Combating fraud, corruption and kickbacks. Information security and personal data protection

Programme

Day 1

Organising a system for countering fraud and «kickback schemes» using the Security Service and other Company units

• Crimes against property under the legislation of the Republic of Kazakhstan
• Types of corporate fraud and corruption in the Company
• Main fraud techniques used by employees of various categories
• The concept of the «fraud triangle» and corruption scenarios
• Signs of corporate fraud at the enterprise and in individual units
• Action programme of the Security Service and other Company services to combat dishonest staff
• Main ways of reducing the risks of corporate fraud and corruption
• Organising the fight against «kickbacks» and HR checks on their «recipients»
• Procedure for conducting internal corporate investigations when corruption and fraud are detected at the enterprise
• Creating investigation rules and algorithms for violations of various kinds
• Procedural actions of Security Service staff aimed at collecting legitimate evidence of fraud
• Documenting the results of internal corporate investigations

Developing, implementing and monitoring business ethics rules, the anti-corruption code and the «conflict of interest» management system

• Organising the internal control system in the Company in accordance with the requirements of international standards
• Internal control measures to prevent corruption and avoid «conflicts of interest»
• Managing security risks and cooperation between the Security Service and the compliance unit to reduce the level of fraud
• Legal and psychological techniques applied to Company employees to increase their loyalty to the employer
• Formalising internal rules describing the procedures for:
  • the requisition campaign
  • procurement
  • marketing and sales
  • contract work
• Security monitoring and control in the enterprise's business processes with corruption and fraud risks
• Interaction of the Security Service with the Company's HR unit to reduce corruption risks
• Performance indicators of the Security Service in managing the enterprise's economic and financial security risks
• Basic principles of organising the work of unit heads for effective cooperation with the Security Service

Solving business cases and assignments by seminar participants

Discussing the results with the trainer

Day 2

Organising information security at the enterprise, countering leaks of confidential information and industrial espionage

• Legislative acts of the Republic of Kazakhstan on protecting confidential information and various types of secrets in commercial structures
• Implementing an information security (IS) policy at the enterprise
• Managing IS risks in accordance with international standards
• Regulatory support for managing IS risks in the Company
• Legal and organisational measures to counter industrial espionage
• Industrial espionage and ways in which intruders covertly obtain information from the enterprise's external and internal environment
• Technical channels of information leakage, their specifics and characteristics
• Reducing the risks of intruders using natural and artificial information leakage channels
• Identifying insiders and agents of influence who facilitate leaks of confidential information
• Main elements of counterintelligence work at the enterprise
• Organising the Security Service's work with volunteer helpers to identify insiders
• Organising the Security Service's interaction with the IT unit and HR on counterintelligence activity
• Countering competitors' technical intelligence: organisational, legal, HR and technical measures
• Methods of checking «designated premises» for information leakage channels

Developing, implementing and monitoring confidential records management rules and organising the personal data protection system

• Confidential records management as the main element of protecting confidential information, including personal data
• Basic principles of building confidential records management in the Company
• Traditional and electronic document flow and electronic digital signatures in exchanging confidential information and personal data
• Defining and monitoring the procedure for working with confidential documents
• Forming the internal regulatory framework for confidential records management
• Control over the copying, reproduction and destruction of confidential documents
• The personal data operator, their rights and obligations, registration procedure
• Forming the legal regime for restricting access to and protecting personal data
• Possible channels of personal data leakage and methods of countering intruders
• Specifics of processing and protecting personal data without the use of automation tools
• Specifics of processing and protecting personal data with the use of automation tools
• Organising an internal corporate inquiry into a breach of the rules for working with confidential documents or disclosure of personal data
• Types of liability for disclosing personal data and for unlawfully obtaining it
• Necessary and sufficient conditions for holding intruders and dishonest staff liable for personal data leaks from the Company

Solving business cases and assignments by seminar participants

Discussing the results with the trainer