Recent Posts

Showing posts with label Industrial Espionage. Show all posts
Showing posts with label Industrial Espionage. Show all posts

Wednesday, April 2, 2014

The Crime-Business Balance

Is it responsible to ignore crime if you think you have a just reason?  

The Cost

http://www.standard.co.uk/
Business operators look at risks and decide how much of it to tolerate. Part of tolerating a certain amount of risk can also mean revealing a willingness to take losses for the sake of generating sales and absorbing market share. This balance is famously summed up as "the cost of doing business." This cost is typically measured in dollars but to gain those dollars, you have to give something up.  What that something is may not be quantifiable but it is real.  Such is the nature of risk taking.

Fight or Flee

A trade-off lumped into "the cost of doing business" is tolerating a certain amount of crime.  We commonly hear of employee theft or shrinkage.  We hear of malingering and filing false worker's compensation claims.  Not every loss due to crime can be stopped but for the most part, they are confronted and mitigated everyday by professionals who work hard to protect their business from this financial erosion.  These issues exist as a result of criminal behaviors of individuals and to ignore these issues, would be ruinous. Anything less than a total concerted effort stop this behavior is not the norm. Unless, however, that effort to stop the behavior impacts market share. Take for example, the interesting decision by Microsoft to cease internal investigations related to theft for the sake of market share.

Investigation Compromised Business

Not long ago, Microsoft uncovered the theft of a source code for one of their products.  They were able to track down the source of the leak through an internal investigation.  The Microsoft investigators "cracked" the case by legally accessing a Hotmail account of someone involved in the scheme.  An ex-Microsoft employee was subsequently charged in Federal court for this theft of a trade secret.  Despite the investigative success, the case revealed Microsoft's access to and review of their customer's Hotmail account.  Despite this practice being the legal right of Microsoft, the appearance of backlash over the perceived privacy violation resulted in a policy change at Microsoft. So, instead of conducting their own internal investigations involving stolen property (intellectual or physical) the company "will refer the matter to Law Enforcement if further action is required."

Law Enforcement to the Rescue

By passing investigations along to law enforcement, Microsoft is banking the invasion of their customer's Hotmail accounts via search warrant will deflect any ill will toward the company as they would have to be compliant with the law.  This makes it sound better to the privacy concerned customer and Microsoft sees itself as being on the moral high ground of the privacy issue.  It really reveals how much Microsoft perceives privacy to be a critical market share driver.  This is where the trade-off for this policy change gets dangerous. Regardless of their motivation for the change Microsoft is also gambling that the public servants in Law Enforcement can adequately protect their intellectual secrets.  This is a tremendous vote of confidence for local law enforcement and hopefully, for Microsoft's sake, they have the talent and resources to do the job.

One Risk for Others

Even if law enforcement is up to the task, this shift in policy still leaves gaps. For one, Microsoft is potentially giving up critical time by passing this along. Law enforcement, no matter how much access they have, will still not be as quick to respond as company investigators.  Another issue would be this knowledge is now known to criminals. They know where the weakness lies and have gained valuable time to move information out of the company. Finally, and most importantly, what if a criminal act impacts the stability of a platform?  Microsoft may have the ability to stop this issue but because of an internal policy, they pass it to an outside source.  In the mean time, a critical event occurs and a system is compromised.  Hopefully, Microsoft built protections into their policies and procedures to prevent this from happening.

Win - Win?

In the end, "the cost of doing business" is a slippery slope especially when it comes to finding a balance between market share and tolerated losses.  It is revealing how privacy issues in the marketplace have altered this equation. What may be lost are the voices of those customers who would rather lose a certain level of privacy to ensure a stable service from a company that does not yield to criminals for the sake of market share.

Friday, March 14, 2014

The Undercover Option

Covert Investigators Can Solve Big Problems, Save Money and Save Lives

Undercover Boss takes role too far

http://articles.latimes.com/
In an amazing story of brazenness, it was reported this week that the CEO from the sporting goods chain, Modell’s, himself, was accused of industrial espionage.   Mitchell Modell was alleged to have donned a disguise, assumed the identity of a Dick’s Sporting Goods executive, concocted a story and got into restricted, competitive information at a Dick’s store in New Jersey. Competition is a good thing but there are limits.

Covert tools have their uses

Certainly gaining restricted information under false pretenses from a competitor is a no-no.  However, what if the undercover operative is working for the company and not against it? Gathering intelligence on internal functions is a common practice.  There are numerous “secret shopper” services that go into establishments to evaluate customer service and to weed out corruptible employees. These options provide the business with good intelligence that can generate immediate opportunities for improvement. However, there are limitations to what theses offerings can provide.   Some business problems call for something a bit more involved.  

Deep cover

http://www.mediterraneanvilla.net
There are times when a business may require hiring an undercover investigator to resolve a problem.  These problems often involve drug use on the job or serious cases of employee theft or industrial espionage. When these situations arise, professional investigators are installed in the business to essentially spy on their colleagues and report back to the business what exactly is going on.  In addition to this option being effective, it is surprisingly cost effective as the undercover operative is integrated into the workforce and actually performs work for the company.

When drugs are not medicinal 

A common reason for deploying an undercover operative is to neutralize a drug problem.  Often business must deal lost productivity, accidents, addicted employees, questionable time off, and increased business costs. These problems may be linked to on the job use or even worse - an on the job dealer who has many co-workers addicted.  While drug testing may be an option to help mitigate this type of problem, there are cases where it is not realistic.  

How this works

When undercover investigators are placed into a business, a very small circle of people know about the operation.  Typically, this includes one executive and someone in the human resources area who can facilitate the operative’s paperwork.  The operative may assume a different name at the job and will have a well rehearsed back story that allows them to enter into the workforce without suspicion.  On drug cases, the undercover operative may work with local law enforcement to make controlled purchases of drugs once a dealer has been targeted and his/her confidence is gained.  Once the purchase is made, the dealer’s arrest is executed after the operative is pulled out.  At that time, the business is usually able to release the dealer from employment.

Outcomes

Certainly the removal of risky employees who cause problems for the business makes good dollars and sense. But on a more human level this action by a company sends a message that they are genuinely concerned for health and safety of their employees and will do what it takes to protect them and the business from failure.