By:
On:
In: *Connecting the Dots Blog*, Information Privacy, Information Security, Regulatory Compliance

  I recently came across an interview on BankInfoSecurity entitled, “Banks Must Assume Customers Will Compromise Themselves”. In this interview, Tom Oscherwitz, chief privacy officer and vice president of government affairs for ID Analytics, discussed why online security measures are failing due to basic authentication techniques.  With the use of current social networking sites, such as Facebook, customers are often revealing all the information fraudsters need to figure out their log-in credentials. Many experts (and vendors) are recommending banks increase their security measures and implement expensive fraud detection technology solutions and measures.  Unfortunately this is merely reacting to a symptom rather than preventing the problem. Read More →

By:
On:
In: *Connecting the Dots Blog*, Campus Safety, School Safety

  In recognition of National School Counseling Week 2011, Awareity would like to help focus your attention on the vitally important and long-lasting contributions school counselors provide in our nation’s schools. School counselors can have a tremendous impact on students of all ages.  Counselors not only help students plan for the future, but also help students deal with the everyday struggles and stresses of being a classmate, friend, peer, child, sibling, etc. Students face escalating challenges with bullying, cyber bullying, violence, safety, truancy and many other stressors.  Did you know these stressors can cause as many as 160,000 students skip school every day because theyRead More →

By:
On:
In: *Connecting the Dots Blog*, Campus Safety, Regulatory Compliance

  I wrote a couple blogs in December 2010 about importance of solving bullying problems and about the importance of awareness, accountability and measurability in solving problems.  The underlying message in each of those 2010 blogs was to point out the need to SOLVE problems rather than just talking about what SHOULD be done. So in honor of Groundhog Day and the movie Groundhog Day, today is the perfect day to shed some light (or shade) on the dreaded “should all over yourself syndrome”. And for you Tony Robbins fans, you may have heard Tony tell us all to:  “Stop shoulding all over yourself”. SoRead More →

By:
On:
In: *Connecting the Dots Blog*, Campus Safety, Human Resources, Incident Reporting, Risk Management, School Safety

  Already in 2011, tragedies in Tucson and Omaha have reminded each of us about the consequences of missed opportunities involving red flags and warning signs.  Lives were lost and lives will be changed forever because of these and many other tragic incidents. We are now learning numerous red flags and warning signs existed involving the gunman in each tragedy, which has many people asking why these two tragedies were not prevented and how can we prevent future incidents like these from occurring? Some people are suggesting new gun control laws in Arizona or new laws that do not allow guns within 1000 feet ofRead More →

By:
On:
In: *Connecting the Dots Blog*, Uncategorized

  I went on a trip to South Korea of the holidays and had a fabulous time. The trip was great because I had never been to South Korea, so there were many “firsts” for me.  I also love Korean food and had some “really fresh” seafood too! I got to see a lot of South Korea via airplane from Seoul to Jeju Island where I ate a bunch of delicious hallabongs (small orange like citrus fruit grown only in Korea) and rode on my first bullet train from Daejeon back to Seoul….which was very cool and very fast. My top 5 observations about SouthRead More →

By:
On:
In: *Connecting the Dots Blog*, Incident Reporting, Legal, Regulatory Compliance, School Safety

  Under a law signed by Governor Patrick in May 2010, all Massachusetts schools had a December 31, 2010 deadline for filing comprehensive bullying prevention and intervention plans. On November 10, only 3 of the 394 school communities had responded.  On December 31, it was reported early in the day that 355 had submitted their plans, but right before the deadline, a flood of plans came in, resulting in 99 percent compliance (only six schools failed to meet the deadline). I believe 99% compliance is an outstanding result, however I do have a few questions: Were the plans submitted comprehensive? Did the schools take theRead More →

By:
On:
In: *Connecting the Dots Blog*, Business Continuity, Regulatory Compliance, Risk Management

  Is Measuring Risk Possible? I saw a discussion question recently asking how to measure risk? My first reaction was…do you measure risk?  I say no. Do you measure security?  Do you measure prevention?   I would say no and no. Do you measure cake? Not usually, unless you are paying for cake by the pound, but measuring the cake does not guarantee the cake is any good. Determining if the cake is any good depends on how the cake looks and how the cake tastes.  To make a good cake, you need to measure each of the ingredients for the cake (internal) and you needRead More →

By:
On:
In: *Connecting the Dots Blog*, Human Resources, Information Privacy, Information Security, Risk Management

  In a recent Dark Reading article, new research from Trusteer revealed that mobile users are the most likely to fall victim to fake e-mail messages and visit phishing sites. Once they arrive at the fraudulent site they are also three times more likely than users on PCs to provide sensitive login information. Why are mobile users more vulnerable? Availability – smartphones are with their users 24/7 so e-mails are checked more frequently. Phishing attacks generally get their victims during their initial launch, as after a certain time frame sites are taken down, blocked or shut down. Size – the smaller screens of mobile devicesRead More →

By:
On:
In: *Connecting the Dots Blog*, School Safety

  Much of the media spotlight in 2010 was given to bullying, cyberbullying, bullying legislation, bullycides, bullying lawsuits and more.  However, most of the attention was focused on reacting to problems and consequences. In 2011, rather than continuing to discuss how to address bullying once it occurs, reading about young children driven to suicide after countless years of bullying and debating over states implementing anti-bullying laws, perhaps school and community leaders can work together to prevent and mitigate this escalating challenge? In 2011, hopefully schools will be focused on solving bullying related problems, preventing bullying and preventing bullying consequences. The OCR “Dear Colleague” letter inRead More →

By:
On:
In: *Connecting the Dots Blog*, Incident Reporting, School Safety

  In a recent Boston Globe article, several Massachusetts school administrators discussed how they were implementing (or not implementing) the new state requirements for bullying. The new anti-bullying law can potentially expose schools — and individual staffers — to lawsuits by parents or state authorities if incidents of bullying are not handled properly. One of the key requirements is for school leaders to thoroughly investigate all reports of bullying and document actions taken.  One superintendent claimed, “I like to keep the informal stuff in my head.”  But, keeping informal reports and incidents in one faculty member’s head provides no documentation of a student skipping school,Read More →