The D&D Daily Mobile Edition
LP, AP & IT Security's #1 News Source

2018 GLPS - Group LP Selfies
Your Team - Your Pride - Our Industry
Building Industry Pride - One Team Selfie at a Time



Ulta Beauty East Division Loss Prevention Team

" The possibilities are beautiful"

Featured in picture, left to right:

Area Loss Prevention Managers: Sean McAlister, Matt Pistel, Wynter Davis, Steve Smith, Luisa Rozo, Jenny Deyhle, Mayra Hiraldo Torres, Mickey Williams, Cody Duncan, Michael McKnight, LaToya DeVico, Jen Robben, Brad Swain, Dan Taylor, Tim Berry, Alaina Kring, Ryan Ballard, Grant Danby, Peggy Forbes

Regional Loss Prevention Managers: Robin Perez, Misty Davis, Marc Abramson, Jake Welch

Supply Chain Loss Prevention Manager: Bill Gillespie

Director, Loss Prevention Operations: Michael Mayernik

Got a picture of your team
on your cell phone?

Send it to us!

Submit Your New Corporate Hires/Promotions
or New Position 

Top Industry News
 

This is the Age of Technological (Digital) Revolution
It's Sure As ... Not the Retail Apocalypse
Which by definition itself "is a period in which one or more technologies is replaced by another technology in a short amount of time. It is an era of accelerated technological progress characterized by new innovations whose rapid application and diffusion cause an abrupt change in society."

Now that defines today's retail existence. Regardless of what side you're on.

Retail Apocalypse - Bah Hum Bug - Only for those either loaded with depth from the venture capitalists world that cashed out and profited off the backs of tens of thousands of retail workers whose senior executives had no alternative, or those that found themselves right in the crosshairs of Amazon and their merry band of online retail colleagues.

Yes, tens of thousands have lost their jobs and virtually every job out there now, from the CEOs who are experiencing their highest turnover rate in history to CFOs who are struggling to redefine themselves, to Loss Prevention and Cyber Security (IT Security) who find themselves in a state of convergence that will ultimately, and without their current acknowledgement or agreement, merge even further to a point that possibly one day they could be one in the same.

Yes, every job is changing all the way to the sales floor and fulfillment center. Those folks one day not too far off, will be armed with the technology that redefines retail and delivers what the consumer wants in a matter of hours and in the process of getting there, there will be causalities. Lots of them.

But for those who cried 'retail apocalypse', it never happened, and Matt Shay, the NRF's president was right all along. This is an age that will see retail evolve to a point we've never seen before and the digital revolution is driving it in virtually every industry on the planet and, quite frankly, it's an exciting time for retail, especially for the consumer.

The biggest fly in the ointment right now is the increased violence in stores, which everyone acknowledges, and the retail violent deaths, which no one else, other than the Daily, is even willing to acknowledge.

The Daily's 'Q3 Retail Violent Death' report published last Monday, showed a drastic 47% increase over Q3 2017, which regardless of how you view our methodology or report, is severe and warrants consideration.

Even if you apply a 50% error ratio, which in our opinion is ridiculous, as we stand by our process, it still shows a 27% increase. Which is alarming and poses a number of questions the industry needs to address.

Just a Thought,
Gus

 

Hurricane Willa Pops Up Over Night off Coast of Mexico; Headed for Western TX by Wed. & Could Impact Florida
Rain will impact already flooded western Texas and may impact Western Florida as well. Could bring up to 18 inches of rain and reach a category 5 hurricane. cbsnews.com

Orlando police sign on for second trial of Amazon facial recognition technology
The Orlando Police Department has signed an agreement for its second test of Amazon’s facial recognition technology despite what Orlando Weekly characterizes as widespread concerns about privacy and civil liberties. Orlando Police Chief John Mina says concerns are misplaced, because even if it is eventually deployed for production, the system would only be used to provide alerts when it identifies an individual with a warrant out for his or her arrest.

The only other police department in the country openly using Rekognition is the Washington County Sherriff’s Office in Oregon, which does not make use of its real-time capabilities.

Amazon CEO Jeff Bezos recently spoke at an event about the importance of facing scrutiny, but also said that making unpopular decisions is part of the job of senior leadership. biometricupdate.com

This is Just the Beginning - Of Showing Up Stoned For Work
Employees & Execs Failing Drug Tests At Shocking Rates
New York City employers are squarely blaming a raging drug epidemic for much of the trouble they have filling jobs in one of the tightest labor markets in a generation. More local prospective workers are testing positive for substance abuse, or showing up stoned for work, according to industry analysts.

The abuse of hard drugs, such as cocaine and methamphetamine, has exploded, and further threatens productivity. A 2018 report by Quest Diagnostics reveals a 150% increase from 2013 to 2017 of methamphetamine positivity rates for workers tested in the wider New York region, which covers New Jersey and Pennsylvania.

Analysts believe there is a direct connection between drug-impaired workers and employers’ inability to fill open slots.

Today, some analysts believe as many as 25 percent or more of applicants for some jobs in New York City are failing drug testing, reflecting a broader national pattern. Analysts estimate that tests are conducted by as many as 50 percent of New York City employers. nypost.com

Taking Steps to Eliminate Racism in the Workplace
There's a disturbing paradox in the American workplace. As organizations look to reap the benefits of a diverse, multicultural and inclusive workforce, the countervailing force of racism often undermines that effort, creating challenges that HR often is responsible for overcoming.

Binna Kandola, a British business psychologist and author of Racism at Work: The Danger of Indifference (Pearn Kandola Publishing, 2018) likens racism to a virus that lingers in organizations because people have internalized racist stereotypes.

"Unless we are prepared to have a discussion about the impact of stereotypes and how they affect decisions that are made within organizations, we are not going to make any more progress toward eradicating racism," Kandola said. shrm.org

The Merchants Push to ID Customers
Will it Eventually Lead to the LP Promise Land
"Stores rarely ID customers before they check out"
According to BRP’s “2018 Customer Experience/Unified Commerce Survey,” only 23 percent of retailers are able to identify customers inside stores before they check out.

Of the 23 percent, 13 percent have ways to identify customers when they walk in and another 10 percent sometime during the pre-checkout stage. Fifty-seven percent can identify customers at checkout. Twenty percent are unable to identify customers at all at the store level.

73% of Customers Want Order Tracking Across all Touchpoints but only 7% of Retailers Currently Offer “Start Anywhere, Finish Anywhere” Order Capabilities.

BRP’s study noted that not being able to identify individuals prevents associates from leveraging customer information to allow personalized interaction such as clienteling and guided selling that can drive a better experience.

When asked what types of incentives they offered customers to encourage in-store identification, the top answers were personalized service, 37 percent, and product incentives, 30 percent.

BRP wrote, “Unfortunately, this means that fewer retailers see the value in gathering customer information. In practice, incentives create a strong correlation to the rate in which customers identify themselves, and identification creates opportunities to personalize the shopping experience and or offer special discounts and promotions, which typically translate into higher sales.” retailwire.com brpconsulting.com

Why you should take an operational approach to risk management
Combining two seemingly unrelated entities to make a better, more useful creation is a keystone of innovation. Think of products like the clock radio and the wheeled suitcase, or putting meat between two slices of bread to make a sandwich, and you can see how effective it can be to combine two outwardly disparate things.

This viewpoint is useful in many scenarios, including in the business realm, especially when it comes to protecting a business from risk. Many companies treat risk management and business continuity as different entities under the same workflows, and that is a mistake; to be optimally effective, the two must be combined and aligned.

Business continuity traditionally starts with a business impact assessment, but many companies don’t go beyond that, making no tactical plan or strategic decisions on how to reduce impact once they have identified what could go wrong. The risk management process has been more mature, identifying various ways to treat problems, assigning it to someone, and trying to reduce the likelihood of the event occurring, but not doing much to reduce the impact of the event.

To create a panoramic view of where an organization can be harmed if something bad happens, businesses must merge the concepts of business resilience (dependencies, impacts, incident management, and recovery) and risk management (assessment, controls, and effectiveness) and optimize them.

Bringing the two views together and performing holistic dependency mapping of entire ecosystem allows an organization to treat both as a single operational process, bringing data together to create actionable info (based on the “information foundation” the company has created about impacts to business operations that can result from a wide variety of disruptions and risks, including cyber and physical) to empower decisive actions and positive results. helpnetsecurity.com

High-End NYC Retail CEO Gets 9 Months Prison ++
Forged Judges Signature on 12 Injunctions Removing Negative Online Postings
Fed DA Says: Forging Injunctions Conduct is "Widespread & Rampant"
A "privileged" Manhattan sapphire merchant was sentenced to nine months in prison Friday for forging a federal judge's signature, after a prosecutor called such conduct "rampant" and the sentencing judge said the CEO's emails bragging about how easy the caper was spoke to the need to deter other would-be fakers. The prison term will be followed by three years of supervision, to include 200 hours of community service and five months of home detention. Judge Carter also hit Arnstein with a $20,000 fine.

Arnstein copped to a count of conspiracy to forge a judge's signature in September 2017. He said the lawbreaking occurred after he spent three years in court and huge legal fees seeking to stop a former business partner from saying negative things about him and his business online.

In a 2014 email Arnstein told a colleague that he "spent 100k on lawyers to get a court order injunction to have things removed from Google and Youtube, only to photoshop the documents for future use" and that he "could have saved 100k and 2 years of waiting/damage if I just used photoshop."

He forged the signature of U.S. District Judge Allison J. Nathan and sent it to Google 12 times as more negative comments cropped up, prosecutor Daniel Noble said Friday.

Noble told Judge Carter that it would be "unfair" to allow a man of wealth and status to avoid prison in the first-of-its-kind case, especially since the feds are looking into multiple cases where similar forgeries may have occurred. "I can represent to the court that this conduct is widespread," Noble said. "This conduct is rampant. law360.com

Gen Z is Coming to Your Office - Get Ready to Adapt
The generation now entering the workforce is sober, industrious and driven by money. They are also socially awkward and timid about taking the reins.

About 17 million members of Generation Z are now adults and starting to enter the U.S. workforce, and employers haven’t seen a generation like this since the Great Depression. They came of age during recessions, financial crises, war, terror threats, school shootings and under the constant glare of technology and social media. The broad result is a scarred generation, cautious and hardened by economic and social turbulence.

Gen Z totals about 67 million, including those born roughly beginning in 1997 up until a few years ago. Its members are more eager to get rich than the past three generations but are less interested in owning their own businesses, according to surveys. As teenagers many postponed risk-taking rites of passage such as sex, drinking and getting driver’s licenses. Now they are eschewing student debt, having seen prior generations drive it to records, and trying to forge careers that can withstand economic crisis. wsj.com

Director of Security and Loss Prevention - Global - For XPO Logistics - Atlanta
Transport Topics ranked XPO Logistics #1 out of the top 50 logistics companies in North America, and Forbes named us one of America’s best employers. Do you want to take your career to the next level with a growing global company that knows hardworking and dedicated employees are its greatest asset? Then join XPO as the Director of Security and Loss Prevention. You will assist in creating, implementing, maintaining, and improving the security systems within our facilities around the world. We want to use your experience to protect and safeguard company assets, clients, employees, and guests. Your role is critical in positioning XPO for long-term success.

XPO Logistics (NYSE: XPO) is a top ten global logistics company. We run our business as one highly integrated network of people, technology and physical assets in 32 countries, with over 97,000 employees and 1,505 locations. xpo.com

XPO Logistics Awarded National LTL Carrier of the Year by Transplace

NYPD Removes Nearly 3,000 Body Cameras After One Catches Fire

Supervalu to close remaining Shop ‘n Save stores

H&M Adds Retail Collaboration Platform Convo - eliminates Corp. Email for Non-Desk Employees

Untuckit Plans Rapid Growth from its Current 41 Stores

Exclusive CEO Q&A: Get Ready For VR Saturation In Retail By 2028



Last week's #1 article --

Full list of 142 Sears and Kmart stores closing

Cartoon: Amazon Eats Sears


 

U.S. retailers & NRF President to address impact of European privacy regulations
During Brussels Conference this Week
U.S. retailers will highlight challenges faced in complying with European privacy rules while still serving the needs of their customers as regulators meet for an international conference in Brussels next week, the National Retail Federation said today.

"In an increasingly global economy, retailers are required to comply with regulations from around the world," NRF President and CEO Matthew Shay said. "Privacy is a top priority for retailers and they want to honor the privacy expectations of their customers and the laws of the countries where they live. But retailers shouldn't have their hands tied when it comes to using technology and data to deliver the high quality of customer service that consumers demand. It's important to find the right balance between regulations and practicality."

Shay, other NRF executives and a dozen representatives of major U.S. retailers will hold a series of meetings with U.S. and European Union officials during the annual International Conference of Data Protection and Privacy Commissioners.

"We want officials to realize that retailers' use of consumer data is very different than what other industries might do," Shay said. "Retailers use data to better serve their customers and improve the shopping experience, not to monetize the data itself."

Retailers will meet later in the day at the U.S. Embassy with Mark Libby, deputy chief of the U.S. Mission to the European Union, to seek support in making EU officials aware of how GDPR affects retailers and how U.S. businesses use technology to benefit their customers. nrf.com

Security budgets are rising, but is it enough?
A majority of companies (54 percent) are worried that they will soon outgrow their security solutions, according to Threat Stack. While budgets are expected to increase by 19 percent over the next two years, organizations are struggling with a disconnect between security and DevOps and are facing difficulties in determining where to allocate this budget in the face of rapidly evolving infrastructure.

With less than half of their infrastructure remaining on-premise (41 percent), businesses are increasingly making significant migrations to infrastructure-as-a-service (IaaS) (25 percent), platform-as-a-service (PaaS) (17 percent), and containers (10 percent). This is one of the primary reasons why respondents indicated that their top two budget investments in 2019 will be directed at cloud workload security and intrusion detection systems (IDS). helpnewsecurity.com

WSJ Cyber Daily: Organized Hacker Groups Target Tech Outsourcers
Hackers after the big fish are targeting outsourcers, the Department of Homeland Security warns. If there are holes in the networks of these firms, which manage companies’ websites, cloud applications and other technology services, attackers could infiltrate and then poke around for ways to spread into the networks of customers, such as big banks, drug makers and others. Securing your supply chain is never easy -- and never a job complete -- but business leaders can take steps to be safer, WSJ Pro Cybersecurity’s Catherine Stupp reports. A critical move: keep careful track of the credentials you give to your providers and make sure they have expiration dates.

Behind the First U.S. Cybersecurity Assessment
October 2018 marks the 15th annual National Cybersecurity Awareness Month, and today, FICO is making big news: we have teamed with the U.S. Chamber of Commerce to help all American businesses be more aware of, and better manage, their cybersecurity risk.

The first step in managing risk is quantifying it — and that’s exactly what the Assessment of Business Cybersecurity (ABC) does. Designed by FICO and the Chamber, and powered by the empirically derived FICO Cyber Risk Score, the ABC was developed to provide an objective benchmark for the cybersecurity of U.S. businesses. It’s the first national cybersecurity assessment benchmarking the risk levels of different business sectors, and our joint initiative gives all companies the opportunity to see how their risk of data breach stacks up to peer organizations.

Today marks the release of the first quarterly Assessment of Business Cybersecurity, at the Chamber’s Seventh Annual Cybersecurity Summit in Washington, DC. The ABC is based on the individual FICO Cyber Risk Score of 2,574 businesses across 10 key sectors of the US economy. It’s an aggregate measure of security risk across small, medium, and large companies, and an important indicator in understanding macro cyber risk trends at the national and sector levels. fico.com

Understanding SOCs' 4 Top Deficiencies
In this year's edition of its annual security operation center (SOC) survey, the SANS Institute identified the four most common SOC deficiencies. The root of these shortcomings can be traced to a familiar source: people, processes, and proper planning and implementation of technology. Here's a look at the worst four and what security teams can do about them.

1. Automation/Orchestration
Most SOCs lag in automation and orchestration because the SOC team doesn't know what processes should be automated. An organization's employees are its first line of defense. Start by interviewing SOC personnel to understand their responsibilities and identify repeatable processes, such as evidence gathering during an incident (IP/URL reputation, whois information, etc.) that are time consuming and easily automated.

Finally, SOCs that fall short in terms of processes and playbooks typically have a low-maturity security program. For these organizations, working with a managed security service provider or managed detection and response service are good options.

2. Asset Discovery and Inventory
Asset inventory and management is hard. Even with automated tools in place, technology teams still have some heavy lifting to perform, especially in the initial up-front investment of time and energy. In a world of instant gratification, most organizations expect that if they invest in a tool, it should accelerate business processes. Unfortunately, due to the dynamic nature of IT environments and technology, SOC teams are too often required to roll up their sleeves.

3. Manual Event Correlation
This seems counterintuitive, but there's a good explanation. Deploying a SIEM is not as simple as turning it on and pointing log sources to it. Organizations must understand their log sources and the overall visibility they provide into the environment.

4. SOC/NOC Integration
This deficiency is a cultural problem. SOC teams have one agenda (detection and protection), while Network Operations Teams (NOCs) have another (maintaining uptime and availability). These two are often at odds with each other. Take, for example, the age-old conflict of least privilege. NOC teams want to have the keys to the castle and be able to move freely about the environment. SOC teams are focused on locking down the environment to better identify anomalies that may indicate malicious activity.

With proper planning and deployment, and with the right processes and procedures in place, overcoming these SOC deficiencies is within reach of most organizations. For those that lack the appropriate resources or security program maturity, a managed security service provider or managed detection and response service is a good alternative. darkreading.com

Investigation or Exasperation? The State of Security Operations
Cyberattacks are top of mind for organizations across the globe. In fact, 62 percent of firms are being attacked at least weekly and 45 percent are experiencing a rise in the number of security threats. But do organizations have the processes in place to investigate and effectively respond to these incidents? IDC recently surveyed security decision makers at 600 organizations to understand the state of security operations today.

Download this InfoBrief to discover:
• The consolidated time security teams spend on incident response
• How organizations are coping with an average of 40 actionable security incidents per week
• Where organizations are focusing their security efforts govinfosecurity.com

Download Brief

2.6 billion to use biometrics for payments by 2023
The report, Biometrics for Payments; Market and Technology Analysis, Adoption Strategies and Forecasts 2018-2023 - Second Edition, includes the prediction that there will be 2.6 billion people using biometric payments by 2023, driven by demand for frictionless authentication in all channels, the need to reduce payment fraud, regulation at both the state and industry level, and technology standardization. biometricupdate.com

Audits: The Missing Layer in Cybersecurity
Involving the audit team ensures that technology solutions are not just sitting on the shelf or being underutilized to strategically address security risks.  darkreading.com

Trend Micro shines a light on its new cybersecurity solutions

e-commerce
Sponsored by The Zellman Group

CAPTCHAs Don’t Stop Bots—They Stop Customers
The CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) was originally designed to prevent bots, malware and artificial intelligence (AI) from interacting with a web page. These days, e-commerce companies use CAPTCHAs in an attempt to prevent fraud at scale, such as credential stuffing (testing stolen passwords in order to commit account takeover) and carding (testing stolen credit card numbers online in order to commit credit card fraud).

There are multiple ways, however, fraudsters get around CAPTCHA. A common method is to use a CAPTCHA-solving service, which relies on low-cost human labor in developing countries to solve CAPTCHA challenges on demand.

So, putting a CAPTCHA on your website or mobile app won’t stop fraud. But that’s not even the worst part.

A Stanford study found that a CAPTCHA typically takes 7-12 seconds for a consumer to successfully complete. As every marketing and e-commerce professional knows, the more time it takes to make a transaction, the more likely cart abandonment and site bounces become. cardnotpresent.com

Brand Protection: Combating Online Counterfeit with AI
To discover and monitor the brand-damaging content and counterfeit on the internet, web crawling is a technology commonly used by brand owners as well as banks and payment companies, which have to fulfill the requirements of card schemes like Visa GBPP (Global Brand Protection Program) and Mastercard BRAM (Business Risk Assessment and Mitigation Program).

Nevertheless, while web crawling technology helps to save a lot of time and human resources in checking an e-commerce website, a weakness of most of the current web crawling tools is that they can only do text-based crawling. That means bad merchants can easily bypass the keyword monitoring by using some ambiguous description with product photos.

Now, benefit from the development of artificial intelligence, brands or logos can be recognized by AI image analysis. And this technology has been adopted in some new web crawling tools or services. With this technological advancement, even if the counterfeit sellers use general wordings to describe the branded items, the new web crawlers can still recognize the logo or other signature graphics from the product pictures. We see that image recognition is a trend in brand protection, marketing, security, and many other scenarios. finextra.com

Uber Ambitiously Eyes 2021 for Food-Delivery Drones Launch
Job posting seeks an operations executive to help make delivery drones functional as soon as next year. The San Francisco company is seeking an operations executive who can help make delivery drones functional as soon as next year and commercially operational in multiple markets by 2021, according to a job posting that appeared on Uber’s website. App-reliant Uber has limited experience developing hardware beyond its nascent electric scooters and its equipment for self-driving vehicles, an as-yet unproven technology. wsj.com

ORC News
Sponsored by Auror
 

Retail Crime News
 

Rockford, IL: Man sentenced to 12.5 year for US Cellular Armed Robbery

Home of the Industry's Original
On the Move
 

Submit Your New Hires/Promotions
or New Position
See all the Industry Movement

Featured Job Listings
Sponsored by Delta Lock
Feature Your Job Here For 30 Days -
70% Aren't On the Boards
Post your job listing

Daily Jobs
Appearing One Day Only
View our Internet Jobs Archives here

• Regional AP & Safety Manager - Whole Foods Market - Bellevue, WA

• Regional LP Manager - Family Dollar - Dallas, TX

• LP Manager - Amazon - Goodyear, AZ

• LP & Safety Manager - Lowe's - Canton, MI

• LP & Safety Manager - Lowe's - Wentzville, MO

• Area LP Manager - Ross Stores - Casselberry, FL

• Area LP Manager - Goodwill of Seattle - Seattle, WA

• AP Manager - Century 21 Department Stores - New York, NY

• AP Manager - JCPenney - Corpus Christi, TX

• LP Supervisor - Kohl's - Little Rock, AR

• Manager, Asset Protection - Macy's - Columbus, OH

• LP Manager - Gap Inc. - Forth Worth/Rio Grande Valley, TX

• LP Manager - Lowe's - Toronto, ON

• LP Manager - RONA - St. John's, NL

• Regional LP Manager - Group Dynamite - Ontario, CN

Your Career
 

Tip of the Day
Sponsored by Vector Security Networks
 

When giving references it is best not to comment on someone if you haven't worked directly with them. Passing on third party information can be extremely detrimental to the employer and the job seeker. If an employer is going to the extent of conducting references and is considering making an investment in an executive than the process warrants direct information that can help both the employer and the job seeker in reaching their decisions. And as most know third party information is extremely unreliable and can cause both parties to make mistakes.

Just a Thought,
Gus

Post Your Tip or Advice!
(content subject to approval)

Upcoming Events

Florida Law Enforcement Property Recovery Unit Annual Training Conference Oct. 24-26 SAVE THE DATE Q4 RAM LP Committee Meeting Nov. 7th BJ's Wholesale Inc Corp. Office - Westboro, MA RLPSA Connect Nov. 15 NRF Big Show Jan. 13-15 ISCPO 2019 Conference March 6-7 CNP Expo 2019 May 21-24

See More Events

Recruiting?
Get your job e-mailed to everyone... everyday
Post on our Featured Jobs Board!

Reach your target audience in 2018 every day!
Request our 2018 Media Kit

Not getting the Daily?
Is it ending up in your spam folder?
Please make sure to add d-ddaily@downing-downing.com to your contact list, address book, trusted sender list, and/or company whitelist to ensure you receive our newsletter. 
Want to know how? Read Here

SUBSCRIBE

FEEDBACK

www.downing-downing.com

Advertise With The D&D Daily

36615 Vine Street, Suite 103
Willoughby, OH 44094
440.942.0671
copyright 2009-2019
all rights reserved globally