The Department of Veterans Affairs clarified plans for deploying a data tool to assist staff in identifying suspected fraud in claims. The focus of the tool will be on third-party for-profit companies — known as claims sharks — that try to take advantage of veterans and the benefits system, the agency said. (Stars and Stripes)
WASHINGTON — The Department of Veterans Affairs announced Monday that it is dropping plans to scan 1 million old disability benefits questionnaires dating to 2010 to identify possible signs of fraud.
The VA, however, will still deploy a “data collection tool,” which is under development, to look for false or exaggerated medical evidence in newly submitted DBQs that are part of a veteran’s claim for benefits, the agency said.
“This tool is forward-looking only. VA will not use the tool to revisit previously finalized and…
IT & DATA SECURITY (MITIGATING THE “INSIDER THREAT”)
As seen in the TD Bank case, an employee with too much “access” can sell your customer data to syndicates.
- Principle of Least Privilege (PoLP): Employees should only have access to the specific folders and databases required for their current task.
- Access Revocation: Have a “Termination Checklist” that ensures all digital access (Email, VPN, Banking) is revoked within 60 minutes of an employee resigning or being dismissed.
- System Logs & Audit Trails: Enable “Read/Write Logging” on your server. If a customer’s data is leaked, you need to know exactly which login accessed that record and at what time.
- Encryption at Rest: Ensure that sensitive files (like your customer ID numbers or payroll spreadsheets) are encrypted so that if a staff member copies them to a USB, they cannot be read.