• Assess what information you're storing, and where, and who has access to it. This would include computers, network drives, file cabinets, emails, diskettes, tapes, thumb drives, and even home computers of those employees who telecommute.
  
  
• Make sure you dispose of information so that it cannot be reconstructed or read.
  
  
• Don't store sensitive information that you don't need such as stock application forms that might bear social security numbers.
  
  
• Take definite steps to ensure file cabinets and drawers are locked if necessary, implement a clean desk policy, track package shipments and monitor offsite storage.
  
  
• Keeping sensitive information on laptop hard drives is also very risky, so laptops should have access to the company's central computers for storage.
  
  
• Educate your employees to be aware of "phishing schemes" in which unsolicited emails ask for sensitive data.

If a breach occurs, a company should notify law enforcement, consumers, customers, credit bureaus and other companies that may be affected. Although federal law has been slow to develop in this area, 45 states now have laws to address companies' responsibilities if a breach should occur.

One thing is certain in this uncertain business environment: doing nothing is not an option.

If you need help in assessing and setting up fraud prevention controls in your company, please contact Tamy F. Laughman at 717-757-6999 or 800-745-8233, or send her an email by using the form below. Tamy is a Certified Fraud Examiner. She currently serves as Vice-President of the Central Penn Chapter of the ACFE (Association of Certified Fraud Examiners).

Register now for one of our FREE Annual Payroll Seminars, now scheduled in three locations. Find out more by visiting our website.