1. FORENSIC ACCOUNTING - BA124 - 2010Slide 17-1 Today’s Topics n E-Commerce Fraud n E-Commerce Fraud Risks n E-Commerce Fraud Prevention

2. FORENSIC ACCOUNTING - BA124 - 2010Slide 17-2 E-Commerce The Good, The Bad & The Ugly n The Good n Faster, cheaper and less prone to error n Customer centric n The Bad n Hardware issues…spotted owl disease n False sense of organization n Initial cost and implementation issues n Emerging economy issues…haves and have-nots n The Ugly n The bad guys and hackers…our focus today

3. FORENSIC ACCOUNTING - BA124 - 2010Slide 17-3 Consider This… n The race to 60 million users n Radio—30 years n TV—15 years n The Internet—3 years to 90 million users

4. FORENSIC ACCOUNTING - BA124 - 2010Slide 17-4 E-Commerce Fraud Risks n P – O – R…see text

5. FORENSIC ACCOUNTING - BA124 - 2010Slide 17-5 E-Commerce Fraud Prevention n Difficult to impact pressure and rationalization at this time n Lack of personal contact with fraudsters n Avoid “iffy” situations and “sketchy” firms n Focus on reducing opportunities

6. FORENSIC ACCOUNTING - BA124 - 2010Slide 17-6 Prevention in the Opportunity Sector n The control environment n Integrity and ethics n Board and Audit Committee involvement n Tone at the Top n Human resource policies and practices (training) n Risk assessment efforts n Implementation of control activities

7. FORENSIC ACCOUNTING - BA124 - 2010Slide 17-7 Risk Assessment n Data theft is the big issue…not cash n Sniffing for passwords n Unauthorized password access n False identification of users n Spoofing for headers and “IP” (protocol models) n Impersonation of customers n False or misleading websites n Hijacking to copy-cat websites

8. FORENSIC ACCOUNTING - BA124 - 2010Slide 17-8 Prevention Through Control Activities n Separation of duties n Authorization techniques n Firewalls n Passwords n Digital signatures n Biometrics n Documentation and encryption n Physical control n Independent assessment (operational auditing) n On-going not spot-checking

9. FORENSIC ACCOUNTING - BA124 - 2010Slide 17-9 E-Commerce Fraud Detection n Proactive posture n On-going analysis and effort n Defending the Digital Frontier, Mark Doll, Sajay Rai and Jose Granado. Ernst & Young, LLP.