Computerworld
Quick Menu
Search



Ads by TechWords

See your link here


Subscribe to our e-mail newsletters
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Finance
Security
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
More E-Mail Newsletters 
Computerworld 2007Subscribe to Computerworld
40 years of the most authoritative source of news and information for IT leaders.

D.C.'s tax system won plaudits but couldn't stop alleged insider thefts

Prosecutors say tax office workers cashed fake refund checks despite rollout of $100M system


Active Comments

Anonymous says: There are various reasons why that could have been possible: 1. the new system may not have covered the complete...
Anonymous says: An internal auditor warned the government about this. Not only as mentioned in this article, but she also drew attention...


Zone

Featured Zone
The Security Zone

With the mobility of employees and the ease with which external devices can be brought in and out of a network, continuing to build your security plan for network servers and clients is a must. Fortunately, there is much that organizations can do to protect themselves from attacks - internal and external. Having the right policies, procedures and server configurations is critical...

Learn more in The Security Zone
See All Zones

March 4, 2008 (Computerworld) For more than a decade, employees in the District of Columbia's Office of Tax and Revenue cashed millions of dollars' worth of property tax refunds made out to fake corporate accounts, and then spent the money on real estate, cars, clothing and luxury goods, the U.S. Department of Justice charged in November.

And much of that happened under the nose of a $100 million tax system that became fully operational in 2002 after three years of development.

Ten people, including two D.C. workers, have been arrested thus far as part of an ongoing investigation by the DOJ and local authorities. Federal prosecutors say that the employees had developed a complex scheme for cutting checks averaging $388,000 each to sham accounts. One employee allegedly spent about $1.4 million at Neiman Marcus starting in September 2000. Court documents point to the theft of at least $20 million and suggest that the actual total may be even higher.

While the alleged thefts were taking place, IT contractor Accenture Ltd. built the new tax system for the D.C. government. The technology was designed to modernize tax operations by combining previously separate income, property and sales tax systems and creating a single database for tax information. The Integrated Tax System (ITS) also includes CRM software and gives taxpayers access to online services.

The new system was built to do a lot of things — except, apparently, prevent the theft of millions of dollars by rogue insiders.

The ITS didn't flag the allegedly fraudulent activities because they happened outside of the system, according to D.C. and Accenture officials. The alleged perpetrators "did not go anywhere near the ITS," said Mike Teller, CIO in the district's Office of the Chief Financial Officer. "As far as we know, everything that they did, they did because they went around the system."

Echoing Teller's words, Accenture spokesman Peter Soh said: "The perpetrators did not use our tax system to commit this fraud. Our understanding is that they used other means." He added that Accenture hasn't been contacted by the investigators in the case.

But that begs the question of why a key business process such as writing tax refund checks could even be completed outside of the ITS, which was cited in 2002 as a national role model for tax systems by the Federation of Tax Administrators. The FTA named the system as its Outstanding Technology Application for State Administrators that year.

Harley Duncan, the FTA's executive director, said he thinks that there likely are a few places in the tax refund process where a "fully functional" system would have flagged the alleged fraud scheme. For instance, he said that he would have expected the ITS to check parameters such as the number of refunds being issued, who they were paid to and where the approvals took place.



What People Are Saying

Shark Bait
View Shark BaitFired up about IT? Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT – the good, the bad, and the rest of the weird stuff you deal with every day.

New baits
Shark Bait
Webcast

Turning information into a Competitive Advantage "Turning information into a Competitive Advantage"

Companies today are realizing that competitive advantage is harder to sustain when based solely on gains in productivity and cost efficiency. The focus is shifting to invest more in business optimization initiatives which rely on trusted information to develop new insights that deliver better business results. But how can this be done efficiently in a business environment across multiple applications and processes. The answer is an Information Agenda - an innovative approach to transforming business information into a strategic asset for competitive advantage.

View this webcast now! more

See more Webcasts more
TODAY'S TOP BLOG
Patrick Thibodeau:
Satellite images of U.S military bases
Which is more important? Helping terrorists or protecting military bases? Answer: protecting Web 2.0 ... [more]
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
The 2008 ERP in Manufacturing Benchmark Report Summary
IronPort Web Reputation Filters Tech Note
Designed to Manage Lean Principles
View more whitepapers 
 


Webcast: The Automation of IT Compliance Programs: Reducing Risk, Cost and Complexity of Corporate Compliance
To meet the growing number of industry and federal regulations, businesses spend significant time, effort, and budget determining how to best meet continuously evolving IT compliance requirements this new Forrester Research and Juniper Networks Webcast led by industry experts who examine global IT security and compliance trends, common IT compliance issues and challenges, and best practices for successful IT compliance programs.

View this webcast 
Whitepaper: Tackling the Top Five Network Access Control Challenges
The major challenge enterprises face today is how to create innovative business models and to increase productivity by opening the network to a dynamic workforce, while at the same time protecting critical assets from the vulnerabilities that openness and user mobility bring. In addition, to comply with industry and governmental regulations, enterprises must prove that they have stringent controls in place to restrict access to sensitive data. This paper describes the top five networking access control challenges that companies like yours are facing and solutions that they are deploying today.

Download this white paper 
Whitepaper: Addressing PCI Compliance with a Comprehensive Network Access Control Solution
The Payment Card Industry (PCI) is one of the most comprehensive data security standards in a cluster of regulations that have emerged over the past decade. Meeting its requirements is both complicated and expensive for many companies. Learn how a comprehensive access control solution allows retailers and consumer organizations adhere to the core tenets of PCI, and delivering the necessary information and reports needed for compliance audits.
Download this white paper 
Whitepaper: Control System Cyber Vulnerabilities and Mitigation of Risk for Utilities
Today's global industrial infrastructure includes thousands of electric utilities, water/wastewater management companies, oil and gas suppliers, chemical manufacturers and other facilities critical to daily functioning. Learn why relying on off-the-shelf operating systems and Internet-based remote access control to carry out production tasks, traditional control networks can leave today's global industrial infrastructures vulnerable to hackers, extortionists, worms, viruses and application-level attacks. Deploying network-based security can protect these at-risk systems–without requiring infrastructure replacement.
Download this white paper