Fraud and Theft Risks in Global Supply Chains Are Everywhere

A new Kroll report sheds light on the complex and overlooked risks in today's international and heavily outsourced supply chains. And while software can help spot supply chain fraud, IT systems are also making enterprises more vulnerable.

By
Wed, April 30, 2008

CIO — The world may be flat, as Thomas Friedman posits in his book, but this complex and interconnected planet of commerce can be one scary and risky place to conduct business. Enterprises have discovered that their businesses are ripe for fraud and theft as they rely more and more on global outsourcing relationships, complex networks of suppliers and vast computer networks to conduct business.

A recent report from Kroll, a risk consulting company that provides investigative, security and technology services, outlines the risks companies face with their global supply chains and the amount of fraud, product tampering and theft taking place today. And while IT can help detect and prevent fraud and supply chain nightmares, the report suggests that it can also be a huge threat to a company's operations, reputation and future business prospects.

"At every step along the supply chain," notes the Kroll report, "businesses are vulnerable to an array of frauds ranging from simple theft, through disguising the poor quality of materials, to the misrepresentation of inventory assets."

The scale of supply chain fraud is difficult to measure and "too broad to estimate meaningfully," the Kroll report states. However, two pieces of Kroll survey data from its 2007/2008 "Global Fraud Report," which surveyed 892 global executives, show just how large an issue it can be: 42 percent of companies worldwide had suffered from at least one incident of supplier fraud or the theft of physical assets. And while those are just two of the many ways to abuse supply chains, 9 percent of companies had suffered both types.

So, can infosecurity systems and software come to the rescue? Not so fast, say Kroll's senior managers. "IT is part of the problem and is part of the solution," notes Stefano Demichelis, a senior director at Kroll, in the report.

"The enhancement of IT has increased a thousandfold the likelihood of fraud because of the increase in the sheer number of records," Demichelis points out. "There is a risk of having so much information that it can't be managed for proper fraud detection."

However, the seriousness and scope of the problem as outlined in the Kroll report doesn't mean that all hope is lost. "Companies can do much to mitigate the growing risk of supply chain fraud," the report states, "but only if they take fraud prevention seriously."

Continue Reading

This white paper describes the business challenges and opportunities that are driving interest in Identity Governance while discussing considerations your organization should make to help achieve project success.
This paper explores the concept of content-aware IAM, describes the integrated architecture for this new approach, and highlights the benefits that this approach provides.
Without policies, awareness and supported alternatives for sharing files securely, end-users will often overlook security and compliance in favor of getting the job done. Read this whitepaper to determine if your enterprise has a "Dropbox Problem" and ways successful organizations address this problem.
Content provided by Google

Find out about how Google creates a security-based platform for Google Apps, covering topics like information security, physical security, and operational security.
This document is aimed at those looking at data center builds, upgrades, or consolidation. It provides an introduction to some of the new security challenges of such environments and provides recommendations for implementing security in next-generation data centers.
This editorial brief addresses the disconnect between security and operations teams and the need for IT operations teams to address security and risk management.
Learn how Gartner's criteria for next generation IPS helps organizations achieve effective threat prevention despite changes in network communications, new applications, and changes in the threat landscape.
3 minute Flash video - overview of the need for and value of Configuration Control.
Cloud deployments are playing a critical role in propelling innovation for many companies. At the same time security has become the #1 one of the top concerns for IT and business leaders as they migrate into the cloud. In this webinar, learn from Accenture discusses how to recast the cloud as a "fresh chance to rethink your approach to security."
Have you been looking to hear about customer's experiences with the new VMware vCenter Site Recovery Manager product? View this webcast to learn about VMware customer, Navicure, and their experiences testing and evaluating the recovery manager, their progress in implementing it in their environment and their advice other customers considering using vCenter.
Many enterprises have discovered that the use of virtualization to support desktop workloads creates a range of significant benefits. These benefits include price efficiencies, improved IT management and greater agility and choice for end users.

This VMware sponsored webcast with IDC will provide both quantitative measurement of the business value -- defined as the expected ROI -- and qualitative analysis associated with the use of VMware View™. IDC will also provide an analysis of the View Composer and ThinApp™ features of VMware View, including the business value of these solutions and an overview of how they work.

Attend this webcast to learn about:
- Challenges and barriers that might impede the adoption of desktop virtualization
- Navigating roadblocks to facilitate a strategic implementation
- Optimizing qualitative and quantitative benefits to IT and your business
VMware recently announced VMware vFabric™ Data Director, a new database deployment and operations platform that enables enterprise IT organizations to offer database as a private cloud service. Built on top of VMware vSphere 5, vFabric Data Director enables IT organizations to ontrol database sprawl through automation and consistent policy enforcement and accelerate application development cycles with self-service database management. Attend this webcast to learn how vFabric Data Director can help you build database-as-a-service in your datacenter.
Newsletter Sign-Up »

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all Newsletters | Privacy Policy
Resource Center