Immediate Vault Immediate Access

RIMS ERM Conference 2021: IRS Receives Global Enterprise Risk Management Award of Distinction

On Friday, RIMS President Ellen Dunkin presented the Internal Revenue Service (IRS) with the 2021 Global Enterprise Risk Management Award of Distinction at the Society’s ERM Conference in New York City. The honor recognized the IRS’s outstanding achievements that allow it to anticipate emerging risks and establish the appropriate culture, processes and structures to strengthen strategic decision-making. 

Navigating the impacts of an extended government shutdown, sweeping tax reforms, operational disruption due to the COVID-19 pandemic and providing essential financial relief to thousands of businesses and individuals across the United States, the IRS ERM program helped the agency to remain resilient and effectively manage a multitude of dynamic challenges.

“Through the ERM program’s focus on embedding risk management capabilities into the existing structures and operations, the agency has become more risk aware,” said Jeffrey Tribiano, the IRS’s deputy commissioner for operations support. “There is also greater collaboration across the enterprise to address significant risks that require efforts from multiple business units. By effectively highlighting the enterprise-wide effects of risks, and by capturing risks on the enterprise risk profile, ERM has helped garner agency-wide attention and support for measures to help address the risks. Since IRS established its ERM program in 2014, it has played a critical role in helping the agency to better understand and respond to risk, thus making the organization more resilient and better able to serve the American people.” 

This year, RIMS honored three other organizations for their exceptional accomplishments developing, implementing and maturing ERM within their organizations. Honorees included:

  • 2021 RIMS Global ERM Award of Distinction Honorable Mention: Dallas Fort Worth International Airport
  • 2021 RIMS ERM Award of Distinction–U.S. Honoree: Eversource Energy
  • 2021 RIMS ERM Award of Distinction–International Honoree: EuroChem

“Enterprise risk management continues to deliver exceptional value to organizations, allowing them to successfully address emerging risks while also identifying and leveraging opportunities that might not have otherwise been apparent,” Dunkin said. “Risk professionals get better—and deliver better results—by learning from each other. We are so grateful to the IRS and all of honorees for sharing their ERM journeys with the RIMS community and doing their part to advance this rewarding profession.” 

Judging criteria for the Global ERM Award of Distinction include measurable, tangible and sustainable results; unique program strengths; ERM innovation that links risk with strategy or performance; and the program’s ability to build sustaining risk management capabilities. The panel comprises members of RIMS Strategic and Enterprise Risk Management Council.

RIMS ERM Conference 2021 was held November 11-12 in New York City and virtually. The program themed “ERM in an ESG World” focused on the growing risks stemming from environmental, social and governance challenges.

New York City’s New Biometric Information Law Governs Collection and Use of Consumer Health Data

For risk professionals, the COVID-19 pandemic has increased the importance of ensuring customer and employee safety measures are incorporated into operations, processes and future strategies. As many businesses reopen from pandemic shutdowns or return from remote work arrangements, some enterprises are now exploring both the effectiveness and the risks associated with conducting health screenings that collect biometric information and other personal health data.

This month, New York City released the Biometric Information Law, a new measure that goes into effect on July 9 and imposes disclosure requirements on businesses that collect consumer biometric information.

online pharmacy ciprodex with best prices today in the USA

It also sets parameters on what they can do with that information, most importantly, prohibiting the exchange of biometric information for anything of value.

As detailed in recent client notice from the law firm Reed Smith, highlights from the law include:

  • The measure requires a business that “collects, retains, converts, stores or shares biometric identifier information of customers” to place a “clear and conspicuous sign” near all consumer entrances that, in plain language, discloses the collection, retention or sharing of biometric information.
  • It stipulates that it is unlawful to “sell, lease, trade, share in exchange for anything of value or otherwise profit from the transaction of biometric identifier information.”
  • It establishes “an ‘aggrieved’ consumer’s private right of action,” meaning that “[a]ny person who is aggrieved by a violation by this chapter is entitled to commence an action to enforce its protections.”

There are key exclusions, however, as “governmental agencies, employers, or agents” are expressly excluded from compliance with any provision.

New York is not the only state to enact a law attempting to govern how organizations can use biometric information. Arkansas, California, Illinois, Texas and Washington have also set guidelines for businesses.

online pharmacy tenormin with best prices today in the USA

Indeed, the recent Risk Management Magazine article “Preparing for Biometric Litigation from COVID-19” addresses the imminent and critical questions businesses must answer when collecting and handling such data.

Sensitivities surrounding the confidentiality of biometric and other health information are not new in certain industries, such as healthcare. Further, even before COVID-19, risk professionals were already grappling with the risks associated with new biometric technologies and the data collected, especially with regard to facial recognition, wearables and even the rise in popularity of telehealth.

Now, with every organization on high alert about infectious diseases and how quickly they can interrupt business, health and safety have become top priorities for every risk professional in every sector.

online pharmacy xtandi with best prices today in the USA

As risk professionals look to new technology for help with these concerns, monitoring the emerging regulation and security risks around health and biometric technology will become increasingly critical in balancing benefit and risk to their organizations.
Online Pharmacy https://galenapharm.com/ no prescription
Data security will continue to remain a significant threat, but New York’s Biometric Information Law should serve as a reminder that what the organization does with that data can also have a lasting impact on the enterprise’s reputation and consumer trust.

For more information to help risk professionals manage new health technology and data, check out these articles from Risk Management Magazine:

Employee Engagement is Key in COVID-19 Recovery

Businesses and their employees have had to rapidly adjust to the shutdowns and disruptions caused by the COVID-19 pandemic, and their ability to adapt and pivot will continue to be critical as organizations start to recover from the impacts of the crisis.

To further compound these circumstances, the ability to maintain engaged, empowered, and satisfied team members has proven challenging for many. While some organizations have thrived under their modified operating conditions, others have struggled to respond to change and keep team members engaged and productive. While rates of vaccinations are bringing some hope about the pandemic’s eventual end, the tidal wave of change we have experienced is unlikely to ebb any time soon.

When creating your COVID-19 recovery plans, the value of engaged and satisfied team members in this fast-moving environment must not be understated.

buy tobradex online www.phamatech.com/wp-content/uploads/2023/10/jpg/tobradex.html no prescription pharmacy

Engaged employees will support your organization to achieve its mission, execute its strategy and generate results, particularly as times remain uncertain.

As leaders, we must ask: how can we leverage the rapid change we have experienced over the past year, continue to drive growth and sustain employee satisfaction and engagement? Here’s how:

1. Accept remote or hybrid work environments as the “new normal”

The days of office cubicles and open floor plans for all employees are gone. We now operate in a world where some of our team members will continue to work where it is the safest, most suitable, and most empowering for them.

Many organizations across industries have already embraced the fact that working remotely, in some form or fashion, is here to stay. This shift has had many benefits—such as being able to recruit talent outside of your typical geographic area and eliminating lengthy commutes from home to office. However, the shift has not been without challenges and very real risks.

As we move into a recovery phase, leaders must remain alert to the challenges brought by an environment with minimal face-to-face interaction, the potential for feelings of social isolation, the need for different ways to access information or support, and the natural distractions of being at home.

For leaders, scheduling regular check-ins and establishing rules of engagement has not changed, regardless of whether you work in an office or at home. However, with a majority of our workforce currently at home, we need to get creative in the way we support and engage our teams.

2. Manage the new risks

This shift from in-office environments to hybrid or remote work environments has brought to light many physical, psychological and technological risks. Leaders must build out their risk management framework to incorporate a broader lens.

buy solosec online www.phamatech.com/wp-content/uploads/2023/10/jpg/solosec.html no prescription pharmacy

It is now paramount to ensure team members have access to resources to work from home safely and comfortably, with the right technology support and a focus on open lines of communication.

The pandemic has also brought on feelings of isolation and fear for many. If you have yet to adjust your workplace mental and physical support offerings, do not neglect these critical needs any longer. Ensure such offerings are also set up for those workers continuing in a hybrid or fully remote setting.

3. Prioritize communication

How we communicate and engage with our teams is as important as ever. Whether it’s Zoom, Slack, Webex, Microsoft Teams or any of the other platforms we have increasingly relied on over the past year, we need to provide opportunities for both formal and informal communication to flow.

buy neurontin online www.phamatech.com/wp-content/uploads/2023/10/jpg/neurontin.html no prescription pharmacy

Through informal social connections, leaders can demonstrate emotional support and consideration for their team, which ultimately leads to higher engagement.

When leaders are engaged, supportive, and available to their employees, it helps reduce feelings of isolation and reinforces your strong company culture. At the end of the day, when team members feel they work for an organization that supports their ambitions and wellbeing, it increases productivity, retention, and cost savings. This translates to bottom-line success.

Combating Fraudulent COVID Unemployment Claims

As federal and state officials scramble to send unemployment and stimulus funds to help people hit hard by COVID-19 business shutdowns, it has become a perfect storm for cyber fraud.

The payments are an easy target for cybercriminals as hackers and cyber gangs around the world have started to file unemployment claims use stolen identities. Some criminals claim benefits in the names of dead or incarcerated people, while others set up shell companies, “hiring and firing” fictitious employees to collect payments.

For example, cyber gangs in Nigeria have stolen millions in benefits from multiple states using hacked names, Social Security numbers and other information sold for as little as two dollars each on the dark web. In New York, a man was charged with filing more than $1.4 million in false COVID-19 unemployment claims, using the stolen identities of over 250 unknowing victims. According to U.S. attorneys, he was caught in part because he used the same IP address and security question and answer—the name of his family dog, Benji—to submit the applications.

The U.S. Department of Labor estimates fraudsters may already have stolen at least $63 billion through phony jobless claims, while other reports say the losses could be as high as $200 billion. In addition, unsuspecting victims are at risk of receiving surprise tax bills because cybercriminals stole their identities and filed fraudulent claims for COVID-19 unemployment payments.

Watch Closely for Signs of Fraud

The Federal Trade Commission warns that unemployment fraud puts workers at additional risk of identity theft crimes including tax fraud. What can you do to help protect your employees?

Unemployment fraud is often uncovered when employers are notified by state officials that employees have applied for benefits. If they are still working, they may be the victim of identity theft.

buy clomiphene online cphia2023.com/wp-content/uploads/2023/08/jpg/clomiphene.html no prescription pharmacy

Be alert to the signs of cybercrimes and unemployment fraud. Contact your human resources department or tax administrator and ask them to look carefully at any notices or requests they receive from state unemployment officials. If you get a report about unemployment benefits that an employee did not request or receive, contact the employment division of your state labor department. Unemployment fraud is so widespread that most states have set up special procedures to deal with these situations.

buy biaxin online cphia2023.com/wp-content/uploads/2023/08/jpg/biaxin.html no prescription pharmacy

Warn Your Employees

Let employees know that unemployment scams are a serious problem. Identity theft can also lead to tax fraud, credit card theft and loans taken out in their names.

buy cipro online cphia2023.com/wp-content/uploads/2023/08/jpg/cipro.html no prescription pharmacy

Notify a working employee immediately if the state informs you they have filed for unemployment benefits. They may be the victim of identity theft and should file a police report. Officials say workers scammed by cybercriminals do not have to pay unemployment taxes, but they must report the crime to the state labor department. And they should file their federal and state taxes on time for the correct amount of their income. The U.S. Labor Department has created a special website for victims of unemployment fraud.

Review Your Cybersecurity

Much of the personally identifiable information used by cyber thieves comes from data breaches, phishing schemes and other cyberattacks. Remind employees, particularly in human resources and tax departments, to be alert for suspicious emails, telephone calls and text messages about payroll information or W-2 forms.

The threat will continue beyond the pandemic. Business email compromise, in which employees are tricked into paying company funds into fraudulent accounts, is at an all-time high, so make sure employees have regular cybersecurity training. If you haven’t conducted a data inventory, do so now. Once you know what data you keep, you can determine what controls you require to protect that data. Store employee records securely and dispose of personally identifiable information carefully. It is also advisable to use a secure email gateway, which protects from spam, viruses, malware and denial-of-service attacks, and make sure employees working remotely are using secure company devices. Install patches and software updates, setting up automatic software updates whenever possible.

Unemployment or tax fraud targeting multiple employees may indicate a data breach. If you have a theft or cyberattack, contact your insurance carrier and, if necessary, seek expert help to identify the source, the extent of the problem and how best to respond.