By:
On:
In: *Connecting the Dots Blog*, Emergency Management, Human Resources, Incident Reporting, Information Privacy, Information Security, School Safety

Please take a moment to consider how these Lessons Learned could be implemented by managers within your organization to avoid expensive and embarrassing situations… FBI Investigating Mystery Laptops Sent to Governors The FBI is investigating five laptop computers sent anonymously to West Virginia Governor Joe Mahchin a few weeks ago, as well as laptops mysteriously ordered for officials in 10 other states.  Officials are worried the laptops may contain malicious software that would be a large risk if connected to government networks. Would your employees plug in a new laptop to your organization’s networks? Bernanke Falls Victim to Identity Theft Fed Chairman Ben Bernanke wasRead More →

By:
On:
In: *Connecting the Dots Blog*, Human Resources, Legal

The headline of a story caught my eye last week – Marriott Disowns One Hotel’s Defense in Rape Case. It seems Marriott International is seeking to distance itself from a Marriott franchise hotel’s legal defense tactic and released this statement: “This incident is not reflective of our corporate culture or ethical standards, and we apologize to all of our guests and customers who were so deeply offended by the words used in the legal pleading.” The court case stems from a situation where a woman was raped at gunpoint in front of her children in a hotel parking garage, which was obviously a horrible experienceRead More →

By:
On:
In: *Connecting the Dots Blog*, Information Privacy, Information Security, Regulatory Compliance

Please take a moment to consider how these Lessons Learned could be implemented by managers within your organization to avoid expensive and embarrassing situations… U.S. Government Advises Businesses on Swine Flu. Government officials are calling on U.S. businesses to help manage the H1N1 flu this fall by developing customized plans for managing both the seasonal and swine flu, getting vaccines to vulnerable workers and encouraging employees with symptoms to stay home. Court indicts Hackers in Largest Data Breaches in US History A federal grand jury in New Jersey indicted Albert “Segvec” Gonzalez in the largest hacking and identity theft case ever prosecuted. Gonzalez was involvedRead More →

By:
On:
In: *Connecting the Dots Blog*, Information Privacy, Information Security, Regulatory Compliance

Health and Human Services (HHS) issued new regulations this week requiring healthcare providers, health plans and other entities covered by HIPAA (Health Insurance Portability and Accountability Act) to notify patients if their electronic health information has been breached. The regulations were developed by HHS Office of Civil Rights (OCR) and require healthcare providers and other HIPAA covered entities to promptly notify people, the HHS and the media in breaches that affect more than 500 people. Earlier this week, HHS announced that they delegated the authority for the administration and enforcement of the HIPAA Security Rule to the Office for Civil Rights (OCR). Any lessons learnedRead More →

By:
On:
In: *Connecting the Dots Blog*, Information Privacy, Information Security, Regulatory Compliance

In case you missed it, the Department of Health and Human Services (HHS) has delegated the authority for the administration and enforcement of HIPAA Security Rule to the Office for Civil Rights (OCR).  In the article Secretary Sebelius commented: “Security and privacy of health information are increasingly intersecting as the department works with the health industry to adopt electronic health records and participate in an even greater level of electronic exchange of health information. Privacy and security are naturally intertwined, because they both address protected health information. Combining the enforcement authority in one agency within HHS will facilitate improvements by eliminating duplication and increasing efficiency.”Read More →

By:
On:
In: *Connecting the Dots Blog*, Information Security, Regulatory Compliance

Lessons Learned Review…Keeping You Out of the Headlines and out of this blog… Please take a moment to consider how these Lessons Learned could be implemented by managers within your organization to avoid expensive and embarrassing situations… Research Finds PCI DSS Awareness High Among Small Retailers, Lack of Understanding Remains Huge Hurdle A recent survey revealed that although most small retailers feel somewhat familiar with PCI-DSS and also understand the importance of security, most small retailers express frustration with understanding, implementing and paying for compliance.  Has your organization met compliance requirements?  Is your data secure? Schools are Given New Flu Guidelines The federal government releasedRead More →

By:
On:
In: *Connecting the Dots Blog*, Business Continuity, Information Security, Legal, Regulatory Compliance, School Safety

Every manager I talk to has a long To Do List and they all say the list is getting longer. Then I ask them a question about their GOT TO DO LIST?  Their responses usually include groans, moans and terribly painful looks on their faces. As I talk to more and more managers and review more and more headlines in the news, it is obvious to me that managers’ GOT TO DO LISTS are becoming more painful by the day. Why are GOT TO DO LISTS getting more painful?  Look at these articles which include lessons learned as well as future challenges: Heartland CEO onRead More →

By:
On:
In: *Connecting the Dots Blog*, Information Privacy, Information Security

A title to an article in SmartMoney caught my attention because it read “Dingbat Data Leaks”. I think it caught my attention because over the last 27+ years or so, I have worked with my share of IT and IS department managers, as well spending many years working with end-users and I am not sure I understand who the author is referring to as the “dingbats”? The author mentions absurd incidents and common blunder incidents….so: Are the people that throw away sensitive records in the trash the dingbats?   Are the people that lose flash drives and laptops the dingbats? Is the gas station attendant whoRead More →

By:
On:
In: *Connecting the Dots Blog*, Emergency Management, Incident Reporting, Information Privacy, Information Security, Legal, Regulatory Compliance, Workplace Violence

Lessons Learned Review…Keeping You Out of the Headlines and out of this blog… Please take a moment to consider how these Lessons Learned could be implemented by managers within your organization to avoid expensive and embarrassing situations… DDoS Attacks On Twitter, Facebook Result Of Massive Attack On One Person A pro-Georgian blogger called “Cyxymu” was apparently the intended target of the massive DDoS attack that knocked down Twitter and caused major slowdowns on Facebook and LiveJournal.  A botnet blasted waves of traffic at the blogger’s accounts on the sites simultaneously. File Sharing Banned on Government Networks  Rep. Edolphus Towns introduced a bill to ban file-sharingRead More →

By:
On:
In: *Connecting the Dots Blog*, Information Privacy, Legal

Will Rep. Edolphus Towns (D-NY) introduce a bill to ban e-mail and phone software next? I was reading an article in the Washington Post that reported that online data-sharing technology has led to the disclosure of sensitive government and personal information.  According to the article some of the sensitive information included: FBI surveillance photos of a Mafia hit man Lists of people with HIV and social security numbers Motorcade routes and safe-house locations for then-first lady Laura Bush Names of people in government’s witness protection program Records with full psychological assessments of patients   In response to the news, the chairman of the House OversightRead More →