By:
On:
In: *Connecting the Dots Blog*, School Safety, Workplace Violence

New data released this week revealed: 17 percent of American students report being bullied 2-3 times a month or more within a school semester. Over 9% of girls and 14% of boys just watch their fellow classmates get bullied. Over 30% of girls and 22% of boys think they ought to help the bullied students, but don’t do anything about it. 80% of bullying is witnessed; but only 10% of witnesses/bystanders report incidents. Why are bystanders not reporting incidents? There are many reasons and some of the most common include: Some feel threatened or intimidated when reporting a bully or suspicious incident. Some do notRead More →

By:
On:
In: *Connecting the Dots Blog*, Incident Reporting, Risk Management, School Safety

  Do you know what the legal definition of “deliberate indifference” is? The conscious or reckless disregard for the consequences of one’s acts or omissions. If you are a school leader, school board member or community leader, you might do a quick web search using the words below:                 deliberate indifference lawsuit school 2010 Over 8,000 results came up from my search and many of the results were related to lawsuits being brought against schools and universities under violation of Title IX.  I heard the term “deliberate indifference” over the weekend when one of the national news channels did a bullying feature on a schoolRead More →

By:
On:
In: *Connecting the Dots Blog*, Information Privacy, Information Security

  One of my last blogs discussed the risks of third-party contractors and their responsibilities for protecting information.  This blog will address yet another third-party risk – your janitors. A janitor was recently arrested for removing boxes of records from a Southern California health care clinic.  Interested only in getting money for the paper, the janitor sold 14 boxes of patient records to a recycling center for $40.  This janitor was not interested in identity theft, but the next one might be… In an earlier case, a janitor stole personal information from patient files at a Chicago hospital, participating in an identity theft ring thatRead More →

By:
On:
In: *Connecting the Dots Blog*, Emergency Management, Incident Reporting, Risk Management, School Safety

  Did you see the story from the San Jose International Airport this past weekend? Just before 3pm on Saturday, an SUV pulled up to the arrival curb outside Terminal A at Mineta San Jose International Airport.  Two men dressed in black got out of the SUV and approached the information desk to inquire about flight 1205 from Dallas.  Both men carried assault rifles that were strapped across their chests and they had handguns in their holsters. One of the volunteers politely asked if they were one of those people on planes that look for terrorists…one of the men simply answered no. The volunteers commentedRead More →

By:
On:
In: *Connecting the Dots Blog*, Human Resources, Information Security, Legal

  In a recent incident, a man called a 24-hour Wal-Mart in Ohio and explained to an associate that he was with Wal-Mart’s IT department and needed the associate to activate several gift cards, read to him the card numbers and then provide the authorization codes from the back of the cards.  The associate willingly did so – and not until $11,000 in online fraud later, did the store realize they had been tricked. This is a great lesson learned to share with your employees (and third-parties).  Do your employees understand your organization’s policies on providing/protecting information in different situations? The Wal-Mart caller did notRead More →

By:
On:
In: *Connecting the Dots Blog*, Information Privacy, Information Security, Legal, Regulatory Compliance

  A recent GAO report has revealed that federal agencies utilizing contracted workers are failing to implement contractual assurances with third-parties regarding the protection of sensitive information. GAO auditors examined the contracting practices of three of the largest federal agencies and of those three, only one (DHS) required third-party companies to sign standard contracts requiring the contractors to follow best practices in safeguarding sensitive information. In a recent data breach, a TSA contractor allegedly provided a Boston couple the social security numbers for more than a dozen TSA workers.  Third-parties are increasingly responsible for data breaches, but most often, the hiring agency or company willRead More →

By:
On:
In: *Connecting the Dots Blog*, Business Continuity, Emergency Management, Legal, Regulatory Compliance

  Most everyone has heard or muttered these words at some time or another: If I Knew Then What I Know Now…                                                                                                                                                                                                                          The saying is most often used when we look back at our life and we realize that if I knew then (when I was younger) what I know now (with more experience and wisdom), I may have made some different decisions. The saying also came to mind recently as we were reminded of the 9year anniversary of September 11th and the 5 year anniversary of Katrina and numerous other incidents that have provided experience and wisdom that we could have used before these eventsRead More →

By:
On:
In: *Connecting the Dots Blog*, Emergency Management, Incident Reporting, Risk Management

  Most everyone has heard or muttered these words at some time or another: If I Knew Then What I Know Now…                                                                                                                                                                                                                          The saying is most often used when we look back at our life and we realize that if I knew then (when I was younger) what I know now (with more experience and wisdom), I may have made some different decisions. The saying also came to mind recently as we were reminded of the 9year anniversary of September 11th and the 5 year anniversary of Katrina and numerous other incidents that have provided experience and wisdom that we could have used before these eventsRead More →

By:
On:
In: *Connecting the Dots Blog*, Information Security

  Dennis McCafferty of CIO Insight recently did a two part overview on Enterprise Security Risks and in part 2 he talked about the hottest security catch phrase of 2010 – Advanced Persistent Threat (APT). According to the overview, an Advanced Persistent Threat is an insidious attack by a well-funded, state-sponsored intelligence organization.  The overview goes on to describe how APT attackers are more patient than a bored Gen Y hacker or financially motivated crook. They are willing to slowly gather information and data from multiple sources and social media sites and then execute a targeted, social-engineering attack on their terms. Are bad guys out-thinkingRead More →

By:
On:
In: *Connecting the Dots Blog*, Incident Reporting, Workplace Violence

  What is your first thought when you hear the word WHISTLEBLOWER? Whistleblower definitions commonly say a whistleblower is any person that reveals wrongdoing or malpractices taking place within an organization.  And in many cases a whistleblower may face retaliation or other negative ramifications and by law may require special protection. What is your first thought when you hear the word HERO? Hero definitions run from mythical and legendary figures to a person that is admired for their achievements or noble qualities to a central figure in an event, period or movement. When is the last time you heard an organization promote their Hero Line? Read More →