The corma GmbH, specialized in analytical and classical investigation in the fields of anti-counterfeiting, brand protection and fraud, created a global intelligence solution for a multinational technology company to combat counterfeit and brand protection issues. The solution enables analysts and investigators to increase their productivity by working more effectively on the same data and make faster informed decisions.

1. Building a Global Intelligence Solution to Combat Counterfeiting
Jörn Weber, corma GmbH

2. Storyboard
• My Profile / corma Profile
• The Customer: Start & Objective
• Selected Solution: Software & Hardware
• iBase Repository Design
• Import Specifications & Process
• User Access & Training
• Project Administration
• Results
• Sharing Best Practices / Tips & Tricks
19 June 2013 2

3. Jörn Weber: Profile
19 June 2013 3
Managing Director corma GmbH,
Experienced analytical investigator and innovative solution provider
1980-1999
since 1999
2004-2007
2005-2010
since 2006
Professional experience:
German Law Enforcement (Assistant Commanding Officer)
Founder and operational manager: corma GmbH
Investigator / Senior Manager Tech Data
Project Manager: Incident Information System (IIS) for TAPA EMEA
Senior Investigator & Project Manager for a global operating IT-company
1980-1983
1987-1991
2007
Education:
Education at German Law Enforcement, North Rhine Westphalia
Master's degree in public administration (Criminalistics, Criminology)
Fachhochschule für öffentliche Verwaltung (Dipl.-Verwaltungswirt)
Certified Fraud Examiner (CFE)
up to date profiles:
Linked in Xing






4. corma Profile
19 June 2013 4
• Founded in 1999, dedicated to providing professional investigations & data
analytics services, i.e. support Corporate Security Departments to
successfully manage investigative work
• Headquartered in Germany, operates globally for customers based in Europe
and USA (references on request)
• core-team: certified investigators, fraud analysts (IZCP), Certified Fraud
Examiners (CFE)
• Services
investigations data analyticsresearch
stolen asset
recovery
anti-
counterfeiting
solutions
intelligence &
investigation
databases

5. The Customer
• Multinational Enterprise
– Worldwide operation, >100.000 employees
– Facing counterfeit and brand protection issues
– Global security department and experienced investigators
• Customer’s request
– Building a flexible intelligence system for different levels of expertise
and experience that complies with the privacy laws by
• Creating a global and secured access to the environment
• Combining the different source dB systems
– Unifying the different formats of the dB systems
– Fixing data quality issues
19 June 2013 5

6. Start & Objective
19 June 2013 6
Assessment of customer’s
needs by:
- conducting interviews
- reviewing systems
- analyzing the data
- understanding the issue
Objective
- incorporate results from “Voice of the User”
- creating a tailor-made Intelligence Solution Structure
- identify a system to centralize all different dB systems
Decision
on
software

7. Selected Solution: Software
• iBase
719 June 2013

8. Selected Solution: Software
• iBase
• Analyst‘s Notebook
819 June 2013

9. Selected Solution: Software
• iBase
• Analyst‘s Notebook
• TextChart
919 June 2013

10. Selected Solution: Software
• iBase
• Analyst‘s Notebook
• TextChart
• Chart Reader
1019 June 2013

11. Selected Solution: Software
• iBase
• Analyst‘s Notebook
• TextChart
• Chart Reader
• iBase IntelliShare
1119 June 2013

12. Project Layout
1219 June 2013
Product
database
web application
Webmonitoring
secured
access
Case Management
System
user & admin
via client
software
(Virtual
Machine)
secured
access
Investigative dB – iBase repository
iBase IntelliShare

13. Hosting Hardware / Network
• Example:
– SQL Server
• HP DL 380 G6/7 SQL 2008 Server (2x4 CPU, 32 GB RAM)
– Virtual Machines
• 11 Windows 7 (8GB) Desktops with i2 client software and more…
• Hosting in certified data center
• Secured remote access:
– User interface with secure access (token and pin), user logins and user access limitations to
Virtual Desktop or Web Applications
– Managed RSA SecurID Token & Authentification
– Remote Access via website (Juniper SSL VPN Sessions)
19 June 2013 13

14. iBase Repository Design
• dB Structure
• Develop structure with a view on potential queries needed to
identify leads in the data
19 June 2013 14

15. Import Specifications
• Multiple sources dB
– Customs data
– *Open Source Intelligence
– Case Management System
– Web monitoring solution
19 June 2013 15
Lead
Generation
Customs
Data
OSINT*
Source of
Information
CMS
Web
monitoring

16. Webmonitoring
19 June 2013 16
Global Monitoring
of products, partner
activities across the
Internet
Detect and Record Sellers
Information about sellers,
relationships, products and
listings
Analysis and Reporting
Sellers’ ranking using
risk indices
Adhoc reporting
Custom monthly status
reports
Actions and Resolutions
Execute enforcement
options for auction
takedowns

17. Develop Import Process
Intelligence Import
NewMomentum raw data is provided as collected from the web and how users
entered the data, e.g.
• Organizations
• Parent Company/Network information
• Contact details
• Websites
• IP address
19 June 2013 17

18. Develop Import Process
• Data Cleansing
• Usage of InfoZoom
• Dynamic and efficient Software used for
– Combining the different dB systems
– Unifying the different formats of the dB systems by defining standard
templates
– Fixing data quality issues, e.g. company names and addresses in
customs data:
19 June 2013 18
Different name spellings Special characters, line breaks etc.

19. Develop Import Process
• Import Specifications
19 June 2013 19
Challenge
Incorporate
old legacy
databases
Upload of
large data
files
Different
structures
of data

20. Develop Intelligence Queries
• Pre-defined queries as basis for data analytics
• Analysts are able to create own queries in iBase
– Reporting function
• Sample queries
19 June 2013 20
iBase
IntelliShare
iBase
all queries and
results are
available for iBase
IntelliShare users

21. User & Access / Training
User communication
• Newsletter
• Best practices sharing
19 June 2013 21
> 25 worldwide users
• additional users expected
User Training:
• 1:1 Sessions per quarter via “guided analytics” for
iBase IntelliShare
Virtual environment
Knowledgebase
• Wiki
Information
Tips & tricks

22. Daily Usage
• Data analytics across complete dB
– Predefined and new queries
– Creating intelligence on new identified links
• Sharing information
– Via data sets
– Entity status
• i.e. investigative notes
– Reports and stats
– Avoiding duplicate work in multi-user environment (micro-case management)
19 June 2013 22

23. Project Administration
19 June 2013 23
Administrative work 2-3 days per
month to
• Optimize dB design regarding entities and
link structure
• Cleanse data to fix data quality issues
• Import data
• Reporting, e.g. status statistics
corma lab
• Linkage webmonitoring with iBase
• Find, test and use new features

24. Results
19 June 2013 24
For corma:
Ongoing and increasing business, incl.:
- dB administration & enhancements
- Monitoring solution
- Analytical work
- 24/7 helpdesk for users
For the customer:
- Global Intelligence Information
management with actionable
- high profile leads tracking, monitoring
and reporting
- increase # of investigations
- ROI (more market share)

25. Sharing Best Practices / Tips & Tricks
Best Practices
• Listen to the customer’s needs
• Develop a turnkey-ready solution
• Use high-end hardware solution with maximum security &
• “all-inclusiv-next-business-day-solve-everything-immediately-solution”
• Regular 1:1 user trainings
• Ensure software capabilities of users before giving access
• Need for experienced and well trained team members
Tips & Tricks
• Wiki
• Software user guides
• Manuals (workflow documentation)
• Best practices sharing
• Determined communication workflow
19 June 2013 25

26. Contact
corma GmbH
Joern Weber
Heinz-Nixdorf-Str. 22
41779 Mönchengladbach
Germany
www.corma.de
jw@corma.de
Tel.: +49 (2161) 277 85-0
Mobile: +49 162 1009402