Preventing Identity Theft in Your Business: How to Protect Your Business, Customers, and Employees

A Business Guide to Identity Theft Prevention 🔐

Identity theft rarely begins with a dramatic break-in. More often, it grows from ordinary gaps: a hiring process that skips background checks, a customer file left accessible, a website that collects more data than it protects. Judith M. Collins wrote Preventing Identity Theft in Your Business for organizations that want to close those gaps before they become costly incidents.

Published by John Wiley & Sons in 2005, the book approaches identity theft as both a people problem and an operational one. Its focus is not only on protecting the business itself, but also on safeguarding customers and employees whose personal information passes through company systems.

What the Book Covers

The opening sections examine the nature of identity, the emotional and financial effects on victims, and the reasons identity crime became entrenched and increasingly difficult to ignore. Collins also reviews legal requirements that apply to businesses and includes a cautionary “Caveat Lector” chapter for readers who need to evaluate claims and practices with a skeptical eye.

The BISP Plan: A Framework for Prevention

At the center of the book is the BISP plan, a structured way to tighten what Collins calls your business borders. Rather than treating security as a single policy document, the BISP approach asks organizations to identify their business identities and then examine how those identities are exposed through people, processes, and property.

Part II turns that framework into practical territory: job analysis for security roles, recruiting and selecting employees for motivation and integrity, interpersonal skills, socialization into an honest company culture, realistic job previews, and appraisal and feedback systems that keep performance and security aligned.

People, Processes, and Property

Collins gives substantial attention to the “people front.” Hiring and socialization are treated as security functions, not just HR tasks. The book explores how recruitment, selection, and workplace culture can either reduce internal risk or create openings for identity-related harm.

On the process front, the focus moves to securing business information processes: how data is collected, handled, stored, shared, and retired. The property front extends the discussion to e-business websites, where customer data, online transactions, and digital trust intersect.

Monitoring, Customers, and Compliance

Part III shifts to monitoring. It covers a customer security program, e-commerce best practices for customers, the legislative process surrounding identity theft, and the HIPAA database. Appendices provide checklists and step-by-step tools, including a security standard checklist, team prerequisites, brainstorming and cause-and-effect analysis instructions, focus group interview guidance, a security job description, test development resources, strategic planning examples, information process definitions, Pareto analysis, and forerunners in identity theft legislation.

Who This Book Is For

Business owners, managers, HR and hiring teams, security officers, compliance professionals, and e-commerce operators will find the book’s organizational perspective useful. It also speaks to customer-service and operations leaders who handle personal data and want a clearer view of how everyday workflows affect privacy and fraud risk.

Because the book was published in 2005, specific laws, technologies, and threats have changed. Readers should pair its foundational framework with current legal and cybersecurity guidance. The underlying questions about hiring, culture, process design, and customer trust remain relevant for anyone building a more careful business.

Why This Digital Edition Belongs on Your Shelf

Preventing identity theft is not a one-time purchase or a single software install. It is a management discipline. This Digital Delights edition of Collins’s guide offers a structured, readable starting point for teams that want to think through the human and operational sides of protection—not just the technical ones.