Latest News, Blogs & Announcements | Page 173

Identity management is a security issue which is becoming increasingly challenging as the perimeter of the network crumbles. This is well illustrated by the DTI Information Security Breaches Survey of 2006, which shows that one in five larger businesses had a security breach associated with weaknesses in their identity management, with the number of incidents being less for smaller companies. The survey found that incidents were from staff gaining unauthorised access to data, staff obtaining and misusing confidential information, financial theft or fraud, and impersonation or phishing attacks. While the incidence of fraud was low, the impact was greater than for any other type of security incident. Several small businesses lost between £10,000 and £50,000 as a result of fraud and one large bank lost millions. Identity management has been a problem for many years, but recent changes to the security landscape have made the risks greater. The growth of mobile computing and remote access are important factors. Couple this with the rapid rise of wireless and the growth in access to applications, then you have significantly increased the opportunities for unauthorised access into your network. At the same time, the internal threat of staff gaining access to confidential information remains as high as ever. Alongside this, the range of potential breaches has materially increased with problems such as pharming, phishing, spyware, keyboard logging, war-driving, etc. on the increase. A number of issues arise in this new landscape. How do you ensure that users activate security features when they connect to the Internet? How do you get them to protect confidential information and guard against threats such as spyware? And not least, how do you manage access to their machines by other colleagues, family or friends. This is a challenging picture and the continued reliance on weak single-factor authentication looks increasingly ostrich-like. The DTI 2006 survey found that some 96% of large companies and 93% of all companies are still using single factor authentication to authenticate users. There isn’t a single answer to resolving these problems, but a number of options. There is one thing, however, which is certain – single factor authentication (passwords) is not enough. There are a number of authentication options: single sign-on is a step forward, but requires superior identity management two-factor authentication is much better and involves the user of authentication tokens, biometric devices, etc. three factor authentication is far superior and involves something you know (e.g. password), something you have (e.g. authentication token) and something you use (e.g. device authentication) Article courtesy of Security Park

The ID card debate continues to rage with questions over their purpose, necessity and logistics of a nationwide roll-out still to be answered. In the background, a few organisations are starting to invest in increasingly sophisticated identity authentication technology. Banks including LloydsTSB and HSBC are already starting to roll out token-based solutions, which combine the traditional username and password with a one-time code generated by a keyring-style token, in order to combat ID fraud. It is encouraging to see that financial services organisations are starting to move away from purely password-based authentication techniques in a bid to combat sophisticated key-loggers and phishers. However, the benefits of two-factor authentication devices, such as tokens and smart cards, are not confined to banks. Yet take-up amongst other industries has been slower. Smart cards take strong authentication into a new realm, because they are capable of storing so much information on them and have a vast number of uses. One card, issued by an employer, can allow staff access to office buildings as well as the IT network, thereby combining physical and logical security into one device. Multiple applications on the network can be accessed via a single sign-on mechanism, removing the user’s headache of remembering many different passwords and cutting down calls to the IT helpdesk for password resets. What is more, remote users can access the network with the same level of security as office-based workers using the same card. Not only that, smart cards can be used to make a digital signature, which in future could make electronic documents permissible as evidence in a court of law. Tensor have used smart cards within our security systems for a number of years, and represents a prime example of how the technology can be incorporated into a number of applications. From time and attendance solutions, to access control and cashless catering, one smart card is able to perform a variety of individual tasks. As we continue to move rapidly towards a completely digital age with complex regulations to adhere to, being able to prove beyond reasonable doubt that an email or document was sent or received will be a must-have, not just a nice-to-have. Increasingly, private enterprises are working with government bodies to deliver commercial and public services to citizens via smart cards, because they are capable of storing multiple credentials for access to different buildings, systems and accounts. Further development depends on public and private sector investment in new infrastructure, and the most cost-effective approach is to work together in order to develop the technology then use it according to the needs of their individual organisations. The potential benefits of stronger identity authentication technologies to commercial and public sector organisations alike are immense, encompassing increased efficiency, compliance issues and better access to public services for all.

It has been announced that the retailing giant Wal-Mart have agreed to pay $33.5 million in back wages plus interest to settle a federal lawsuit, which accused the company of violating overtime laws involving 86,680 workers. Officials from the US Labor Department said that many of the violations involved failing to pay time-and-a-half premium pay to managers and programmers in training. Some other salaried non-managerial employees had also not been paid the correct amount of overtime when they worked more than 40 hours a week. Wal-Mart was also accused of violating the Fair Labor Standards Act (FLSA) – a federal law that governs overtime – by failing to properly include factors such as bonuses when calculating the base wage to which the time-and-a-half rate corresponds. The settlement paid by Wal-Mart is one of the largest ever reached by the FLSA. More than 40 state lawsuits have been filed against Wal-Mart, most of them still pending. Most of the accusations revolve around the retailer making employees work off the clock and for refusing to pay employees the overtime they had earned. Wal-Mart officials have been keen to point out that it was Wal-Mart itself who alerted the Labor Department to the overtime problems after finding them in an internal audit and has stringently denied any wrongdoing and liability whatsoever. Following the closure of this particular lawsuit, the average compensation for the nearly 87,000 employees will be around $375, with 75 employees receiving more than $10,000 in back wages. Of course, whilst not guaranteeing that each employee will clock in correctly, it may be within your organization’s interest to invest in a time and attendance system, which automates the process of recording and paying wages to your employees. Many companies have stumbled in calculating the base pay for establishing overtime pay. An often complicated piece of legislation, it was deemed in this case that Wal-Mart hade made improper and illegal calculations by computing pay on a biweekly rate rather than a weekly rate. In addition, vacation and sick pay had been used to determine the base hourly rate, which resulted in a lower value.

The Employment Standards Administration’s Wage and Hour Division (WHD) within the Department of Labor has recovered more than $171.5 million in back wages for over 246,000 employees in fiscal year 2006. The number of workers who received back wages in the fiscal year 2006 has increased by 2.3 percent over the number in the fiscal year 2005. In addition, the agency concluded 31,987 compliance actions and assessed nearly $7.9 million in civil money penalties. Of the 246,00 employees who have collected back pay, more than 222,000 of these were eligible due to violations of the Fair Labor Standards Act (FLSA). Of particular note were the regulations concerning minimum wage and overtime, which when combined, tallied an astonishing total of $135,729,003. Low Wage Industries The WHD have remained true on their stance of pursuing low-wage industries who are notorious for non-compliance with federal and state regulations. Industries such as agriculture, restaurants, and health care are among the worst in the US for employing young and immigrant workers. The fiscal year 2006 has seen the WHD collect nearly $50.6 million in back wages for around 86,700 workers in low-wage industries – an increase of over 10 percent compared to the previous fiscal year. Over a third of WHD enforcement resources are attributed to investigations in nine low-wage industries, which include day care, restaurants, janitorial services, and temporary help. Child Labor A total of 3,723 minors were found illegally employed during the fiscal year 2006. The majority of these violations occurred when workers under the age of 16 worked too many hours, too late at night, or too early in the morning. In total, nearly $3 million was generated in child labor civil money penalties by the WHD. Fiscal Year 2007 Initiatives The long-term reconstruction of the Gulf Coast region will necessitate a strong and continuing WHD presence for the foreseeable future. Throughout the next several years, WHD will continue to allocate enforcement resources to the region, explore new strategies and partnerships to reach vulnerable workers, and pursue all opportunities to meet any new compliance challenges that may arise along the US Gulf Coast. In addition to this effort, each state represented within the WHD has planned regional and local initiatives for the fiscal year 2007. These initiatives utilize the strategies of compliance assistance, partnerships and alliances, and enforcement to increase compliance with the FLSA in low-wage industries. With compliance to state and federal legislation likely to get tougher in the future, you may wish to consider investing in a time and attendance system, which automates the process of recording and paying wages to your employees.

A petroleum distribution plant, which has a number of locations across New York, has agreed to pay 767 employees a total of $900,000 in back wages. Chestnut Petroleum Dist. Inc., which has 37 gas station / convenience stores located throughout the state of New York, has also agreed to pay a $100,000 penalty to the federal government. This settlement follows an investigation by the Wage and Hour Division of the DoL, which alleged a number of violations of the federal Fair Labor Standards Act (FLSA). This is the latest in a spate of lawsuits raised by the US Department of Labor, and has revealed that, in many workweeks during the period between April 20, 2003, and May 28, 2006, employees at various locations within the Chestnut Petroleum Dist. Inc. corporation were paid less than the federal minimum wage and were not properly compensated for overtime hours worked. The investigation also disclosed that the employers failed to keep required records that showed, among other things, the hours worked each day, total hours worked each week and rates of pay for many of the employees. The FLSA requires that covered employees be paid at least the applicable minimum wage as well as one and one-half times their regular rate of pay for hours worked over 40 per week. The law also requires that accurate records of employees’ wages, hours and other conditions of employment be maintained. A consent judgment, signed by US District Judge Stephen C. Robinson on March 30, 2007, prohibits the defendants from committing future violations of the minimum wage, overtime, recordkeeping and anti-retaliation provisions of the FLSA. Further, the judgment orders the defendants to pay minimum wage and overtime back wages totaling $850,000 combined, plus interest, to the majority of the workers, and to pay $50,000 combined to two employees who were unlawfully fired. Also, the defendants must pay a civil money penalty of $100,000 to the Labor Department. Finally, the court has ordered the defendants to expunge from their employment records all references to the actions taken against the two wrongfully fired employees and to implement a compliance program designed by the Labor Department to ensure their future compliance with all requirements of the FLSA. With compliance to state and federal legislation likely to get tougher in the future, you may wish to consider investing in a time and attendance system, which automates the process of recording and paying wages to your employees.

One thing users who are nervous about using fingerprint technology often don’t realize is that once their fingerprint is scanned for use in security applications, it is not saved. Only the specific pieces of data are stored, which are used to construct an algorithm. If one were to conduct a survey of technology publications over the past decade or so, it’s a good bet there would be at least one instance in each of those years in which someone declared that “this is the year of biometrics.” Full of promise but long constrained by a diverse set of obstacles, biometrics – or the use of body or physical characteristics for secure authentication and identification – has not yet lived up to the hype. Yet, lest we let 2007 slip by without the required declaration, let it be know that, indeed, this may well be the year biometrics takes hold on a broader scale, particularly its uses in security applications. Widely Varying Attitudes Biometrics is a very sexy technology – the challenge is having a workable, cost-effective system. The opportunity cost can be high, because money could always be spent on other, more proven technologies. The bottom line is, does it really enhance the customer experience enough to make them bother with it? Most folks are probably thinking, ‘I’m perfectly happy doing it the way I already do.’ Interestingly, those consumer attitudes toward biometric technology seem to be very culturally based, with acceptance rates much higher in some countries than in others. In places like Latin America, Europe and Africa, people don’t have this notion of Big Brother watching that Americans sometimes do, to them it’s just a convenience. In the Enterprise Enterprises are also increasingly making use of biometric technologies internally, particularly for access control. While current estimates cite adoption at less than 20 percent of corporations worldwide, the prediction is that in two to three years, that will increase closer to one third. Smart cards and one-time passwords, meanwhile, will reach about 50 percent adoption. In the government, a personal identity verification system is currently being implemented that will require all federal workers and contractors who require unescorted access to present a smart card with a chip on it that includes two fingerprints. Once it’s in place, it is estimated that it will touch six million military staff and civilians. Biometrics in the Future? The market is definitely picking up. As the government implements more programs, people will become more comfortable and familiar with biometrics. It’s a pretty exciting time.

A survey of teenage workers found numerous violations of federal laws, and a new strategy to combat the problem is being called for. Some experts say much of the problem may stem from unsophisticated employers unaware of the multitude of state and federal laws. Although enforcement of child labor laws remains a widespread concern, there’s no quick fix to the problem. A recent national survey of teenage workers found numerous violations of federal laws, including performing unlawful or unsafe tasks as well as working late on school nights. In addition, one-third of the teenagers said they had received no job-safety training, according to the survey by the University of North Carolina Injury Prevention Research Center of 866 teenagers working in the retail and service industries. The Department of Labor must identify violators and potential violators and make it clear that violations will not be tolerated by bringing the hammer down on some of these employers. Workplace fatalities in 2005 went up dramatically over 2004 for workers under 16 years of age. Each year, hundreds of thousands of U.S. teens are injured in the workplace and 70 die from those injuries, according to federal statistics. The Department of Labor needs to be a teen worker’s advocate and ought to take a vigorous proactive position. Among teens who work in grocery stores and restaurants, 47 percent said they had performed tasks prohibited by law for employees under 18, according to the survey. Youth and inexperience also puts teenagers at a disadvantage when they’re asked to do something unsafe or illegal. Rather than willfully disregarding laws, variations in regulations from state to state may create a scenario in which employers may be unaware of specific regulations – there’s not a universal federal standard that always applies. Employers who do not restrict work hours as permitted by law create the “most logical” scenarios under which a lawsuit might be filed. More than 2.3 million 16- and 17-year olds worked in the United States in 2005, according to the National Institute for Occupational Safety and Health. Statistics for younger working adolescents are unavailable. Employers need to know and comply with laws, identify safety and health hazards, provide appropriate supervision, label equipment teens may not use, train teens to use safe procedures, make teens aware of tasks they may not perform and report all injuries. In order to remain compliant with developments to child workplace laws, you may wish to consider investing in a time and attendance system, which automates the process of recording your employees’ clocking data and warns you against working time infringements of your workers.

The BBC reported that some motorists in Cambridgeshire are filling up at a petrol pump and driving off without paying. The Cambridgeshire Police have sent out a warning that they are targeting such criminals. The fuel thefts have led to more patrols on petrol station forecourts. Although the police have sent out numerous warnings, these are being ignored as there were 125 thefts of fuel in the north of Cambridgeshire last year. Pc McCallum said "We will be concentrating on filling stations that have been particularly badly affected and that are all in rural areas". Pc McCallum also added "This is often seen as a victimless crime but the cost of thefts are eventually passed on to the public and we treat all forms of threat seriously". Officers have begun using Automatic Number Plate Recognition technology at garage forecourts to target offenders.

A majority of consumers in the United States and the United Kingdom are so worried about the security of their personal information that they overwhelmingly want companies and their governments to turn to biometrics to protect them. A recent survey has shown that 63% of consumers in the United States believe that the rise in identity fraud and the insufficient protection of personal information will become a “significant security threat” in the near future. The same number also believe financial institutions and the government are not doing enough to stop the threat. That sentiment is even stronger in the UK, where 87% of consumers feel the same way. There, biometric technology – in particular fingerprint biometrics – is increasingly being implemented in security solutions, such as access control. In the United States, 69% of citizens want banks, credit card companies, health care providers, and government agencies to adopt biometric technologies, rather than other security technologies like smart card readers and passwords. In the United Kingdom, the number is even higher, coming in at 92%. While usually effective as a first line of authentication, the primary drawback of both passwords and tokens (such as smart cards) is that each relies on either something you know or something you have. There is no way of verifying that the person presenting the token or typing the password is the one authorized to access a building or network. Using passwords and smart cards together provides a higher confidence level, and is being turned to more and more in situations when an organization requires increased security. The study also shows that nearly 85% of consumers believe US border security is inadequate, and only half think the US government is making security a priority. Fifty-one percent think technology “plays a significant role in ensuring homeland security” and that biometrics is one of the best methods the government could use. There has been a consistent outcry among consumers for more effective technologies, such as biometrics, that will better equip businesses and government organizations to protect and verify personal information in a way that’s reliable and convenient. Consumers are concerned that current security processes at our nation’s airports and borders are inadequate, which likely will result in even more widespread adoption of biometrics within these areas. The increased enthusiasm for biometric technology has spurred Tensor Time Systems Inc to offer access control, and time attendance systems that combine RF smart cards with fingerprint biometrics. If you require further information on these products, please contact us.

Only 14 percent of workforces have employees who are enthusiastic about their jobs, according to a recent survey, which found that employee attitudes toward their jobs and work environments are largely a result of tenure on the job rather than generational or age differences. Both younger employees, ages 25 to 34, and older employees, 55 and older, show sharp declines in their satisfaction from their first year of employment. The study of over 64,000 workers focused specifically on equity – or being treated fairly with respect to the basic conditions of employment, cited as being a significant element of job satisfaction. Company culture – or how management treats employees, and management’s attitudes and behaviors toward workers – determines how much of a downturn in enthusiasm there will be. Older employees start new jobs with the same hopefulness as younger workers. They have the same fundamental needs as younger employees, and their level of enthusiasm depends on how well their needs are met as they move through the various stages of their employment life cycle. Many factors affect the needs and expectations that workers bring to new jobs, including previous work experience, career stage and life stage. Regardless of age, there is commonality among workers regarding their visions of “quality employment” or “good jobs”. Employees of all ages want opportunities to learn new things on the job, and want to feel respected for their potential as well as their contributions. Only 14 percent of organizations have enthusiastic work forces, of which more than 75 percent of employees are satisfied overall and less than 10 percent are dissatisfied. Unfortunately, it is the management who unwittingly de-motivate employees and diminish their enthusiasm. Many companies treat employees as disposable as paper clips – when the going gets tough, workers become expendible. In addition, employees generally feel that they receive inadequate recognition and reward for their contributions. Despite the inevitable stresses and strains, employees can remain committed to their relationship with the organization if they feel that they are trusted, respected, challenged to grow and supported so that they can be successful at work. One of the priorities of today’s workforce is having access to the types of flexibility that help them manage their work responsibilities as well as their personal / family responsibilities. Flexibility affords employees some choice and control, which is consistent with a culture of respect. Whilst unable to offer services to increase employer : employee relations, Tensor Time Systems Inc manufacture and supply clocking systems, which are fully customizable to accomodate specific flexi-time arrangements within your workforce.

Whilst the recent boost to Ohio’s minimum wage is welcomed by those receiving it, it is another matter for businesses caught out by the changed regulation. For the average small business employing 40 full- and part-time workers is likely to see a change in their wage bill of around $1,000 a month. This has been the first minimum wage hike in the state of Ohio since 1996, and sets wages at $6.85 per hour – an increase of 33% over the previous minimum of $5.15. The increase in the minimum wage was approved on Nov 7 2006 by Ohio voters in a constitutional amendment, which also calls for annual boosts tied to inflation. The result of this new piece of legislation has resulted in a large number of business owners feeling hard done by. Many believe that wages should be determined by the free market and not simply the result of a one-off vote. Adjustment is now needed by companies and organizations in order to absorb this wage increase, which is more than likely going to come in the form of price increases. Companies have warned that overtime hours for full-time members of staff are likely to be slashed to compensate for losses accrued by the wage hike. The total effect of the wage increase is unlikely to be known for the next couple of months as businesses adjust to their increased overhead costs, however it is likely to push the cost of living up for residents across the entire state of Ohio. Wage Statistics There are more than 5.34 million employed people in Ohio, with 50 percent of those workers making less than $14.07 per hour. The average hourly salary is $17.44, and average annual salary is $36,270. There are more than 130.3 million employed people in the country, with 50 percent making less than $14.15 per hour. The average nationwide hourly salary is $18.21, and average annual salary is $37,870. In Ohio, there is an estimated 26,000 people at $5.15, the previous minimum wage. With changes in state regulation an inevitable part of the future, you may wish to consider investing in a time and attendance system, which automates the process of recording and paying wages to your employees.

A turnstile allows one person to pass at a time. It can also be manufactured to enforce a one-way traffic system for people. The turnstile was originally used to allow people to pass while keeping sheep or other livestock penned in. In the late 1880’s Britain used turnstiles for public events. The first major use of the turnstiles was at a sporting venue in Hampden Park, Glasgow. A turnstile is often used for counting the number of people passing through a gate, even when payment is not involved. Turnstiles are extensively used in amusement parks to track how many people enter and exit the park and go on each ride. Turnstiles are more effective than doors when there is a need to physically control people entering or exiting a facility. With crime such as robbery on the increase, turnstiles are also used for security purposes. In addition, an Access Control system can be integrated with the turnstile/turnstiles. There are many different types of turnstile. It depends on what the individual wants. The most commonly used turnstiles are: Half Height Turnstile – Ideal for controlling access in areas such as reception, health clubs and libraries. Full Height Turnstile – Recommended for use when absolute entrance or exit security is required. For example football stadiums, amusement parks and high security establishments. For more information on a Tensor turnstile, barrier or gate, please contact our sales team.