By:
On:
In: *Connecting the Dots Blog*, Human Resources, Information Security, Regulatory Compliance

Awareity’s CEO/President, Rick Shaw, is planning to share his knowledge and expertise at several upcoming events in the Lincoln/Omaha area.  October 13 – HRAM Omaha October 15 – AITP Omaha November 19  – AITP Lincoln March 17 – ARMA Lincoln Previous blog posts and every day headlines reveal organizations are struggling to keep up with escalating complexities.  So how can lessons learned help organizations keep up more effectively and efficiently? Rick will discuss real world examples and case studies to share proven steps organizational leaders can use to implement lessons learned and improve management efforts across all appropriate personnel – no matter how many departments,Read More →

By:
On:
In: *Connecting the Dots Blog*, Information Security, Legal, Regulatory Compliance, Risk Management

Two recent headlines caught my attention: Construction Company Sues Bank for Money Lost in Cyber Scam Couple’s Lawsuit Against Bank Over Breach to Move Forward In both of these cases, banks are being sued for not taking adequate precautions that could have prevented cyber thieves from stealing money from the customers’ accounts.  The customers claim that the banks did not offer two-factor authentication and also failed to notice suspicious and anomalous behavior.  Therefore, the customers are claiming that the banks breached their duty to protect account holder information. These lawsuits could have significant ramifications and I will be curious to see the final outcome.  ShouldRead More →

By:
On:
In: *Connecting the Dots Blog*, Emergency Management, Human Resources, Incident Reporting, Information Privacy, Information Security, School Safety

Please take a moment to consider how these Lessons Learned could be implemented by managers within your organization to avoid expensive and embarrassing situations… FBI Investigating Mystery Laptops Sent to Governors The FBI is investigating five laptop computers sent anonymously to West Virginia Governor Joe Mahchin a few weeks ago, as well as laptops mysteriously ordered for officials in 10 other states.  Officials are worried the laptops may contain malicious software that would be a large risk if connected to government networks. Would your employees plug in a new laptop to your organization’s networks? Bernanke Falls Victim to Identity Theft Fed Chairman Ben Bernanke wasRead More →

By:
On:
In: *Connecting the Dots Blog*, Information Privacy, Information Security, Regulatory Compliance

Please take a moment to consider how these Lessons Learned could be implemented by managers within your organization to avoid expensive and embarrassing situations… U.S. Government Advises Businesses on Swine Flu. Government officials are calling on U.S. businesses to help manage the H1N1 flu this fall by developing customized plans for managing both the seasonal and swine flu, getting vaccines to vulnerable workers and encouraging employees with symptoms to stay home. Court indicts Hackers in Largest Data Breaches in US History A federal grand jury in New Jersey indicted Albert “Segvec” Gonzalez in the largest hacking and identity theft case ever prosecuted. Gonzalez was involvedRead More →

By:
On:
In: *Connecting the Dots Blog*, Information Privacy, Information Security, Regulatory Compliance

Health and Human Services (HHS) issued new regulations this week requiring healthcare providers, health plans and other entities covered by HIPAA (Health Insurance Portability and Accountability Act) to notify patients if their electronic health information has been breached. The regulations were developed by HHS Office of Civil Rights (OCR) and require healthcare providers and other HIPAA covered entities to promptly notify people, the HHS and the media in breaches that affect more than 500 people. Earlier this week, HHS announced that they delegated the authority for the administration and enforcement of the HIPAA Security Rule to the Office for Civil Rights (OCR). Any lessons learnedRead More →

By:
On:
In: *Connecting the Dots Blog*, Information Privacy, Information Security, Regulatory Compliance

In case you missed it, the Department of Health and Human Services (HHS) has delegated the authority for the administration and enforcement of HIPAA Security Rule to the Office for Civil Rights (OCR).  In the article Secretary Sebelius commented: “Security and privacy of health information are increasingly intersecting as the department works with the health industry to adopt electronic health records and participate in an even greater level of electronic exchange of health information. Privacy and security are naturally intertwined, because they both address protected health information. Combining the enforcement authority in one agency within HHS will facilitate improvements by eliminating duplication and increasing efficiency.”Read More →

By:
On:
In: *Connecting the Dots Blog*, Information Security, Regulatory Compliance

Lessons Learned Review…Keeping You Out of the Headlines and out of this blog… Please take a moment to consider how these Lessons Learned could be implemented by managers within your organization to avoid expensive and embarrassing situations… Research Finds PCI DSS Awareness High Among Small Retailers, Lack of Understanding Remains Huge Hurdle A recent survey revealed that although most small retailers feel somewhat familiar with PCI-DSS and also understand the importance of security, most small retailers express frustration with understanding, implementing and paying for compliance.  Has your organization met compliance requirements?  Is your data secure? Schools are Given New Flu Guidelines The federal government releasedRead More →

By:
On:
In: *Connecting the Dots Blog*, Business Continuity, Information Security, Legal, Regulatory Compliance, School Safety

Every manager I talk to has a long To Do List and they all say the list is getting longer. Then I ask them a question about their GOT TO DO LIST?  Their responses usually include groans, moans and terribly painful looks on their faces. As I talk to more and more managers and review more and more headlines in the news, it is obvious to me that managers’ GOT TO DO LISTS are becoming more painful by the day. Why are GOT TO DO LISTS getting more painful?  Look at these articles which include lessons learned as well as future challenges: Heartland CEO onRead More →

By:
On:
In: *Connecting the Dots Blog*, Information Privacy, Information Security

A title to an article in SmartMoney caught my attention because it read “Dingbat Data Leaks”. I think it caught my attention because over the last 27+ years or so, I have worked with my share of IT and IS department managers, as well spending many years working with end-users and I am not sure I understand who the author is referring to as the “dingbats”? The author mentions absurd incidents and common blunder incidents….so: Are the people that throw away sensitive records in the trash the dingbats?   Are the people that lose flash drives and laptops the dingbats? Is the gas station attendant whoRead More →

By:
On:
In: *Connecting the Dots Blog*, Emergency Management, Incident Reporting, Information Privacy, Information Security, Legal, Regulatory Compliance, Workplace Violence

Lessons Learned Review…Keeping You Out of the Headlines and out of this blog… Please take a moment to consider how these Lessons Learned could be implemented by managers within your organization to avoid expensive and embarrassing situations… DDoS Attacks On Twitter, Facebook Result Of Massive Attack On One Person A pro-Georgian blogger called “Cyxymu” was apparently the intended target of the massive DDoS attack that knocked down Twitter and caused major slowdowns on Facebook and LiveJournal.  A botnet blasted waves of traffic at the blogger’s accounts on the sites simultaneously. File Sharing Banned on Government Networks  Rep. Edolphus Towns introduced a bill to ban file-sharingRead More →