- CORSA-broadcast - lists.corsa.org

October is National Cybersecurity Awareness Month
by Tricia Callihan Sept. 25, 2020

Sept. 25, 2020

Now in its 17th year, National Cybersecurity Awareness Month (NCSAM) continues to raise awareness about the importance of cybersecurity across our Nation, ensuring that all Americans have the resources they need to be safer and more secure online. In honor of NCSAM, we would like to remind CORSA members that several cybersecurity resources are available to at no cost to the member such as CORSA U training classes and a model cybersecurity policy and protocol. Please see attached memo for more information. Tricia Callihan CORSA Program Assistant Direct dial - 614-220-7993 Fax - 614-220-0209 "The leader in providing Ohio Counties with exceptional value, services, and protection of assets." From: Frank Hatfield <fhatfield(a)ccao.org> Sent: Friday, September 25, 2020 8:09 AM To: Tricia Callihan <tcallihan(a)ccao.org> Cc: Jim Hale <jhale(a)ccao.org> Subject: Cybersecurity Memo Tricia, Please email to our county contacts, agents, and broadcast email. Jim, Thank for all your work on this. Frank Hatfield CORSA Risk Manager fhatfield(a)ccao.org<mailto:fhatfield@ccao.org> 614-560-1474 614-220-0209 Fax www.corsa.org<http://www.corsa.org/> " The leader in providing Ohio Counties with exceptional value, service, and protection of assets." CONFIDENTIALITY NOTICE: This e-mail message (including any attachments) is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy this message and all attachments.

1 0

CORSA 2020 Defensive Driving Refresher Training Webinars
by Tricia Callihan Sept. 2, 2020

Sept. 2, 2020

CORSA will be hosting Defensive Driver Training Refresher Webinars on four dates this fall. They will be taught by Tom Carabin and Ginny Shrimplin and run about 1.5 hours. Attached is a flyer with the dates and webinar links for registration. Hope you can all join. Tricia Callihan CORSA Program Assistant Direct dial - 614-220-7993 Fax - 614-220-0209 "The leader in providing Ohio Counties with exceptional value, services, and protection of assets."

1 0

Spoofed emails from CCAO email addresses
by Tricia Callihan Sept. 1, 2020

Sept. 1, 2020

To: CORSA Members, Agents, Broadcast Email Members, Vendors, and Staff: We have learned that several people recently received spoofed emails that appear to come from CCAO email addresses. Spoofed emails try to get recipients to click on malicious links or attachments. Our Network Administrator verified that these spoofed emails are not coming from our server or Broadcast system. Our system is secure. Continue to closely review every incoming email. If it looks strange - don't click, delete it! Call the CORSA representative that is listed as the sender if you are uncertain about the legitimacy of the email. Don't be fooled if the from line contains what appears to be a "CCAO.org" address. Generally, the last email address contained in the email from line is the actual email address. "Email addresses" that appear before the final email address are bogus. Bad actors will often insert an accurate email address before the actual originating email address. For example, a from line that contains the following is a spoofed email: Tricia Callihan <tcallihan(a)ccao.org<mailto:tcallihan@ccao.org>> <morishima.kunio(a)kanokom.com<mailto:morishima.kunio@kanokom.com>>. Below is a screenshot of a recent spoofed email: [cid:image001.jpg@01D67D47.AE9070E0] The spoofed emails were generated from external IP address(es) and made it past some recipient's anti-phishing (spam) filter. Unfortunately, there is no way to avoid external spoof emails; however, we have placed spoof emails originating from external IP address(es) on a blacklist to prevent those IP addresses from sending spoofed emails that appear to come from a ccao.org email address. If you receive other spoofed emails, please let us know and we will blacklist those as well. Please consult your IT department/provider to assess your inbound anti-phishing (spam) protection and other cybersecurity measures that may be necessary. We will continue to monitor this situation and be in contact as developments warrant. As always, thank you for your continued vigilance monitoring emails as part of your cybersecurity efforts. Feel free to contact me with questions or if you would like to discuss this matter.

1 0

Spoof Email from Tricia Callihan
by Tricia Callihan Aug. 24, 2020

Aug. 24, 2020

To: CORSA Broadcast Members From: Frank Hatfield Re: Spoof email We have learned that two emails, one with the subject "BWC 2-hour Safety Training Requirement" and one with no subject, have been received by some of our members. The messages appear to come from Tricia Callihan, but the email address is not hers - Tricia's email is TCallihan(a)ccao.org<mailto:TCallihan@ccao.org>. These messages are not from CCAO - please delete them, and don't click on any links or attachments. Notify your IT Department or provider to see if they have any further directions. The messages did not come from the CCAO email system. Our system is secure and has not been impacted. Continue to review every incoming email. If it looks strange - don't click, delete it! Please give one of us a call if you have any questions. Thanks, Frank

1 0

Hiring Process
by Julia Armstrong July 22, 2020

July 22, 2020

Good Morning, I am curious if anyone has a written process or policy they follow for hiring (vacancy all the way to start date)? If so, would you mind sharing this document? Thank you! Julia Armstrong Huron County Human Resource/Loss Prevention Assistant 12 E. Main St., Suite 513 Norwalk, OH 44857 Office: (419) 668-6262 Fax: (419) 668-2095 Email: hrassist(a)hccommissioners.com<mailto:hrassist@hccommissioners.com> Please keep in mind these emails are published for the entire Huron County employee population and may reference general benefits and/or policies, please review your specific contract/policy if applicable. CONFIDENTIALITY NOTICE: Portions of this message may be confidential under an exemption to Ohio's public records law or under a legal privilege. The information transmitted (including any attachments) is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any unauthorized review, use, disclosure, distribution or transmission is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy this message and all attachments.

2 1

Human Resources
by Miranda Hanselman July 7, 2020

July 7, 2020

Good afternoon, we are curious how other counties operate and handle Human Resources. As a smaller county we do not currently have a designated HR department, the duties are split amongst various employees and departments. 1. Does your county have a Human Resources department or employee(s)? 2. Does this department fall under the Commissioners' or the Auditor? 3. How many employees are in Human Resources? A. Title & Wage? Thank you, Miranda Hanselman Brown County Commissioners Asst. Clerk, Safety Loss Coordinator Brown County Land Reutilization Corp. Secretary & Treasurer 800 Mt. Orab Pike, Suite 101 Georgetown, Ohio 45121 (937) 378-3956

11 10

Re: [CORSA-broadcast] Early Incentive Retirement Plans
by Nancy Ostrander July 7, 2020

July 7, 2020

Hello Everyone, Thank you to all that have responded lately to Erie County's requests for info/sample policies, and in particular one of our most recent requests re: early incentive retirement plans. In kind, please see attached two plans recently authorized by our Commissioners. As you can imagine, they have resulted in quite a buzz over here. Feel free to contact me if you have any questions. Take care and stay well, Nancy Nancy A. Ostrander, MLIS, CLRP, SHRM-SCP, SPHR Director, Human Resources Board of Erie County Commissioners nostrander(a)eriecounty.oh.gov<mailto:nostrander@eriecounty.oh.gov> 2900 Columbus Ave., Sandusky, OH 44870 Ph: (419) 627-7662 Fax: (419) 627-7599 Erie County Department of Human Resources * Personnel Administration * Risk Management * Workers' Compensation * Benefits Administration * Wellness * CONFIDENTIALITY NOTICE: The information transmitted (including any attachments) is intended only for the person or entity to which it is addressed and may contain confidential and/or Protected Health Information (PHI) which is personal information about an individual's health care. Any unauthorized review, use, disclosure, distribution or transmission of the PHI without the individual's consent is strictly prohibited and may subject you to penalties under federal and state law. If you are not the intended recipient, please immediately contact the sender by reply e-mail and destroy this message and all attachments.

1 0

Teleworking Policy
by Spencer, Susan July 7, 2020

July 7, 2020

Warren County is exploring the option of a Teleworking Policy for departments to use for the appropriate personnel for non-pandemic/non-emergency situations. Do other counties have a permanent policy for teleworking? How does it work and how often do you use it? We have a committee working on this idea and would like any feedback or sample policies that are being used. Thank you for your feedback, Sue Spencer, HR Manager Warren County

4 3

Re: [CORSA-broadcast] Human Resources
by Laura Murphy July 1, 2020

July 1, 2020

Good Morning- 1. Butler County currently has a Human Resources Department (which is still sometimes referred to as the Personnel Department) 2. Our Department falls under the Board of County Commissioners 3. We currently have 8 FTE positions, which organizationally report to the Human Resources Director. The positions and pay are as follows: Human Resources Director $44.10 (2.7 years with County) HR Officer III $40.90 (25 years with County) HR Officer II $31.39 (17 years with County) HR Administrative Support Specialist $20.52 ( 2.5 years with County) Wellness Coordinator $22.56 (11 years with County) Safety Director $40.90 (16 years with County) Lead Mail Clerk $18.75 -reports to Safety Director (17.5 years with the County) Mail Clerk-$13.37 (reports to Safety Director (1 year with the County) Our Department manages the County Wide Health Benefits (we are self-insured for medical/rx), Workers Compensation and General Liability Insurance matters. We handle hiring, firing, discipline, compensation plan, labor negotiations, classification plan, personnel policies and other general HR matters for all of the Commissioner Departments. We also provide general HR support to all County offices and agencies upon request. Given the number of employees we serve, and the scope of duties and responsibilities of our Department, we are looking to grow our staff to 10 FTEs in 2021 by adding a Benefits/Risk Manager position and HR Officer I position. Thank you, enjoy your holiday weekend! Laura This e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain private, confidential, and/or privileged information. If you are not the intended recipient, employee, or agent responsible for receiving this message, please contact the sender by reply e-mail and destroy all copies of the original e-mail message. Consistent with Butler County's public records policies, this email and attachments and any replies thereto may constitute a public record and subject to public record disclosure. >>> From: Stacy Wilson <swilson(a)senecacountyohio.gov> To:CORSA Broadcast Email <corsa-broadcast(a)corsa.org> Date: 7/1/2020 11:10 AM Subject: Re: [CORSA-broadcast] Human Resources See below. Stacy Wilson County Administrator Seneca County Board of Commissioners 111 Madison St. Tiffin, OH 44883 419-447-4550 ext 103 www.senecacountyohio.gov From: CORSA-broadcast <corsa-broadcast-bounces(a)corsa.org>On Behalf Of Miranda Hanselman Sent: Monday, June 29, 2020 3:20 PM To: corsa-broadcast(a)corsa.org Subject: [CORSA-broadcast] Human Resources Good afternoon, we are curious how other counties operate and handle Human Resources. As a smaller county we do not currently have a designated HR department, the duties are split amongst various employees and departments. Does your county have a Human Resources department or employee(s)?We currently do not, but we are actively working on developing a plan to implement a new department. We had a consultant come in and do an evaluation of each department to determine our vulnerability in regards to HR. Does this department fall under the Commissioners’ or the Auditor?We intend to have the HR department under the Commissioners How many employees are in Human Resources?We are looking at hiring 1 full time director and allow that person to determine the needs and staff requirement. (Within reason) Title & Wage?We are still working on the wage. Thank you, Miranda Hanselman Brown County Commissioners Asst. Clerk, Safety Loss Coordinator Brown County Land Reutilization Corp. Secretary & Treasurer 800 Mt. Orab Pike, Suite 101 Georgetown, Ohio 45121 (937) 378-3956

1 0

Re: [CORSA-broadcast] Teleworking Policy
by Nancy Ostrander June 29, 2020

June 29, 2020

Good morning everyone, Our Fiscal Administrator Hank Solowiej has asked us to reach out to other Counties to see if any of you have developed/implemented a teleworking policy. Erie County, authorized teleworking, albeit without a formal policy, while we remained closed to the public. We are re-opening to the public on July 1st and are considering implementing a formal, temporary teleworking policy through the end of the year. Any samples you are willing to share would be appreciated. Thank you. Stay safe, Nancy Nancy A. Ostrander, MLIS, CLRP, SHRM-SCP, SPHR Director, Human Resources Board of Erie County Commissioners nostrander(a)eriecounty.oh.gov<mailto:nostrander@eriecounty.oh.gov> 2900 Columbus Ave., Sandusky, OH 44870 Ph: (419) 627-7662 Fax: (419) 627-7599 Erie County Department of Human Resources * Personnel Administration * Risk Management * Workers' Compensation * Benefits Administration * Wellness * CONFIDENTIALITY NOTICE: The information transmitted (including any attachments) is intended only for the person or entity to which it is addressed and may contain confidential and/or Protected Health Information (PHI) which is personal information about an individual’s health care. Any unauthorized review, use, disclosure, distribution or transmission of the PHI without the individual’s consent is strictly prohibited and may subject you to penalties under federal and state law. If you are not the intended recipient, please immediately contact the sender by reply e-mail and destroy this message and all attachments.

7 6