- CORSA-broadcast - lists.corsa.org

County buildings/security
by Jones, Cathy Sept. 22, 2025

Sept. 22, 2025

Apart from the Courthouse and jail, who is in charge of building security, employee access, and decisions on who has access and when? Commissioners? Sheriff? Facilities? Please advise. CATHY JONES Director, Risk Management ADA Coordinator Board of Mahoning County Commissioners 21 W Boardman St. Youngstown, OH 44503 Ph. 330-740-2130 Fx. 330-740-2667 cjones(a)mahoningcountyoh.gov<mailto:cjones@mahoningcountyoh.gov> [cid:image001.jpg@01D88596.03FCAFF0]

8 8

CyberOhio Webinar & HB 96 Resources
by Frank Hatfield Sept. 17, 2025

Sept. 17, 2025

CyberOhio announced that its next cybersecurity webinar "How to Use NIST CSF to Build a Cyber Program" will take place on 9-24-25. CyberOhio also issued a list of HB 96 cybersecurity resource links. Register Now: 9/24/25 CyberOhio Webinar How to Use NIST CSF to Build a Cyber Program Join us on September 24th, 12:30 pm - 1:30 pm for a webinar that walks you through using the NIST Cybersecurity Framework (CSF) as your roadmap to build or enhance a comprehensive cyber program. This session will be especially geared toward local entities building a cyber program to come into compliance with ORC 9.64. What You'll Learn: * The core components of the NIST CSF: Govern, Identify, Protect, Detect, Respond, Recover * How to align these components with your organization's people, processes, and technology * Practical steps & tools to assess current posture and prioritize improvements * Tips for communicating risk and gaining support from leadership Register Here<https://links-2.govdelivery.com/CL0/https:%2F%2Fevents.gcc.teams.microsoft.…> Looking for assistance on HB 96 cybersecurity compliance? Check out the following resources: * ORC Section 9.64 <https://links-2.govdelivery.com/CL0/https:%2F%2Fcodes.ohio.gov%2Fohio-revis…> * CyberOhio HB 96 Resources <https://links-2.govdelivery.com/CL0/https:%2F%2Fcyber.ohio.gov%2Fpriorities…> * Ohio Cyber Integration Center Reporting Guidance <https://links-2.govdelivery.com/CL0/https:%2F%2Fhomelandsecurity.ohio.gov%2…> * Auditor of State Guidance and Resources <https://links-2.govdelivery.com/CL0/https:%2F%2Fohioauditor.gov%2Ffraud%2Fc…> * Auditor of State Bulletin <https://links-2.govdelivery.com/CL0/https:%2F%2Fohioauditor.gov%2Fpublicati…> * NIST CSF 2.0 Resources <https://links-2.govdelivery.com/CL0/https:%2F%2Fwww.nist.gov%2Fcyberframewo…> * Center for Internet Security Controls Resources <https://links-2.govdelivery.com/CL0/https:%2F%2Fwww.cisecurity.org%2Fcontro…> * Ohio Persistent Cyber Improvement (O-PCI) <https://links-2.govdelivery.com/CL0/https:%2F%2Fwww.ohiocyberrangeinstitute…> Frank Hatfield CORSA Assistant Director fhatfield(a)ccao.org<mailto:fhatfield@ccao.org> 614-560-1474 614-220-0209 Fax www.corsa.org<https://urldefense.com/v3/__http:/www.corsa.org/__;!!Op5JcThCjWm-UA!zzz1QnD…> " The leader in providing Ohio Counties with exceptional value, service, and protection of assets." CONFIDENTIALITY NOTICE: This e-mail message (including any attachments) is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy this message and all attachments.

1 0

Maintenance tickets
by Jenny Phelps Sept. 15, 2025

Sept. 15, 2025

Are counties who have been using Facility Dude for maintenance tickets staying with Facility Dude or switching to another platform? If you're continuing to use Facility Dude, are you upgrading? Why/why not? If anybody has switched to another platform, what information can you provide on that, please? Thank you, Jenny Phelps Loss Control Program Coordinator office: 419-774-6318 fax: 419-774-3581 -- CONFIDENTIAL: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify the system manager. This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.

4 4

Severe Weather: Before - During - After
by Jim Hale Aug. 4, 2025

Aug. 4, 2025

The attached Tornado and Thunderstorm materials address severe weather both before and during the storm, but what about after? The attached Severe Weather Toolkit from the Ohio Department of Insurance gives a good overview of what to do after the storm. Along with the information in the toolkit, here is some specific guidance: * Promptly submit a claim as soon as possible after the event, same day if possible * Do not dispose of damaged equipment/machinery * Keep all lightning/surge damaged equipment * Also keep all non-lighting damage items/equipment (e.g., tree limb falling, hail damage, wind, etc.) James Hale, ARM-P, ARM-E Risk Control Consultant County Risk Sharing Authority 209 East State Street Columbus, OH 43215 614.246.1630 FAX 614.220.0209 " The leader in providing Ohio Counties with exceptional value, service, and protection of assets."

1 0

Best Practice Personnel Policy Manual Update
by Frank Hatfield Aug. 3, 2025

Aug. 3, 2025

Recently the CORSA Best Practice Personnel Policy Panel updated the CORSA Best Practices Manual which can be downloaded at www.corsa.org<http://www.corsa.org>. Attached please find correspondence that provides greater detail. As always, thank you for all your loss control efforts and please contact us with questions. Frank Hatfield CORSA Assistant Director fhatfield(a)ccao.org<mailto:fhatfield@ccao.org> 614-560-1474 614-220-0209 Fax www.corsa.org<https://urldefense.com/v3/__http:/www.corsa.org/__;!!Op5JcThCjWm-UA!zzz1QnD…> " The leader in providing Ohio Counties with exceptional value, service, and protection of assets." CONFIDENTIALITY NOTICE: This e-mail message (including any attachments) is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy this message and all attachments.

1 0

Auditor of State Training for the Payment Redirect Checklist
by Jim Hale July 30, 2025

July 30, 2025

The Auditor of State’s Office is offering training for their Payment Redirect Checklist (attached) To register for the training go to: https://event.on24.com/wcc/r/5013083/F0188FE5E9976C8C3B737110A6136A1A Spear Phishing and Check Interception - event.on24.com<https://event.on24.com/wcc/r/5013083/F0188FE5E9976C8C3B737110A6136A1A> Friday, July 11, 2025 at 4:12 PM Eastern Daylight Time. event.on24.com Your attendees can register through this link, or you can email AOSTraining(a)ohioauditor.gov<mailto:AOSTraining@ohioauditor.gov> to inquire about group viewing. Attendance will count toward the training portion for this year's Loss Control Incentive Program Bonus. Ohio governments are falling victim to Payment “Re-Direct” Schemes and business email compromise (BEC) schemes. This is a type of spear phishing attack that has the objective of “re-directing” money to a bad actor, a cybercriminal pretending to be a vendor or employee of the government and then re-directing funds into fraudulent accounts. James Hale, ARM-P, ARM-E Risk Control Consultant County Risk Sharing Authority 209 East State Street Columbus, OH 43215 614.246.1630 FAX 614.220.0209 “ The leader in providing Ohio Counties with exceptional value, service, and protection of assets.”

1 0

Payment Re-Direct and Business Email Compromise Schemes
by Jim Hale July 8, 2025

July 8, 2025

The Auditor of State's Office has observed an increase in Ohio governments falling victim to Payment "Re-Direct" Schemes and business email compromise (BEC) schemes. This is a type of spear phishing attack that has the objective of "re-directing" money to a bad actor, a cybercriminal pretending to be a vendor or employee of the government and then re-directing funds into fraudulent accounts. Last year the Auditor of State published the attached Bulletin detailing the risk and offering excellent guidance on preventing payment re-direct and business email compromise. This bulletin and the Payment Redirect Checklist (also attached) are valuable tools in combating these issues. James Hale, ARM-P, ARM-E Risk Control Consultant County Risk Sharing Authority 209 East State Street Columbus, OH 43215 614.246.1630 FAX 614.220.0209 " The leader in providing Ohio Counties with exceptional value, service, and protection of assets."

1 0

Vehicle Fringe Benefits - Take home vehicle
by Jonette Jackson June 27, 2025

June 27, 2025

Hello, One of the County Departments is asking about assigned take-home vehicles and the fringe benefits that the employees would be entitled to with the decision. Lorain County has language for taking a vehicle overnight, but not for long-term assignment, nor any language for fringe benefits. If your county has a policy that addresses the fringe benefits for the employee who takes a vehicle home every night, please share. Thank you, Jonette Jackson Safety Risk Administrator Lorain County Board of Commissioners Human Resources Department 226 Middle Avenue, 4th Floor Elyria, OH 44035 (440) 329-5227 Phone jjackson(a)loraincounty.us<mailto:jjackson@loraincounty.us> www.loraincountyohio.gov<http://www.loraincountyohio.gov> www.loraincountyohio.gov/jobs<http://www.loraincountyohio.gov/jobs>

4 4

HAPPY JULY 4TH: OPERATE YOUR CAR AND COMPUTER NETWORK SAFELY
by Alison Redmond June 26, 2025

June 26, 2025

Attached please find information regarding mitigating mitigation of risk on the roadway and your computer networks. Have a Happy and Safe 4th of July. Frank Hatfield CORSA Assistant Director fhatfield(a)ccao.org<mailto:fhatfield@ccao.org> 614-560-1474 614-220-0209 Fax www.corsa.org<https://urldefense.com/v3/__http:/www.corsa.org/__;!!Op5JcThCjWm-UA!zzz1QnD…> " The leader in providing Ohio Counties with exceptional value, service, and protection of assets." CONFIDENTIALITY NOTICE: This e-mail message (including any attachments) is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy this message and all attachments.

1 0

Road and Cyber Summer Bulletin
by Alison Redmond May 22, 2025

May 22, 2025

Please read attached bulletin. Ali Redmond Membership Services Manager CORSA 209 E. State Street Columbus, Ohio 43215 614-220-7991 (o) 614-359-2436 (c) [cid:5051dbed-0126-4581-9b4c-5a3bbe5dc19c]

1 0