Start with the following two link:
http://www.itsecurity.com/asktecs/jan3702.htm
you can download the document from this location
and there are other good links
http://www.bt.com/bttj/vol19no3/kenning.pdf
this site has an overview of the security standard
How ya Doin [EMAIL
The situation you describe could be stage setting for
possible business fraud. The longer you wait to report
the situation the greater the liability to your company.
You might try the Internet Fraud Complaint Center.
http://www1.ifccfbi.gov/index.asp
Good luck!
Bejon Parsinia
