How to Write an Awesome Accounting Bio

How to Write an Accountant Bio, How to write CPA Bio, How to write a Tax Preparer Bio, How to write a Bookkeeper bioEven though numbers are probably the biggest thing in an accountant’s wheelhouse, getting people in the door with the right words in your bio can make all the difference in the world. Here are a few tips to make sure that how you present yourself to the public via your wording is powerful, succinct, and engaging.

Make it Short and Engaging

Yes, attention spans in our world are woefully short, much like that of gnat. You have seconds to grab someone’s attention. Write your bio as if you were looking for an accountant. How would you word it? What would catch your eye? Of course, you’d start with your name and title, but what after that? Spend time thinking about this.

Don’t Use First Person

While social media is all about saying “I this” and “I that,” when it comes to bios, it’s best not to do that, use the third person as if you were talking about someone else. For instance, “John Davis is a CPA at Ernst & Young.” After that, you can launch into telling the world just how awesome you are.

Use Active Voice

And avoid passive voice. An example of this would be something like, “John’s team was involved in the overhaul of the payroll system.” For active voice, you’d write it like this:  “John’s team overhauled the payroll system.” See the difference? You’ve cut out extra words and adjusted your verb to be active. A quick way to check your writing for passive voice is to do a search in your document for an “of.” If you spot these babies, fix them right away.

Update Your Social Media Profiles

While most people use LinkedIn, many others who are looking for a job include their bios on their social media pages. In fact, you might update your bio on your LinkedIn page and then share it on Facebook, Instagram, or other platforms you use. This way, when employers are casually scrolling, you’ll appear in their feed. And if they’re looking for someone, all the better.

End Strong

The abbreviation in the marketing world is CTA, or Call to Action. You see it on nearly every digital ad as a button. But if you reimagine it in terms of the last sentence of your bio, it can leave a lasting impression and, hopefully, trigger a response. You might end your bio with a short, friendly statement, your email, and your phone number: “John is actively seeking employment, can be reached at [FILL IN INFO], and is just a ping or phone call away.” No matter what you choose to end with, it should reflect you and your personality.

If you need a little help to get started, here are two different samples:

Sally Smith is a CPA and a Senior Accountant at ABC Company, a full-service tax and bookkeeping firm in Home Town, USA.

John Jones joined ABC Company in 2000. In his current role, he is a seasoned tax preparer with a focus on international taxes. This involves staying up-to-date with current and future tax regulations for foreigners living and working in the United States and abroad, as well as state tax regulations in California and Florida.

Writing an accountant bio that will stand out from the crowd will take a bit of time, but it is well worth it. You want to present yourself in the best possible light to your audience. When you do this, you’ll get more traction and, in turn, more business.

Monitoring Trade Agreements with Taiwan, Promoting Plain-Language Rules, and Expanding Recruiting and Training for Law Enforcement

Monitoring Trade Agreements with Taiwan, Promoting Plain-Language Rules, and Expanding Recruiting and Training for Law EnforcementUnited States-Taiwan Initiative on 21st-Century Trade First Agreement Implementation Act (HR 4004) – This bipartisan bill was introduced on June 12 by Rep. Jason Smith (R-MO). The purpose of this bill is to convey approval by Congress of the June 1 trade agreement between the United States and Taiwan. The bill addresses customs administration and regulatory practice issues, as well as dictates conditions for negotiations of subsequent trade agreements. Among its provisions, the bill requires that the U.S. Trade Representative share all negotiating texts with Congress prior to being sent to Taiwan or any parties outside of the executive branch. The bill passed in the House on June 21 and in the Senate on July 18. It was signed into law by the President on Aug. 7.

Providing Accountability Through Transparency Act of 2023 (S 111) – This bill, which was signed into law on July 25, requires each agency to provide a 100-word plain language summary of each new proposed rule posted at regulations.gov. The legislation was introduced by Sen. James Lankford (R-OK) on Jan. 26; passed in the Senate on June 22; and in the House on July 17.

Securing the U.S. Organ Procurement and Transplantation Network Act (HR 2544) – This bipartisan bill was introduced by Rep. Larry Bucshon (R-IN) on April 10. It modifies operations of the Organ Procurement and Transplantation Network, which is managed by the Health Resources and Services Administration (HRSA). In the past, the network of professionals was managed by only one organization, but this new bill allows the HRSA to award multiple grants, contracts or cooperative agreements for network management. The legislation was passed in the House on July 25, in the Senate on July 27 and is currently awaiting signature by President Biden.

Strong Communities Act of 2023 (S 994) – Introduced by Sen. Gary Peters (D-MI) on March 28, this bill permits funding by the Community Oriented Policing Services (COPS) grant program to be used to train officers and recruits who agree to serve in law enforcement agencies in their local communities. The bipartisan bill passed in the Senate on July 26 and is currently under consideration in the House.

Recruit and Retain Act (S 546) – Introduced by Sen. Deb Fischer (R-NE) on Feb. 28, this bill expands the Community Oriented Policing Services (COPS) grant program to enable law enforcement agencies to use funding for recruitment activities such as career and job fairs, as well as lower application fees for things like background checks, testing and psychological evaluations. The Act passed in the Senate on July 26 and has been forwarded to the House.

 

 

Department of Veterans Affairs Office of Inspector General Training Act of 2023 (S 1096) – This Act would require new Veterans Affairs (VA) employees to undergo training on how to report misconduct, respond to requests from and cooperate with the Office of the Inspector General. The bill was introduced on March 30 by Sen. Margaret Hassan (D-NH) and was passed in the Senate on July 13. Its fate now rests in the House.

How Businesses Can Leverage Data and Personalization for Targeted Campaigns and Growth

Data and Personalization, Targeted CampaignsMarketing efforts today depend on collecting, analyzing, and leveraging data to make informed decisions. Therefore, business owners need to understand how to harness the power of data and personalization to create targeted campaigns that drive growth.

Importance of Data and Personalization in Modern Business

Businesses today collect loads of data, enabling them to understand their customers’ preferences, behaviors and interests. The data comes from different channels, such as a business website, emails, or social media. It is then used to identify patterns and trends to make informed marketing decisions. This yields valuable insights that help craft highly personalized and effective marketing strategies.

Data is the foundation of personalization strategies. Personalization involves tailoring customer experiences to meet individual interests, needs, and preferences. It aims to build strong customer relationships, encourage engagement, and drive revenue and growth.

Personalization takes different approaches, such as recommendations based on previous purchases, creating unique landing pages, or sending emails based on customer browsing behavior. For example, e-commerce websites recommend products based on user browsing history and search queries.

Business owners can’t afford to ignore personalization since customers today are more informed, can easily access information, have more options, and have more control over purchase decisions. Furthermore, customers are more demanding and want to be recognized as individuals, expecting to receive personalized experiences. This has rendered traditional, one-size-fits-all marketing strategies obsolete.

How Businesses Can Use Data and Personalization for Targeted Campaigns and Growth

Using a data-driven approach, a business can create campaigns that deliver the right message to the right audience at the right time by doing the following:

1. Audience segmentation

Capturing the attention of a specific audience segment leads to higher conversion rates. To do this, a business can leverage data insights to segment the target audience. This means it is possible to categorize potential customers based on demographics, interests, or browsing behavior.

2. Crafting personalized content

Once segmentation is complete, it becomes possible to create tailored campaigns that resonate with each segment’s unique preferences. Aside from addressing customers by their names, it involves delivering content that speaks directly to their needs, interests, and pain points. This could include product recommendations based on past purchases or sending targeted offers that align with customer browsing history.

3. Omnichannel personalization

Customers interact with businesses using various channels, such as a business website, social media, emails, and mobile apps. A business can integrate data and personalization efforts to ensure a seamless journey for customers, regardless of where they engage. Additionally, it is crucial to deliver consistent and personalized experiences across these channels.

4. Continuous improvement in data-driven campaigns

Data insights also help guide businesses on the most suitable content and distribution strategies. They can analyze types of content performing well and in which channels. For example, a business can conduct A/B testing to compare campaign and content variations to identify the most effective approach for each segment.  

5. Measuring and analyzing results

To establish the effectiveness of personalized campaigns, a business will need to develop clear key performance indicators (KPIs) and measurement methods. One way to measure the impact of personalization is through customer engagement. This is done by measures such as click-through rates on personalized emails, customer retention rates, customer lifetime value, customer feedback, and number of sales.

It is worth noting that to make the most out of data insights. It is helpful to invest in advanced analytics tools or collaborate with data experts.

6. Adapting to changing trends

The digital landscape is evolving constantly, with new technologies and trends emerging regularly. Businesses must stay updated on these changes and adapt their personalization strategies accordingly. Remaining flexible and open to innovation ensures that the company’s targeting efforts are relevant and effective.

Data Privacy and Security

Although personalization in modern business is crucial, it must be balanced with privacy concerns. First, a business must be transparent about the data it collects and how it will be used. In addition, businesses need to be careful with the data they collect. They must ensure data security by safeguarding data storage and using safe transmission methods, have access control limits, and regularly audit data privacy policies and practices. Customers should be allowed to opt out of data collection and personalization efforts easily.

Customer data must be well protected to ensure compliance with relevant regulations. It also helps build trust with customers. Besides, a breach of trust can severely affect a business’s reputation and growth.

2021 Vs 2022 Vs 2023 Federal Income Tax Brackets

2020 Vs 2021 Vs 2022 Federal Income Tax Brackets

The US tax system is progressive, meaning that the more you earn the more you pay. For the years 2021-2023 there are seven different brackets for each year (2020 was the same structure as well). Which bracket you are in depends on your taxable income; however, your bracket does not equal your tax rate.

Tax brackets work so that you pay part of your income at each level bracket as you move-up in income. In other words, someone in the 32% marginal rate bracket will pay 10% on part of their income, 12% on another part, then 22% on another band of income, 24% on the next tranche and finally, 32% on everything else. In other words, moving into a higher tax bracket does NOT mean you pay higher taxes on all your income.

Below are comparative tables for the taxable years 2021 – 2023. This way you can not only see the tax brackets that apply 2023 taxable income, but the trend changes over time.

Updates to 2023 Tax Rates and Brackets

Over the 3-year period shown below, there are seven brackets with progressive rates ranging from 10% up to 37% and they are the same overall years.

Federal income tax rate brackets are indexed for inflation. The brackets are adjusted using the chained Consumer Price Index (CPI). There were no structural changes to the tax brackets in any of the periods, so the only impact are increases year-over-year due to the inflation indexing.

The inflation adjustment factor for 2023 was 7% for example, raising income thresholds applied to the tax brackets across the board.

Tax Rates and Brackets

Below are the 2021-2023 tables for personal income tax rates. Note, that the 2023 figures below are the amounts applicable to the income earned during 2023 and paid in 2024 when you file your taxes.

 

Tax Brackets & Rates

Single Taxpayers
2021 2022 2023
10% 0 – $9,950 10% 0 – $10,275 10% 0 – $11,000
12% $9,951 – $40,525 12% $10,276 – $41,775 12% $11,001 – $44,725
22% $40,526 – $86,375 22% $41,776 – $89,075 22% $44,726 – $95,375
24% $86,376 – $164,925 24% $89,076 – $170,050 24% $95,376 – $182,100
32% $164,926 – $209,425 32% $170,051 – $215,950 32% $182,101 – $231,250
35% $209,426 – $523,600 35% $215,951 – $539,900 35% $231,251 – $578,125
37% $523,601and Over 37% $539,901 and Over 37% $578,126 and Over

 

Married Filing Jointly and Surviving Spouses
2021 2022 2023
10% 0 – $19,900 10% 0 – $20,550 10% 0 – $22,000
12% $19,901 – $81,050 12% $20,551 – $83,550 12% $22,001 – $89,450
22% $81,051 – $172,750 22% $83,551 – $178,150 22% $89,451 – $190,750
24% $172,751 – $329,850 24% $178,151 – $340,100 24% $190,751 – $364,200
32% $329,851 – $418,850 32% $340,101 – $431,900 32% $364,201 – $462,500
35% $418,851 – $628,300 35% $431,901 – $647,850 35% $462,501 – $693,750
37% $628,301and Over 37% $647,851 and Over 37% $693,751 and Over

 

Married Filing Separately
2021 2022 2023
10% 0 – $9,950 10% 0 – $10,275 10% 0 – $11,000
12% $9,951 – $40,525 12% $10,276 – $41,775 12% $11,001 – $44,725
22% $40,526 – $86,375 22% $41,776 – $89,075 22% $44,726 – $95,375
24% $86,376 – $164,925 24% $89,076 – $170,050 24% $95,376 – $182,100
32% $164,926 – $209,425 32% $170,051 – $215,950 32% $182,101 – $231,250
35% $209,426 – $314,150 35% $215,951 – $323,925 35% $231,251 – $346,875
37% $314,151and Over 37% $323,926 and Over 37% $346,876 and Over

 

Heads of Housholds
2021 2022 2023
10% 0 – $14,200 10% 0 – $14,650 10% 0 – $15,700
12% $14,201 – $54,200 12% $14,651 – $55,900 12% $15,701 – $59,850
22% $54,201 – $86,350 22% $55,901 – $89,050 22% $59,851 – $95,350
24% $86,351 – $164,900 24% $89,051 – $170,050 24% $95,351 – $182,100
32% $164,901 – $209,400 32% $170,051 – $215,950 32% $182,101 – $231,250
35% $209,401 – $523,600 35% $215,951 – $539,900 35% $231,251 – $578,100
37% $523,601and Over 37% $539,901 and Over 37% $578,101 and Over

 

 

Conclusion

While the tax brackets are the same in 2023 as the prior year, the income thresholds increased 7% following hot inflation in the CPI. You can lower your marginal rate or at least reduce the amount of taxable income subject to it by optimizing itemized deductions.

IRS Announces End of Unannounced Taxpayer Visits (Mostly)

IRS Announces End of Unannounced Taxpayer VisitsYou wake up in the middle of the night. Heart racing, drenched in sweat, and breathing heavily. Thankfully, it was just a nightmare when the IRS showed up at your doorstep unannounced. Recently, however, this was the reality for some taxpayers – and not just a bad dream. The IRS just publicized a significant shift in policy, effectively ending the vast majority of surprise taxpayer visits. The change comes in an effort to create safer conditions for IRS officers as well as ease public concerns.

Who’s Knocking at My Door?

In order to understand the change in policy, you’ll need to understand the three categories of IRS employees that typically interact with taxpayers: Revenue Officers, Revenue Agents, and Special Agents.

IRS Revenue Agents are tax return auditors. They don’t typically show up unannounced.

IRS Revenue Officers, of which there are approximately 2,300, have duties that include paying visits to taxpayers to collect back taxes and tax returns not filed. They are not auditors but instead focus on collection efforts, including issuing liens and levies. Revenue Officers are the main category of IRS employees impacted by the policy change.

Special Agents deal with criminal matters and are part of one of the largest law enforcement agencies in the United States. The change in policy does not impact Special Agents.

Safety

Why the shift to (mostly) eliminating surprise visits from IRS Revenue Officers? Safety is cited as the main concern. Unannounced visits to taxpayers, whether at home or their business, can be risky. Historically, IRS Revenue Officers faced contentious and sometimes dangerous conditions during their unannounced visits.

Taxpayer Confusion

There is also a growing number of scam artists pretending to be IRS agents or officers. As a result, taxpayers are increasingly wary of unannounced visits, and this causes confusion for both the taxpayer and law enforcement.

The difficulty in distinguishing between IRS representatives and fakes has caused concern for taxpayers already on guard for scam artists. The IRS believes that maintaining trust among the public will go a long way to maintaining the legitimacy of the organization.

Appointment Letters In Lieu of Visits

In place of these previously unannounced visits, the IRS will contact taxpayers through a 725-B letter, more colloquially known as an appointment letter.

An appointment letter will facilitate scheduling in-person meetings, with the opportunity for the taxpayer to prepare any information and documentation beforehand, allowing for quicker resolution of cases. These meetings occur at a pre-determined time, date, and place.

Limited Visits Will Still Occur

The policy change does not completely eliminate unannounced visits by the IRS. In “extremely limited situations,” such as serving summonses and subpoenas and the seizure of assets, unannounced visits will still occur. To give some perspective, these types of visits will account for only a few hundred per year compared to the tens of thousands of unannounced visits under the old policy.

Conclusion

Unannounced IRS visits are (almost) a thing of the past. They will be carried out only in rare, necessary cases, with most Revenue Officer visits being pre-scheduled. This should ease taxpayer anxiety and make case resolution more efficient.

IRS Ruling: Crypto Currency Staking Rewards Are Taxable When Received

Crypto Currency Staking Rewards Are TaxableThe IRS recently issued an important ruling on the taxability of cryptocurrency staking rewards, determining that staking rewards are essentially “income” and, therefore, taxable upon receipt and not deferrable until sale or swapping. Below, we will look at the ruling in more detail and what it means for taxpayers. But first, let us revisit the concept of cryptocurrency staking as a refresher.

Crypto Staking 101: What Is Staking?

Staking, at its most basic form, is a way for holders of cryptocurrencies to earn rewards or passive income on their digital assets without needing to sell.

One way to think of staking is like a high-yield savings account. When you stake digital assets, you deposit and lock up your coins. This helps run and maintain security on different blockchains (depending on the asset staked). In return, you typically receive more of the digital asset staked. 

Rates of return on digital asset staking can be lucrative; however, staking is not without risks.

Staking risks include:

The inherent volatility of cryptocurrencies, where the rewards earned can be less than the change in the underlying digital asset price (causing an overall loss).

Minimum lock-up periods, where staked assets cannot be unstaked and sold or swapped and therefore are illiquid for a period.

Counterparty risk if operating as part of a staking pool, where rewards can be negated as a bad actor and therefore never paid out.

The staking pool or underlying digital asset can be hacked, leading to a loss of funds (remember, there is such a thing as FDIC insurance to protect depositors in the cryptocurrency realm).

Taxability of Staking Rewards

The tax treatment of buying and selling cryptocurrencies is clear. In IRS Notice 2014-21, the government declares that crypto trades should be treated as property, resulting in capital gains treatment like other property bought and sold. Staking, however, is different than trading.

To clarify, given the vague mechanisms of crypto staking, the IRS recently issued a ruling declaring that crypto staking rewards need to be included when received in a taxpayer’s gross income. This ruling formalizes the position taken by the IRS in the Jarrett case.

The argument in the Jarrett case was that the coins received as staking rewards are new property that was created and not the same as income, interest, etc. Essentially, this means the staking rewards are zero-basis assets that would be taxed when sold and not upon receipt. They made the argument that staking rewards were like the products of a baker, where each new cake, although from the same recipe, is a newly created product/asset and, therefore, taxable upon sale.

The court determined that staking rewards, due to their proof-of-stake creation mechanism, are not a new asset, but compensation for helping to maintain and provide validation of the underlying blockchain, with the staked assets used as collateral.

Conclusion

As a result, staking rewards are income when “received.” The taxable amount is the fair market value of the coins when the taxpayer receives the staking reward in an “unlocked” manner. In other words, once the taxpayer controls the staking rewards, the taxpayer is capable (regardless of exercising this capability) of selling them.

How to Identify and Avoid Cash Flow Pitfalls

Cash Flow Pitfalls, Cash Flow problemsLooking at expenses for one’s business is essential to reduce cash flow issues. For example, it would show if there’s too much money leaving the business or what type of scenario the business might face if there’s an unexpected and large expense that guts the business’ cash position. Tracking expenses on a monthly basis is one way to determine a company’s financial health.  

Estimating sales by starting with last year’s month-by-month figures is one way to start. Looking at credit and cash sales from a business’ monthly income statements provides historical reference. Examining both fixed and variable past expenses, specifically, is a good starting point. However, it’s important when projecting future sales and reasonable increases to remember that the business could be impacted negatively by a new competitor or positively if one goes out of business.

Determining when payment will be received is a good way to project cash flow. If it’s cash, then it’s instant and no further calculation is necessary. However, if payment is conducted by invoices, credit lines, etc., businesses are encouraged to perform the Days Sales Outstanding (DSO) calculation. This calculates, on average, how long customers take to pay outstanding invoices.

DSO = (Monthly accounts receivables/Total sales) x Days in the month

This is a good way to measure how long customers actually take to pay invoices versus what terms are specified in contracts or invoices.

Another consideration is to look at fixed and variable expenses. While fixed expenses are just that, fixed, it’s important to monitor variable expenses because they can fluctuate. One example is inflation, which can increase the cost of input materials, salaries, overhead, etc. Depending on the volume of production or sales, electricity, commission, or similar costs can also vary.

Once this information is gathered, the current month’s projected cash flow can be calculated.

The formula is as follows: (Last month’s cash balance + Current month’s projected receipts) – Projected expenses.

Preventing Bad Debt from Happening Before Collections is Necessary

According to SCORE, there are many things a business can do to reduce the likelihood of customer debt default and increase cash flow. Businesses can check the creditworthiness of both individual and commercial clients before offering credit to determine the likelihood of defaulting. 

Similarly, if Net 30 is the standard timeframe to pay an invoice, offering a 5 percent discount if it’s paid within seven days is one way to encourage prompt payment. Businesses that get a deposit when signing the contract or before beginning work will generate a more consistent cash flow.

Operating Cash Flow Ratio Example

This looks at how easily a company can satisfy current liabilities from its cash flows that are produced from the business operations. If there’s negative cash from operations, a business might be relying too heavily on financing or selling assets to run its operations. If earnings are steady, but cash flow from operations is falling, this is a negative indication of a company’s health. It’s calculated as follows:

(Operating Cash Flow/Current Liabilities) = ($15 billion/$45 billion) = 0.33

Businesses with an operating cash flow ratio greater than 1 have produced more cash in an operating period than is necessary to satisfy current liabilities. Businesses that have a reading less than 1 did not produce enough cash to satisfy current liabilities. However, further investigation is required to ensure that it’s not taking some of its excess cash to reinvest in projects with the potential to create future rewards.

While there’s no way to predict future cash flow trends, making projections can help businesses compare actual results to projects and adjust their plans more efficiently.

Sources

https://www.score.org/resource/article/10-ways-improve-collections-and-cash-flow

7 Best Money Moves for 2023

7 Best Money Moves for 2023In light of our current economy, making sure your money works hard for you is one of the best things to do this year. Here are some ways you can navigate your financial situation, keep tabs on where you are, and adjust if you need to.

Shop for a higher return on savings. These days, every extra cent counts. That’s why it pays to look around for higher rates on savings accounts. Several places to check out are PNC (4.65 percent APY), Sofi (up to 4.4 percent APY), and American Express (4 percent APY). Here are a few others. Rates may increase even more with the Federal Reserve’s rate hike announcement on July 27.

Open an HSA account. When you have one of these, it will help you pay for expenses that your health insurance plan doesn’t cover. If you’re enrolled in a high-deductible insurance plan, you and possibly your employer can contribute pre-tax dollars into this account, from which you’ll use funds you’ve stocked away for qualified medical expenses. Whatever money you don’t use will roll over to the next year, unlike FSA accounts.

Consolidate debt. Why pay a bunch of different interest rates on all your credit cards? If you have debt, find one card with a very low-interest rate and do a balance transfer. Some credit cards offer 0 percent APR as an introductory rate, which will be a big savings to get a jumpstart on becoming debt-free. Here are a few good ones: Bank of America® Travel Rewards Credit Card now offers 0 percent APR for 18 months. Discover it® Cash Back offers 0 percent APR for 15 months. Find other great deals here.

Cut how much you pay on car insurance. Have you shopped around lately? We know this might seem like a pain, as it takes a lot of time, but here’s some good news, and it’s called The Zebra. This amazing site has done all the heavy lifting for you. Here, you’ll find dozens of real-time comparisons from many trusted companies.

Max out your 401K. This year, the maximum yearly contribution limit has been raised by $200 to $22,500 (up from $20,500 in 2022). Even better, if you’re over 50, you can set aside catch-up contributions of $7,500, allowing a total contribution of up to $30,000. This allowance lets older workers add as much as they can so that when they retire, they’ll be in a better financial situation.

Update your W-4. No one likes a shock when it comes to paying taxes. That’s why this is such a smart idea. And the IRS actually has a tool that can help you: The Tax Withholding Estimator. Go here to find out if your employer is taking enough money out for taxes. If you’re falling short, you’ll know. Better to learn and fix this before it’s too late.

Create a net worth statement. When you have a realistic idea of your assets and liabilities, you’ll be able to see whether or not you’re on the right track with retirement. This way, you’ll be able to set up new goals for yourself if you feel you need to.

Keeping up with your finances, while time-consuming, really pays off. If you try one (or all) of these hacks, you’ll be better off in no time.

Sources

https://www.moneytalksnews.com/slideshows/15-of-the-best-money-moves-you-can-make-in-2021/

Compensating Service Members and Establishing Rules and Procedures for Ethical Matters

S 467,S 777,S 30,S 822,S 829,S 359,HR 3831CADETS Act (S 467) – This bipartisan bill was introduced on Feb. 16 by Sen. Gary Peters (D-MI). The purpose of this bipartisan bill is to change the age requirements (previously limited to age 25 and younger) for the Student Incentive Payment Program. This program provides financial support to cadets of state maritime academies who enlist or commission in the Navy Reserve at the time of their graduation. The bill passed in the Senate on March 29 and in the House on June 14. It was enacted on June 30.

Veterans’ Compensation Cost-of-Living Adjustment Act of 2023 (S 777) – This bipartisan bill, which was signed into law on June 14, requires the Department of Veterans Affairs to increase the amount of wartime disability compensation by the same percentage as the cost-of-living increase benefits for Social Security recipients, effective on Dec. 1, 2023. The bill also authorizes a similar adjustment to compensation for people who have not received compensation for a service-connected disability or death. The bipartisan bill was introduced by Sen. Jon Tester (D-MT) on March 14.

Fiscal Year 2023 Veterans Affairs Major Medical Facility Authorization Act (S 30) – This Act authorizes the development of and funding for major medical facility projects by Department of Veterans Affairs during this fiscal year. The bill was introduced by Sen. Jon Tester (D-MT) on Jan. 24. The legislation was passed in the Senate on March 21, in the House on June 20, and was signed into law by President Biden on July 18.

Modification to Department of Defense Travel Authorities for Abortion-Related Expenses Act of 2023 (S 822) – Introduced by Sen. Joni Ernst (R-IA) on March 15, this bill would reverse the Pentagon’s new policy of paying for travel if a military service member goes outofstate for access to reproductive health care. The new rule was in response to recent state laws that functionally banned abortion in locations where military bases are located. Support for the Act is generally split among partisan lines, with Republicans advocating and Democrats opposing. A similar bill has been introduced in the House. The Senate bill is currently under committee review.

Disclosing Foreign Influence in Lobbying Act (S 829) – This bill was introduced in the House by Sen. Chuck Grassley (R-IA) on March 16. It mandates that registered lobbyists must disclose their relationship with any foreign countries or political parties involved in the direction, planning, supervision or control of the lobbyist’s activities. This bipartisan bill (co-sponsored by four Democrats, two Republicans and one Independent) passed in the Senate on June 22. It has been forwarded to the House for consideration.

Supreme Court Ethics, Recusal and Transparency Act of 2023 (S 359) – This Act is designed to strengthen the code of ethics to restrain inappropriate activities of U.S. Supreme Court Justices. Provisions of the bill include expanding circumstances under which a judge must be disqualified; adopting rules for the disclosure of gifts, travel and income received by the justices and law clerks; and establishing procedures to receive and investigate complaints of judicial misconduct. The bill was introduced on Feb. 9 by Sen. Sheldon Whitehouse (D-RI) and is awaiting a formal report out of committee.

AI Disclosure Act of 2023 (HR 3831) – This legislation, introduced on June 5 by Rep. Ritchie Torres (D-NY), would require that any content produced by AI (which includes ChatGPT) be accompanied by a disclaimer that reads: “This output has been generated by artificial intelligence.” The bill has yet to be assigned to committee for review.

Insider Threats: Identifying, Mitigating and Preventing Internal Security Risks in Organizations

Insider ThreatsOne of the most devious and often underestimated dangers in cybersecurity comes from within an organization. These dangers originate from individuals within the organization who have access to sensitive data and systems, making them potentially dangerous adversaries capable of causing significant harm. Understanding, identifying, mitigating, and preventing these internal security risks are paramount for safeguarding an organization’s assets and preserving its integrity.

What is an Insider Threat?

Insider threats are security risks posed by employees, contractors, vendors, or anyone who has access to an organization’s data or systems. Accidental or intentional insiders cause internal threats. An accidental insider could unknowingly cause breaches due to negligence, human error or falling prey to social engineering tactics. For example, an employee clicks on a link in a phishing email, causing a malware infection.

On the other hand, insiders can intentionally engage in data theft, sabotage, or intellectual property theft, driven by motives such as financial gain, revenge or espionage.

A good example took place in May 2022 when a Yahoo employee stole trade secrets after receiving a job offer from The Trade Desk, a competitor. Another example is that of an employee fired from Stradis Healthcare who hacked into the former employer’s network in March 2020 and deleted critical shipping data.

According to the 2023 Insider Threat Report by Cybersecurity Insiders, 74 percent of organizations say insider attacks have become more frequent. The same percentage of organizations also believe they are at least moderately vulnerable to insider threats.

Experts attribute the rise in insider threats to various factors, including the effect of economic instability leading to businesses focusing on revenue growth and leaving gaps in security investments. There also has been an increase in layoffs in the tech industry that can result in disgruntled ex-employees doing damage as they leave the workplace. Overworked employees also might cut corners that create security issues, such as configuration, system access or unused accounts. Insider threats are also made more complex as many organizations migrate their workloads to the cloud, introducing new challenges.

How to Identifying Insider Threats

Insider threats are difficult to detect. However, it helps to look out for compromise indicators such as inappropriate behavior. Here is a more specific list of red flags:

  • Unusual access and log in, especially from an insider who doesn’t have certain access rights to data or systems.
  • Abnormal network search activity for sensitive information on networks, intranets, databases, or applications.
  • Unusual copying or downloading of sensitive information to an unauthorized destination such as email or removable media.
  • Misuse of tools, either foreign or installed. Detecting unfamiliar tools on a system is a compromise indicator. However, a savvy insider may even use trusted enterprise tools to execute an attack. In such a case, behavior such as access to a system outside regular working hours or access from unusual locations could indicate a compromise.
  • Unwillingness to comply with security policies. Employees who consistently disregard security protocols and policies might pose a risk to the organization’s security.

Mitigating Insider Threats

Proactive measures that can help mitigate insider threats include:

  • Employee training and awareness: Conduct regular security awareness and training programs to educate employees about the significance of insider threats and their role in preventing them.
  • Role-based access control: Implement a robust access control model that ensures individuals have access to only the resources required for their specific job roles, reducing the potential impact of an insider breach.
  • Behavioral analytics: Employ advanced analytics tools to monitor user behavior and detect inconsistencies that could indicate suspicious actions.
  • Develop clear exit procedures: these include the revocation of access privileges and retrieval of company-owned devices and sensitive information from employees leaving the organization.
  • Continuous monitoring and adaptation: Insider threats keep evolving, necessitating ongoing monitoring and constant adaptation of new security measures.

Preventing Insider Threats

  • Conduct comprehensive background checks and verify references during the hiring process to minimize the risk of malicious insiders entering the organization.
  • Ensure employees have proficient skills in deploying and managing complex cloud solutions.
  • Encourage open communication, foster mutual trust, and support employees to reduce the likelihood of disgruntlement.
  • Extend security considerations to contractors, suppliers, and partners with access to the organization’s data or systems.
  • Implement endpoint security solutions to monitor and analyze activities on user devices such as workstations or laptops.

Conclusion

While staying alert for cyberattacks from outside is critical, organizations must not forget that the most significant risk can come from inside the business. Even with the most comprehensive cybersecurity defenses against external hackers, failing to create proactive measures for internal security leaves critical assets open to hidden dangers within the organization’s walls.

Organizations such as the Cybersecurity and Infrastructure Security Agency (CISA) provide information and resources to assist in developing new or improving existing insider threat mitigation programs.