IT Management Lessons from Bernie Madoff

Bernard L. Madoff Investment Services' closed infrastructure and legacy IT environment offer a stark lesson for companies.

to Applications |
Bernie Madoff was a lot of things to a lot of people—a once-trusted financial advisor, a man who always beat The Street, and, as it turned out, a felonious con-man who caused thousands of his clients to lose billions in their investments.

Madoff was also a technology laggard, which enabled his Midas-like ability to always deliver huge (and completely fake) investment returns. On an IT evolution scale, Bernard L. Madoff Investment Services' enterprise systems and IT infrastructure stayed as much in the Dark Ages as possible—just the way he and his co-conspirators wanted it.

All of these fascinating details come from an intriguing investigative article in Securities Industry News, by John Dodge: "How Bernie Made Basket Cases of His Customers' Accounts." (For more analysis on the Madoff saga and getting to "One version of the truth" with corporate data, see Bernie Madoff's Client List vs. MDM Software: Lessons Learned.)

The article, which is based on court records and interviews with former Madoff IT personnel, lays out how Madoff used proprietary and closed-loop systems to cover his illegal business dealings and giant Ponzi scheme. A former IT project manager at the firm, Bob McMahon, is extensively quoted in the article and gives a telling overview of the IT environment.

"McMahon knew if 'technologists' replaced the proprietary systems with more modern and open computers, they would have invariably found the absence of data on countless stock trades that supposedly took place," writes Dodge. "In a sense, the preservation of old computer technology helped Madoff successfully go undetected for years until his massive Ponzi scheme collapsed." (For more on Wall Street IT issues, see Wall Street Scandal: When Does Open Source Become Proprietary Code?)

The antiquated IT environment at the firm offered traders green-screen terminals (developed circa 1985), "where only text appeared on screen and instructions were in almost cryptic codes entered into command lines," notes the article. Younger traders mostly opted for creatively named "M2" Windows-based desktop PCs running in-house trading software, referred to as MISS, which most likely stood for Madoff Investment Systems and Services, Dodge writes.

A closed, walled-off IBM AS/400, called "House 17," was the back-office workhorse of the scheme. "House 17's expressed purpose was to maintain phony records and crank out millions of phony IRS 1099s on capital gains and dividends, trade confirmations, management reports and customer statements," according to article.

Many more telling details in the article illustrate the dangers of "closed" systems as well as falling behind the technology curve—both inside your own four walls and at your outside service providers' companies.

The Securities Industry News article sums up the Madoff saga this way: "It's also a cautionary tale to information technology managers and executives at shops up and down Wall Street. If you think something is amiss, don't let it rest. Do your own investigation. Before the company you work for turns out to be missing as well."

Do you Tweet? Follow me on Twitter @twailgum. Follow everything from CIO.com on Twitter @CIOonline.

Print
What is Tech Briefcase?
TechBriefcase is a new, free service where IT Professionals can Search, Store and Share IT white papers and content like this. Learn more
Bookmark content
Speed up your research efforts with content across the web.
Search and Store
Find the white papers you need. Create folders for any topic.
View Anywhere
Open your briefcase on your iPhone, tablet or desktop. Share with colleagues.
Don't have an account yet?

Browse CIO Blogs

See all CIO Blogs »

Cloud computing has emerged as one of the most significant game changers to hit the technology landscape in the past 20 years. With this massive expansion of the cloud, the perception of the IT organization is shifting from a utility player to a change agent. This eBook breaks down five ways progressive organizations are using cloud-based IT Management solutions to help drive innovation and become more strategic, including: adding visibility and analytics, speeding up time-to-value, lowering costs, improving prioritization, and providing a blueprint for future cloud deployments.
Read the white paper to see how IBM helped Citigroup deliver new services and enhancements to their 200 million customers faster.
There are 3 ways to modernize legacy applications: rewrite completely, acquire packaged solutions or migrate existing code. This paper explains why it's best to migrate and how IBM® Rational® software can help.
Accommodating specific lines of business can result in a hybrid ecosystem of applications and servers. The resulting complexity of this architecture makes for an environment that is costly to maintain and difficult to change when addressing new challenges.
This whitepaper will help you to define a mobile device passcode policy. Security managers must attempt to reconcile two opposing goals. They must: 1) create a passcode policy that is strong enough to protect the device if it is lost or stolen, while: 2) not annoying users with needless length or complexity.
This whitepaper, authored by The Radicati Group, looks at the key reasons organizations should consider moving to a cloud-based archiving solution. Email archiving solutions enable organizations to store, monitor, and collect electronic data exchanged by their users to comply with internal policies and regulations.
ATERNITY will showcase a 30-minute demo on how Fortune 500 companies are leveraging its award-winning FPI Platform to deliver a user-centric approach to Proactive IT Management.
For businesses to move forward and tap into the ever-expanding universe of Internet users and network-enabled devices, it's critical to learn how to make the transition to IPv6. Learn the critical steps your organization must take to make a seamless transition-and keep your business world connected.
Learn how IT teams can protect against spear phishing tactics. Harry Sverdlove, chief technology officer of Bit9 offers a frank discussion about spear phishing - the most common technique used in today's advanced attacks.
Learn how to build a solid business case for your migration to Red Hat Enterprise Linux so you can run leaner, innovate faster, be more flexible and own the New Now.
Social media isn't about you; it's about everything around you. As you consider how your customers want to communicate with you, social media is something that can't be ignored. But what should your strategy be? Is social media "just another channel?" What kind of a plan makes sense for your contact center and for your customers? Join our experts as they share their insight and research results.
Hardware tokens were a popular method of strong authentication in past years but the cumbersome provisioning and distribution tasks, high support requirements and replacement costs have limited their growth. The additional log-in steps that hardware tokens require and the resulting user frustrations have limited adoption and make them impractical for larger scale partner and customer applications.

Newsletter Sign-Up »

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all Newsletters | Privacy Policy