for the positioning of an effective defensive security posture. When business is being conducted on a large scale, there is a mutual interest in maintaining the integrity of all transactions and related customer data. Ongoing assessment of external resources, internal devices, continuous monitoring of the hacker underground, and a culture of security awareness creates an ecosystem where threats can be identified, remediated, and then collaboratively prevented. All parties should share the responsibility of protecting their resources and establish a collaborative workflow for the execution of action based on incoming threat intelligence. r-cisc.org

Summit on Third-Party Risk - Global Resilience Federation
The purpose of the GRF Summit on Third Party Risk is to increase awareness of security best practices, offer an opportunity for collaboration among third-parties vendors and organizations' risk management teams, and provide a platform for security leaders to share expertise and learn from each other to improve holistic security.

The Summit will provide training, education and networking on the critical cyber and physical security issues facing ISAC/ISAO members, their vendors, and the areas where the two groups intersect.

Space is limited and registration for this event will be capped and by approval only. Please note that you will receive a confirmation email from us no later than August 3, 2018 once your registration has been accepted. r-cisc.org

Calif. Privacy Bill AB 375 Causing Nationwide & Industry-wide Blowback
A milestone Bill for the internet! And for the Nation. It would be California to do this.

Calif. Privacy Law To Spark GDPR-Like Compliance Efforts
Beginning Jan. 1, 2020, companies that hold a wide range of personal data belonging to California consumers will have to comply with the stringent and unique consumer access and notice requirements contained in the California Consumer Privacy Act, which was signed into law on June 28, less than a week after being reintroduced in the state Legislature, in order to prevent a similar but potentially more stringent privacy initiative from appearing on the November election ballot.

With the passage of the California law, "there is an advent of a new era of consumer privacy protection that will have the force of law in the U.S.," said BakerHostetler partner Alan Friel. "Call it GDPR-light, or what have you, but the game has changed markedly."

While California lawmakers can and likely will make changes to the law within the next 18 months to clear up ambiguities and other disputed provisions that weren't thoroughly addressed during the rushed legislative process, "if industry thinks this maintains the status quo, they are sorely mistaken," Friel said.

Given the similarities between the California law and the GDPR — and the lack of precedence for these types of requirements in the U.S. — companies that have spent significant time over the past several years gearing up for the stringent data protection requirements of the EU law by revamping privacy policies and taking stock of the personal data they hold may find it helpful to borrow from these efforts in the scramble to get up to speed with the California law, attorneys say. law360.com

The Cybersecurity 202: Big tech is going after California's new privacy law
Tech industry lobbyists representing giants like Google, Uber, Amazon and Facebook are pushing for changes to the recently passed California Consumer Privacy Act

Industry groups lobbying for changes haven't said specifically what they want to see modified, but they're making clear they intend to play a major role in negotiations over the coming months. They include the Internet Association -- which represents Google, Amazon and other tech giants, as well as TechNet and the Interactive Advertising Bureau.

Legislators introduced, debated and passed the law in the span of less than a week to head off a ballot initiative that contained even tougher privacy protections. washingtonpost.com

Internet Association Against Calif. AB 375 New Privacy Legislation
"Data regulation policy is complex and impacts every sector of the economy, including the internet industry. That makes the lack of public discussion and process surrounding this far-reaching bill even more concerning. The circumstances of this bill are specific to California. It is critical going forward that policymakers work to correct the inevitable, negative policy and compliance ramifications this last-minute deal will create for California's consumers and businesses alike." internetassociation.org

Phone Home
Amazon has an idea to stop its delivery drones from being hijacked
Part of Amazon's work on its proposed drone delivery service includes pumping out patents that explore an array of ideas for the technology.

Amazon says in the patent: "As the use of UAVs continues to increase, so does the likelihood of hostility towards UAVs. Such hostility may come in the form of attacks brought for any number of purposes (e.g., steal the UAVs and their payloads, crash the UAVs, and otherwise cause disruption to the operation of the UAVs)."

It continues: "Using these attacks, nefarious individuals and/or systems may be able to obtain control of the UAVs by hacking the communication signals being sent to the UAVs from a controller and/or being sent by the UAV to the controller." Amazon says such attacks "could cause the UAVs to operate unsafely and could also result in considerable financial loss for their operators."

The patent explores the idea of sending a "heartbeat" signal from the controller to the drone every few seconds. If the heartbeat detects interference from a third party, the drone will automatically switch from mission mode to safety mode, prompting it to make efforts to either reestablish communication with the controller, regain control over the drone in the event of a hostile takeover, or possibly land the machine at a safe location where it can be rebooted or collected. digitaltrends.com

Can't Steal It If You Can't Download It
Security Experts Commend IBM's Ban on Flash Drives
Remote worker connectivity could be a snag, however

Data security experts applauded IBM's recent decision to prohibit its employees from using removable data storage devices in the workplace but caution that the policy may not be right for everyone. IBM wants its workforce to use the cloud to store and transfer data—more specifically, its own internal file sync and share service—instead of portable devices.

Banning flash drives can also help IBM reduce the risk of employees' stealing or selling intellectual property, as well as make its environment more secure against cybertheft. shrm.org

Blockchain set to disrupt retail businesses around the world
The process of applying blockchain to retail has begun and exciting developments are taking place. Among other industries, technology is now poised to turn retail upside—providing increased security and transparency to consumers.

Optimize logistics cost: Blockchain can facilitate shipment tracking. It will be like downloading a virtual resume to track a product at every stage and creating a record of the handler's actions, besides monitoring real-time location, temperature, pressure, or other parameters, for safe-keeping. Retailers can control costs by restricting losses and damages as well as by identifying the source of an issue and isolating the products affected for quick containment. This can reduce product recalls and result in an efficient reverse supply chain.

Build customer trust and earn premium: A UK-based company is using blockchain to build consumer trust, by tracking all supply chain data of a product and enabling customers search it in real time.

Prevent counterfeiting: Digital businesses, including e-commerce, social commerce and consumer-to-consumer platforms, have all been plagued with counterfeits. Using blockchain, retailers can provide customers with indisputable proof of the provenance and authenticity of their products at every step in the supply chain.

The transition to blockchain in retail has the potential to hit the shores like a tsunami. An important challenge for blockchain to overcome will be participation. Adoption by the entire value chain will determine the success and impact this innovation eventually has. livemint.com

South Carolina Insurance Cybersecurity Law Deadlines Loom

New Report Reveals Disparity Between Executives and IT Employees in Their Level of Cybersecurity Concern

How technology is saving PetSmart millions by eliminating sales fraud
The e-commerce investigations team at PetSmart is using fraud prevention technology that includes advanced machine learning and AI.

PetSmart is catching criminals through high-tech methods, and last year alone saved $12 million by pinpointing fraudulent orders before they were shipped. This year, the retailer is on track to match that figure and then some.

PetSmart, and many other retailers, are using technology from Kount to take fraud prevention to the next level and not just stop losses at the stores, but also help authorities prosecute criminals.

By tracking online fraudsters in 2017, PetSmart was able to cancel nearly $4 million in fraudulent orders. After labor loss, shipping costs, merchandise costs, chargebacks, fees and fines are added, that could translate to $3 to $3.50 for every dollar in fraudulent charges, for an annual total of about $12 million. For 2018, the figure is already at $1.5 million for the fiscal year. zdnet.com

50,000 websites found to be selling counterfeit goods, Action Fraud reveals
More than 50,000 websites have been suspended for selling counterfeit goods, the UK's anti scams body has revealed.

City of London Police said tens of thousands of online retailers have been taken down for flogging fake goods such as designer bags, accessories and jewellery.

Since 2013, 22,084 clothing websites, 15,975 footwear websites and 3,591 brands selling bags, accessories and jewellery have been caught out, as part of Operation Ashiko - the Government's crackdown on illegitimate goods.

It follows a widespread campaign, dubbed there's more at stake when it's a fake, to protect customers from cut price online items that are often of poor quality and potentially dangerous.

The City of London Police's Intellectual Property Crime Unit, which is leading the operation, said many of these websites also contain harmful viruses and malware and your personal information is also at risk of being compromised. mirror.co.uk

Amazon Will Drive 80% of Ecommerce Growth this Year

Amazon reveals location of second cashierless convenience store in Seattle

ORC Fraud Ring Leader Gets 30 Months
Hitting Stores in Wenatchee Valley, CA Crime Spree
A California felon who helped lead a crew in a Wenatchee Valley identity-theft spree was sentenced Monday to 30 months in prison and drug rehabilitation.

Edward James Salvador, 34, pleaded guilty in Chelan County Superior Court to charges of forgery, identity theft, stolen property trafficking and possession of an imitation narcotic with intent to sell. He has been jailed since September, when local police arrested him and four associates while investigating a string of mail thefts and retail fraud.

Salvador's group, all from Bakersfield, California, were arrested while staying in motels in Wenatchee and East Wenatchee. They were accused of stealing personal information from the mail, then using those stolen identities to open fraudulent credit lines at local stores, make false ID cards, and commit retail fraud by by returning stolen goods to local stores for cash. In their motels police found phony credit and debit cards, false IDs, and material used to forge personal papers.

Salvador was initially charged with leading organized crime and 37 other felony counts. In his plea to the lesser charges, he admitted to drug dependency and was sentenced to the state's Drug Offender Sentencing Alternative, in which convicts perform part of their prison term in drug rehab. ifiberone.com

Savannah, GA: Police officer helps catch theft suspects wanted in 4 states; $2,300 of merchandise recovered from Belk
Savannah Police Cpl. Sharif Lockett is working off duty, he likes to return to his old stomping grounds: The Oglethorpe Mall. On June 28, Lockett was working off duty at the mall when he heard a call go out over mall security's radio. Two men had just attempted a snatch-and-grab robbery in Belk. Belk's loss prevention officers managed to stop them at the door, where the men dropped the $2,262.50 worth of Ralph Lauren clothes before slipping past them and running outside.

One of the men ran out onto the parking deck and jumped into a car and sped off. Cpl. Lockett returned to the mall and watched the security footage of the robbery. He recognized both of the suspects: Patrick Davis and Ishmell Wright. The suspects were wanted for similar crimes by multiple departments in South Carolina, North Carolina, Florida and Georgia. Lockett said the men were suspected of organized retail crime. savannahnow.com

Bradenton, FL: Felony tool theft from Lowe's ends 10 charges and 2 damaged Patrol cars
A man is accused of stealing from Lowe's and then jacking a nearby car before he allegedly slammed into deputies' patrol vehicles on Tuesday night. Jim Courtney, 30, swiped a felony amount of tools from the Lowe's at about 7:50 p.m. He then stole a car and disappeared until 11:10 p.m., until Deputies spotted Courtney, who allegedly drove down a dead end street. Courtney rammed 2 patrol cars and drove through a yards, trees and fences. Courtney was facing 10 charges as of Wednesday night, including grand theft of a motor vehicle, fleeing and two counts of battery on a law enforcement officer. bradenton.com

New Zealand: 29,000 Retail Thefts just tip of the iceberg: Retail NZ
Greg Harford, Retail NZ's general manager public affairs, talks to Radio Tarana's Sanjesh Narain. Close to 29,000 retail thefts were reported to police in the past year, but Retail New Zealand says that statistic is just the tip of the iceberg. "Many low-level thefts are not reported to police," said Greg Harford, Retail NZ's general manager public affairs. "There were 28,817 theft reports to police in the last year, but we think that's the tip of the iceberg," Harford told Radio Tarana. stuff.co.nz
 

Submit Your New Hires/Promotions or New Position

Featured Job Spotlights

	Vice President, Asset Protection Columbus, OH Oversees and directs all Asset Protection related functions for a Corporate Office, multi-state distribution centers and large retail store network. Responsible for enterprise direction and strategy as it pertains to Asset Protection with a goal of minimizing shrink, reducing loss and maximizing security and associate safety...
	Sr. Director Loss Prevention Goodlettsville, TN The Sr. Director of Loss Prevention will have full responsibility for implementation of loss prevention and shrink reduction initiatives for all stores...
	Financial Analyst (Internal Fraud) Anaheim, CA This role is responsible for investigating internal fraud and Cast Privilege abuse at the Disneyland Resort, across all lines of business including but not limited to: merchandise, food & beverage, rooms, ticketing, and employee privileges. Specific investigative tasks will vary but may include: reviewing exception reporting to identify potential fraud trends, conducting in-depth point-of-sale research, reviewing camera surveillance, performing integrity shops and observations, interviewing employees, representing the Company at grievances and unemployment hearings, and partnering with law enforcement as needed...
	Regional Loss Prevention Manager Englewood, CO The Regional Loss Prevention Manager is responsible for protecting the assets of the company utilizing existing LP and Store Operations processes. This position is part of the Loss Prevention Department and reports to the Director of Loss Prevention...
	Regional Safety & Loss Prevention Specialist Baltimore, MD The Safety and Loss Prevention Specialist is a subject matter expert responsible for partnering with both our corporate TUSA stores and franchise store operations to improve the safety and training processes...
	Area Loss Prevention Specialist Boston/Springfield We are currently looking for an Area Loss Prevention Specialist o join our team in the Boston / Springfield area. This position is responsible for conducting employee investigations, responding to and providing guidance during critical incidents, and assessing new/current retail store locations...
	Area Loss Prevention Specialist Jacksonville, FL We are currently looking for an Area Loss Prevention Specialist to join our team in Jacksonville, FL. This position is responsible for conducting employee investigations, responding to and providing guidance during critical incidents, and assessing new retail store locations...
	Area Loss Prevention Specialist San Francisco Bay Area We are currently looking for an Area Loss Prevention Specialist to join our team in San Francisco Bay Area. This position is responsible for conducting employee investigations, responding to and providing guidance during critical incidents, and assessing new/current retail store locations...
	Loss Prevention Analyst New York, NY Protects company assets and increases profitability through the analysis, response and management of various data across a broad spectrum of internal financial and technology resources such as Exception Reporting, Sales Audit, FP&A, IT and Loss Prevention. The Loss Prevention Business Analyst works cross-functionally in a dynamic, fast paced and demanding environment providing critical guidance to the organization's asset protection and profit improvement initiatives...
	Loss Prevention Analyst Richmond, VA Protects company assets and increases profitability through the analysis, response and management of various data across a broad spectrum of internal financial and technology resources such as Exception Reporting, Sales Audit, FP&A, IT and Loss Prevention. The Loss Prevention Business Analyst works cross-functionally in a dynamic, fast paced and demanding environment providing critical guidance to the organization's asset protection and profit improvement initiatives...
	Senior Asset Protection Specialist Santa Monica, CA This job contributes to REI's success by mitigating and reducing shrink (including theft and fraud by customers and employees) and increasing physical security for people and products in a specified retail store...
	Senior Asset Protection Specialist - San Francisco San Francisco, CA This job contributes to REI's success by mitigating and reducing shrink (including theft and fraud by customers and employees) and increasing physical security for people and products in a specified retail store...
	District LP Manager Stores - Various Locations As a District LP Manager, you'll lead several of our multi-million dollar stores to drive sales and deliver operational excellence. You'll control expenses and payroll budgets, handle personnel issues, merchandising, loss prevention and overall supervision of Store Managers in your District... West Saint Paul, MN Burlington, NC Orlando, FL Arlington Heights, IL

Today's Daily Job Postings from all around the net - Appearing today only

To apply to today's Internet Jobs, Click Here

Sponsor Today's Internet Jobs 

Mentors Are A Mirror, Inspire You as Leader, Can Become Your Sponsor
 

We want to post your tips or advice... Click here

Not getting the Daily? Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here