- CORSA-broadcast - lists.corsa.org

Uniform Allowance Policy
by Pamela S. Davis Oct. 3, 2024

Oct. 3, 2024

Does anyone have a policy regarding uniform allowance? Specifically indicating dollar amounts or # of shirts/pants permitted annually. Thanks! Pam Davis Human Resources Muskingum County 740-588-4371

1 0

2025 pay increases
by Michele Long Oct. 2, 2024

Oct. 2, 2024

Has anyone established pay increases for 2025 if so what are they. Guernsey County is thinking 4%. THANKS Michele Long, Clerk Guernsey County Commissioners 627 Wheeling Ave. Cambridge, OH 43725 Office - 740-432-9205 ********** Confidentiality Notice ********** This electronic transmission and any attached documents or other writings are confidential and are for the sole use of the intended recipient(s) identified above. This message may contain information that is privileged, confidential or otherwise protected from disclosure under applicable law. If the receiver of this information is not the intended recipient, or the employee, or agent responsible for delivering the information to the intended recipient, you are hereby notified that any use, reading, dissemination, distribution, copying or storage of this information is strictly prohibited. If you have received this information in error, please notify the sender by return email and delete the electronic transmission, including all attachments from your system. All electronic transmissions sent to and from this domain (guernseycounty.org) are archived and may be viewed by other parties than the intended recipients.

3 2

Driving Policy Language for Personal Vehicles
by Jonette Jackson Oct. 1, 2024

Oct. 1, 2024

Hello, Lorain County is asking if you would share your policy for County Employees who operate their personal vehicle on county Business. Thank you, Jonette Jackson Safety Risk Administrator Lorain County Board of Commissioners Human Resources Department 226 Middle Avenue, 4th Floor Elyria, OH 44035 (440) 329-5227 Phone jjackson(a)loraincounty.us<mailto:jjackson@loraincounty.us> www.loraincountyohio.gov<http://www.loraincountyohio.gov> www.loraincountyohio.gov/jobs<http://www.loraincountyohio.gov/jobs>

4 4

FW: PRIMA’s 2024 National Cyber Security Awareness Month resources - Week 1
by Jim Hale Oct. 1, 2024

Oct. 1, 2024

From: PRIMA <primacomm(a)primacentral.mmsend.com> On Behalf Of PRIMA Sent: Tuesday, October 1, 2024 11:06 AM To: Jim Hale <jhale(a)ccao.org> Subject: PRIMA’s 2024 National Cyber Security Awareness Month resources - Week 1 CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. [https://maassets.higherlogic.com/image/PRMA/PRM2417-NCSAM_24_Email_630_2916…] 2024 National Cyber Security Awareness Month Week 1 featured podcast Vulnerability Management and Updating Your Software Speaker: CJ Dietzman; CISSP, CISA Senior Vice President, Alliant Insurance Services, Inc. On this week's episode for National Cyber Security Awareness Month, CJ Dietzman explains the importance of updating your software and vulnerability management. Further, he shares how third parties can provide and manage software and systems for organizations. CJ discusses lessons learned from handling vendor and software issues. Listen now<http://www.mmsend56.com/link.cfm?r=hXPlZdzAL3Tu3eWB9PTj-w~~&pe=eE4pkx17KpvO…> [https://maassets.higherlogic.com/image/PRMA/Travelers250px_2916926.jpg] Additional resources from Travelers 5 Cyber Readiness Practices to Boost Your Cybersecurity [https://maassets.higherlogic.com/image/PRMA/Travelers_screenshot570px_copy_…]<http://www.mmsend56.com/link.cfm?r=hXPlZdzAL3Tu3eWB9PTj-w~~&pe=fFsJi-dYBWeQ…> Watch<http://www.mmsend56.com/link.cfm?r=hXPlZdzAL3Tu3eWB9PTj-w~~&pe=OVsT2cbnA6Su…> [https://maassets.higherlogic.com/image/PRMA/Alliant200_2916937.png] Additional resources from Alliant Data Breach Prevention: Your Comprehensive Guide In the modern digital era, data breaches have become an increasingly frequent threat to businesses of all sizes. If your company handles sensitive assets like customers' personally identifiable information (PII), protected health information (PHI), intellectual property or proprietary corporate data, you are at risk of a data breach. With technological advancements, cybercriminals are constantly devising new tactics to exploit vulnerabilities in company systems. The impact of a data breach can be catastrophic, ranging from financial losses, regulatory implications, and reputational damage. Therefore, it is crucial for businesses to proactively take measures to prevent data breaches from occurring and to mitigate the impact to the organization if they do occur. Read more<http://www.mmsend56.com/link.cfm?r=hXPlZdzAL3Tu3eWB9PTj-w~~&pe=Z4YP24Oh53wB…> The National Cyber Security Alliance (NCSA) and the U.S. Department of Homeland Security (DHS) designated October as National Cyber Security Awareness Month (NCSAM). NCSAM was designed to serve as a collaborative effort among federal, state and local governments as well as non-governmental organizations, to increase awareness regarding the significance of cyber security and provide the necessary resources to ensure people are safe and secure online. [Facebook]<http://www.mmsend56.com/link.cfm?r=hXPlZdzAL3Tu3eWB9PTj-w~~&pe=r3de139dhpAS…> [Twitter]<http://www.mmsend56.com/link.cfm?r=hXPlZdzAL3Tu3eWB9PTj-w~~&pe=JEF9ASeWKzLx…> [Linkedin]<http://www.mmsend56.com/link.cfm?r=hXPlZdzAL3Tu3eWB9PTj-w~~&pe=Eu9qDnjQtUSr…> [YouTube]<http://www.mmsend56.com/link.cfm?r=hXPlZdzAL3Tu3eWB9PTj-w~~&pe=A0OHIH5IV5Jh…> [RSS]<http://www.mmsend56.com/link.cfm?r=hXPlZdzAL3Tu3eWB9PTj-w~~&pe=pkQ8btitHQRs…> Click here to unsubscribe.<http://www.mmsend56.com/link.cfm?r=hXPlZdzAL3Tu3eWB9PTj-w~~&pe=vVXod07-2JEC…> 700 S.Washington Street, Suite 218, Alexandria, VA 22314

1 0

Cybersecurity Awareness Month - Secure Our World - Week One - Use Strong Passwords
by Jim Hale Sept. 30, 2024

Sept. 30, 2024

Strengthen Your Passwords with Three Simple Tips: A strong password follows ALL THREE of these tips. 1. Make them long At least 16 characters—longer is stronger! 2. Make them random Two ways to do this are: Use a random string of mixed-case letters, numbers and symbols. For example: * cXmnZK65rf*&DaaD * Yuc8$RikA34%ZoPPao98t Another option is to create a memorable phrase of 4 – 7 unrelated words. This is called a “passphrase.” For example: * Good: HorsePurpleHatRun * Great: HorsePurpleHatRunBay * Amazing: Horse Purple Hat Run Bay Lifting Note: You can use spaces before or between words if you prefer! 3. Make them unique Use a different strong password for each account. For example: * Bank: k8dfh8c@Pfv0gB2 * Email account: legal tiny facility freehand probable enamel * Social media account: e246gs%mFs#3tv6 PRO TIP: USE A PASSWORD MANAGER It’s hard to remember all these strong passwords and we don’t want to save them in a file on a computer. Instead, use a password manager. For most people, generating and remembering long, random and unique passwords for every account is not possible. Rather than write them down, use a password manager! A password manager is an easy-to-use program that generates, stores and even fills in all your passwords. Password managers tell us when we have weak or re-used passwords and can generate strong passwords for us. They can also automatically fill logins into sites and apps as we move from one to another. When we use a password manager, we only need to remember one strong password—the one for the password manager itself. (Tip: Create a memorable long “passphrase” as described above.) There are many password managers to choose from. Some are free, like the built-in password managers in your web browser, and some cost money. Search a trusted source for “password managers” like Consumer Reports, which offers a selection of highly rated password managers. Read reviews to compare options and find a reputable program for you. When we use a password manager, we are much more likely to use a long, random and unique password on every site. And that makes it much harder for someone to steal our valuable information! PRO TIP: Check to see whether your email accounts, banks, healthcare providers and other important accounts enforce strong password requirements. If they let you use a short password or a dictionary word, ask them why. It’s your information they’re putting at risk! How often do I change my password? If your password is long, unique and complex, our recommendation is that you don’t need to ever change it unless you become aware that an unauthorized person is accessing that account, or the password was compromised in a data breach. This recommendation is backed up by the latest guidance from the National Institute of Standards and Technology<https://pages.nist.gov/800-63-3/sp800-63b.html>. For many years, cybersecurity experts told us to change our passwords every few months. However, this constant change isn’t helpful if your passwords are each long, unique and complex. In fact, if you change your passwords often, you risk reusing old passwords or falling into bad habits of creating similar or weak passwords. Stop Online Crime with Strong Passwords 0 YouTube link: https://youtu.be/FZoB7yUGh7Y Secure Our World Resources & Cybersecurity Awareness Month 2024 Toolkit https://www.cisa.gov/resources-tools/resources/secure-our-world-resources-c… James Hale, ARM-P, ARM-E Risk Control Consultant County Risk Sharing Authority 209 East State Street Columbus, OH 43215 614.246.1630 FAX 614.220.0209 “ The leader in providing Ohio Counties with exceptional value, service, and protection of assets.”

1 0

Cybersecurity Month & CORSA Cyber Reimbursement
by Frank Hatfield Sept. 30, 2024

Sept. 30, 2024

Tomorrow, October 1st, is the first day of cybersecurity month. Since 2004, the President of the United States and Congress have declared October to be Cybersecurity Awareness Month, time dedicated for the public and private sectors to work together to raise awareness about the importance of cybersecurity. As a CORSA member, and local government, you're very aware that the importance of cybersecurity has increased over the last two decades. Jim Hale, CORSA Loss Control Coordinator, will again this year issue cybersecurity newsletters throughout October. Also, if you haven't taken advantage of CORSA Cybersecurity Reimbursement Program this year, we encourage you to do so without delay. Attached is information on CORSA's 2024 program. As always, thank you for what you do for your County/Agency and CORSA. Be safe. Frank Hatfield CORSA Assistant Director fhatfield(a)ccao.org<mailto:fhatfield@ccao.org> 614-560-1474 614-220-0209 Fax www.corsa.org<https://urldefense.com/v3/__http:/www.corsa.org/__;!!Op5JcThCjWm-UA!zzz1QnD…> [cid:image001.png@01DB1306.97B4ED70] " The leader in providing Ohio Counties with exceptional value, service, and protection of assets." CONFIDENTIALITY NOTICE: This e-mail message (including any attachments) is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy this message and all attachments.

1 0

CyberOhio
by Frank Hatfield Sept. 5, 2024

Sept. 5, 2024

The County Commissioners Association "Counties Current" publication August 26, 2024, contained the story below with regard to Ohio's CyberOhio initiative to promote cybersecurity through state grants. Also, attached is more information on the program. Look for more information on cybersecurity from CORSA throughout October which is Cybersecurity Awareness Month. Local government cybersecurity grants available CyberOhio<https://cyber.ohio.gov/priorities/assisting-local-government-entities/assis…>, an initiative by the state to bolster cybersecurity in Ohio, has two grant opportunities for local governments open. First, the Cybersecurity Software and Services Grant<https://dam.assets.ohio.gov/image/upload/v1721418270/cyber.ohio.gov/ROUND%2…> is intended to assist local governments in acquiring security software and services. Examples include implementing multi-factor authentication, server protection programs, and more. Grants can be up to $20,000. The second program is the .gov Migration Grant<https://dam.assets.ohio.gov/image/upload/v1722015262/cyber.ohio.gov/Round_2…>. This grant program is intended to assist local governments transition their websites and emails to the ".gov" type. This domain type is only available to U.S.-based government entities, allowing users to have more confidence that they are receiving genuine information and that the emails they may receive from government entities are legitimate. Grants under this program may be up to $9,500. Applications for both programs are open until September 16. CCAO encourages counties to consider applying for these funds as the threat of cyber attacks will only increase going forward. Frank Hatfield CORSA Assistant Director fhatfield(a)ccao.org<mailto:fhatfield@ccao.org> 614-560-1474 614-220-0209 Fax www.corsa.org<https://urldefense.com/v3/__http:/www.corsa.org/__;!!Op5JcThCjWm-UA!zzz1QnD…> [cid:image001.png@01DAFF89.3C6ADE10] " The leader in providing Ohio Counties with exceptional value, service, and protection of assets." CONFIDENTIALITY NOTICE: This e-mail message (including any attachments) is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy this message and all attachments.

1 0

Happy Labor Day Weekend: Please be Safe on the Roadway & Stay Focused on Cybersecurity
by Frank Hatfield Aug. 30, 2024

Aug. 30, 2024

The unofficial end of summer is here. Labor Day weekend has arrived too soon for many, not soon enough for others. Please take a moment to plan for a safe holiday weekend on the road and cyber highway. Below are general tips to assist with your preparation, with links to more information. As always, feel free to contact Jim Hale or myself regarding CORSA loss control resources. We wish you, your peers, friends and family a happy and safe Labor Day weekend. Attackers strike the most during holidays and weekends when companies are vulnerable and under staffed. ⚠️ Attacks are more common during non-business hours, mostly due to less staff available to protect the company. ⚠️ Large, profitable companies tend to be the main targets but small businesses with less protection are also a target. ⚠️The attacks that occur during non-business hours take longer to investigate and resolve, which may slow response and notification. Action Items Protect your organization with these practices: ✅ Review cyber incident response plans, resiliency plans, and communications plans. ✅ Reiterate cybersecurity user awareness and training program tips that include guidance on how to report incidents. ✅ Tune endpoint protection, regularly update, and enable real-time detection for antivirus software on all hosts. ✅ Make (and test restore) an offline backup of your data. ✅ Confirm multi-factor authentication (MFA) is working as intended for all services possible. ✅ Confirm software and operating systems are up to date to download the latest security patches. ✅ Scan for open and unused ports and remove any application not deemed necessary for day-to-day operations. ✅ Add an email banner to emails received from outside your organization to warn employees. More Information 🔒 FBI - Ransomware Awareness for Holidays and Weekends https://www.cisa.gov/uscert/ncas/alerts/aa21-243a 🔒 Why do cyber-attacks increase during holidays? - Security Boulevard https://securityboulevard.com/2022/12/why-do-cyber-attacks-increase-during-… https://www.linkedin.com/pulse/prepare-now-holiday-weekend-cyberattacks-ris… National Safety Council urges all drivers to share the road responsibly by following these safety tips during this Labor Day holiday weekend—and always: * Prepare before you go: Before hitting the road, make sure your car is safe for driving. Vehicle owners should check the oil, put air in the tires, and check for and repair open recalls. Visit ChecktoPrtect.org<https://c212.net/c/link/?t=0&l=en&o=3953261-1&h=181857447&u=https%3A%2F%2Fw…> to see if your vehicle has an open recall, and get it repaired for free. * Buckle up: Lack of seat belt use is a top cause of fatalities in crashes. Buckle up, while also making sure you have appropriate car seats installed correctly<https://c212.net/c/link/?t=0&l=en&o=3953261-1&h=3783644550&u=https%3A%2F%2F…>. * Designate a sober driver or arrange alternate transportation: Holidays are a cause for celebration, but alcohol is only one cause of impaired driving. Drugs, including opioids, marijuana and some over-the-counter medicines, can cause drowsiness, alter visual functions and affect mental judgment and motor skills. * Slow down: Speeding is a factor in more than a quarter of all traffic fatalities<https://c212.net/c/link/?t=0&l=en&o=3953261-1&h=795979627&u=https%3A%2F%2Fi…>. Drive the speed limit or below it if conditions dictate. Be sure to pay close attention to those walking and biking in order to keep all road users safe. * Drive distraction-free: Thousands have died in car crashes involving cell phone use. Put your phones away and #JustDrive. * Look before you lock: Pediatric vehicular heatstroke is still the leading cause of non-crash motor vehicle-related fatality for children. So far in 2023, 19 children in the U.S. are reported to have died<https://c212.net/c/link/?t=0&l=en&o=3953261-1&h=1235261407&u=https%3A%2F%2F…> because of this completely preventable tragedy. Always check your back seat for children or animals when you reach your destination. https://www.prnewswire.com/news-releases/national-safety-council-calls-for-… Frank Hatfield CORSA Assistant Director fhatfield(a)ccao.org<mailto:fhatfield@ccao.org> 614-560-1474 614-220-0209 Fax www.corsa.org<https://urldefense.com/v3/__http:/www.corsa.org/__;!!Op5JcThCjWm-UA!zzz1QnD…> [cid:image001.png@01DAFABC.12CE8150] “ The leader in providing Ohio Counties with exceptional value, service, and protection of assets.” CONFIDENTIALITY NOTICE: This e-mail message (including any attachments) is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy this message and all attachments.

1 0

Winter is Coming! (And Not Just in Westeros)
by Jim Hale Aug. 27, 2024

Aug. 27, 2024

Every year CORSA members report losses, great and small, from the effects of cold , snowy, and wet weather. Bursting pipes, slips, and falls and just general hazards caused by winter weather. In fact, losses occurring in the winter months accounts for much of our yearly property losses as a pool. Please take a look at the attached materials and the following articles for assistance on getting your buildings ready for the winter season: https://www.buildings.com/building-systems-om/article/33037106/what-commerc… https://www.therushcompanies.com/blog/6-tips-prepping-your-commercial-prope… https://www.leecompany.com/resources/winterizing-your-commercial-property-p… https://ibhs.org/commercial/ James Hale, ARM-P, ARM-E Risk Control Consultant County Risk Sharing Authority 209 East State Street Columbus, OH 43215 614.246.1630 FAX 614.220.0209 " The leader in providing Ohio Counties with exceptional value, service, and protection of assets."

1 0

Cybersecurity Reimbursement
by Frank Hatfield July 11, 2024

July 11, 2024

Cyberattacks have become increasingly common in recent years. In fact, studies conducted by the University of Maryland's A. James Clark School of Engineering found that more than 2,200 cyberattacks occur each day. When broken down, that means someone becomes a victim of a data breach, phishing attack, or other cybercrime every 39 seconds. Source: https://explodingtopics.com/blog/cybersecurity-stats CORSA is committed to providing ongoing risk management services, including cybersecurity, to members. For 2024 CORSA allotted $465,000 ($5,500 maximum per member) to reimburse members for cybersecurity expenditures during calendar year 2024. Thank you to those members who have taken advantage of this program. If you haven't yet submitted for a cybersecurity reimbursement, we encourage you to submit a reimbursement request while funds remain available. More information on this program as well as a reimbursement application is attached. Feel free to contact me with questions or if you need anything. Thank you. Frank Hatfield CORSA Assistant Director fhatfield(a)ccao.org<mailto:fhatfield@ccao.org> 614-560-1474 614-220-0209 Fax www.corsa.org<https://urldefense.com/v3/__http:/www.corsa.org/__;!!Op5JcThCjWm-UA!zzz1QnD…> [cid:image001.png@01DAD39B.0E6F55A0] " The leader in providing Ohio Counties with exceptional value, service, and protection of assets." CONFIDENTIALITY NOTICE: This e-mail message (including any attachments) is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy this message and all attachments.

1 0