text:
School of Risk Control Excellence. Technology. Privacy and Computer Network Security Risks
- Diana Gray
- 3 years ago
- Views:
1 Technology Privacy and Computer
2 Learning Objectives At the end of this class, participants should be able to: identify most common network security and privacy liability risks facing businesses today. explain risk control techniques appropriate for these risks. discuss current insurance policy coverages and exclusions associated with these risks The information, samples and suggestions presented in this document have been developed from sources believed to be reliable, but they should not be construed as legal advice. CNA accepts no legal responsibility for the correctness or completeness of this material or its application to specific factual situations. Consult competent legal counsel and/or other appropriate business advisors before using this material or deciding how to proceed in any specific situation. This document is for illustrative purposes only and is not a contract. Only an insurance policy can provide actual terms, coverages, amounts, conditions and exclusions. Copyright 2007 Continental Casualty Company. CNA is a service mark registered with the United States Patent and Trademark Office. All rights reserved. 2
3 Threats to Information Security A shift in planning assumptions Financial Loss The risks, liabilities and solutions Methods associated of Attack: with electronic processes and interactions Denial arising of Service from business Information activities Warfarethat ultimately Loss affect of an Critical entity s value. Infrastructure Internet Terrorism Source: Theft 2002 of Information AIG ebrs Cyber Crime Fraud Corruption of Data Malicious Hacking Insider Exploitation Vandalism Experimentation Probability of Event 3
4 Information Risks Information risks include threats to: information technology systems intangible property handled by them and the consequences of failure of these systems. 4
5 Information Risks (continued) 3rd party risks - Your responsibility to others: Liability Privacy Injury Liability unauthorized disclosure of sensitive or nonpublic private information. Errors and Omissions data entry clerks, system operators, and programmers may make errors which contribute directly or indirectly to security breaches. Network Security breach of others confidential information, inability to access/use, infecting others, damage to others information, information corruption/ reliability. Content Liability - you publish something disparaging or infringing e.g., plagiarizing content, erroneous advice. 5
6 Information Risks (continued) Exposures to loss - 1 st party risks: What can happen to you: Loss of data cost to recreate data and restore network. Loss of business income - loss of income and extra expenses associated with containing damage, stopping attacks and implementing work-arounds. Electronic theft of intangible property or system resources. Extortion cost associated with responding to demands by those threatening to damage or disrupt network or release sensitive or private non-public information harvested from your network. 6
7 Information Risks (continued) Hazards which cause these types of losses: Virus/Malicious code Denial of service attacks Hacker attacks / unauthorized access Malicious Hardware Physical theft of device / media Accidental release Rogue employees Social engineering 7
8 Information Risks (continued) Hazards - Virus/Malicious Code Virus - code segment that inserts itself into a program and uses that program's resources to reproduce and spread itself. Worms - self-contained, self-replicating program - takes advantage of known vulnerabilities and scans network for other vulnerable machines. Trojan Horses - non-replicating programs that appear to be useful, but actually have a hidden malicious purpose. 8
9 Information Risks (continued) Hazards - Virus/Malicious Code Virus/Malicious Code can be utilized for a variety of malicious purposes: Forwarding personal information Wiping out data Installing backdoors Performing Denial of Service Attacks 9
10 Information Risks (continued) Hazards Denial of Service Attacks Denial of Service Attacks (DoS) - an attacker attempts to prevent legitimate users from accessing information or services. The most common type of DoS attack occurs when an attacker floods a network with information:» URL requests» Spam messages Distributed Denial of Service Attack (DDoS) attacker uses backdoors installed on the systems of others to perform a coordinated attack against a target utilizing these infected machines. 10
11 Information Risks (continued) 11
12 Information Risks (continued) Hazards Hack Computer-based intrusion Hackers break into computers without authorization.» Can include both insiders and outsiders.» Malicious activities can include theft of information, destruction of data, sabotage.» One of the leading causes of privacy breaches. 12
13 Information Risks (continued) Hazards Hardware Hacks & Malicious Hardware Card Skimmers Fare cards RFID Virus Infected Hardware Attacks on hardware and embedded systems 13
14 Information Risks (continued) Hazards Physical Theft of Device/Media Physical theft of desktop PCs, laptops, PDAs, tapes, disks, USB drives, other devices, and media storing data create significant risks to that data.» Primary risk is that unauthorized parties will have access to sensitive or non-public private information stored on the device or media. 14
15 Information Risks (continued) Hazards Accidental Release Accidental release of sensitive or non-public / private information can occur several ways:» accidentally released in electronic form via internet, Web site or .» equipment or media is discarded that has not been sanitized. 15
16 Information Risks (continued) Hazards Rogue Employees Unauthorized access to or unauthorized use of information and systems by employees can result in: compromise of sensitive or private non-public information acts of sabotage» planting malicious code, such as logic bombs that destroy programs or data.» compromising the integrity of, or deleting data. 16
17 Information Risks (continued) Hazards Social Engineering Social Engineering techniques can be used to manipulate people into performing actions or divulging confidential information i.e. tricking an individual into revealing his or her password Pre-texting Phishing, Spear Phishing and Whaling Trojan horse Quid pro quo 17
18 Privacy Liability Exposure Number of ID theft/privacy breaches (Feb 05 thru Feb 07) 1 Which industries get hit the most? Technology? Government? Health Care? Data/Info Services? Retail? FI/Banking? Education? Telecoms/Media? Industrial/Manf.? Incidents 354 Frequency Education 33% Government 24% Health Care 11% FI/Banking 8% Retail 5% Insurance 5% Industrial/ Manf. 3% Data/Info Srvcs 2% Telecom/Media 2% Individuals exposed ~102.1MM Severity (# of Indiv. exposed) FI/Banking 48% Government 34% Retail 4% Education 4% Health Care 2% Insurance 2% Data/Info Svc 2% Telecom/Media 1% Industrial/Manf. 1% 18
19 Privacy Liability Exposure (continued) Most likely cause of compromise Accidental Release/Exposure Rogue Employee Physic Theft of device/medial Lost media Hacking Social Engineering Incidents 354 Frequency Phys. Theft 36% Hacking 26% Accidental 20% Lost media 11% Employee act 6% Social Eng. 1% Individuals exposed ~102.1MM Severity (# of Indiv. exposed) Hacking 47% Phys. Theft 37% Lost media 11% Employee act 3% Accidental 2% Social Eng. <1% 19
20 Some industry specific considerations Increasingly, Protected Health Information (PHI) theft Healthcare is linked to benefits and treatment fraud 2 Breaches by 3rd parties account for between 30 and 40% of all breaches. 3 Custody of patient financial info Not just PHI/HIPAA related Custody of other s IP; drug discovery, clinical trials, informatics based research Manufacturing Network disruption/corruption impacts deliveries and customers ability to make money Similar first party Business Income impact Custody of other s trade secret ( e.g. proprietary design, process) Retail Custody of credit card & transaction info. FACTA/other regulatory exposure Reliance on network for inventory optimization & Just in Time supply Accountants Custody of client private info (NPI) Custody of corporate client financial info, Custody of others trade secret ( e.g. due diligence for M&A) 20
21 Legislative and Regulatory Impact on Privacy Exposures And what about regulatory impact? HIPAA Breach Notification Laws GLBA FACTA State Merchant Laws FTC enforcement actions 21
22 Legislative and Regulatory Impact on Privacy Exposures HHS Office of Civil Rights (OCR) statistics on HIPAA Privacy enforcement actions 4 And HHS has engaged Price Waterhouse Coopers to conduct surprise audits 5 22
23 Regulatory enforcement trend is toward proactive investigations even without a breach or complaint Healthcare organizations feeling cyberattacks growing The other pressure: The surprise HIPAA security audit from the feds By Ellen Messmer, NetworkWorld.com, 02/27/2008 Accessed 29 April, The HIPAA surprise audit the specter of government regulatory probes is looming relating to the federal Security and Privacy Rules promulgated under HIPAA. The U.S. Department of Health and Human Services (HHS), which oversees HIPAA compliance, has contracted with the firm PricewaterhouseCoopers (PWC) to conduct surprise audits of hospitals this year, says Gartner analyst Barry Runyon. It s complaint-driven, says Runyon, noting that Tony Trenkle, director of the Centers for Medicare & Medicaid Services at HHS, last month publicly said the first 10 or so reviews will be at hospitals where CMS received complaints about security. In visiting the healthcare organization, the government regulatory probe will focus on security risks associated with remote access to data and portable storage concerns, with security managers expected to answer a lot of questions. CMS plans to publish the results of these audits on its Web site but not the organization s name, unless it uncovers major lapses, which could result in fines or other penalties as defined under the HIPAA guidelines. Last month, Atlanta s Piedmont Hospital was revealed by HHS to be the first unannounced HIPAA security audit. 23
24 States are enacting new laws 6 If you have a breach, the law in 45 States now requires you to notify affected parties. IMPORTANT TO NOTE: If affected individuals reside in other states or countries, you comply with the law where they reside. Therefore, the law in numerous jurisdictions may apply. Some laws establish a deadline for notification: e.g., FL requires notice within 45 days of breach, or as quickly as 10 days if the breach involves a contractor/vendor with custody of another business entity s data. Some laws, e.g. TX and WY, require you to notify even if the data was encrypted. Some laws, e.g. CA, give affected parties a right of private action. In some states, they can even recover attorneys fees. This represents a statutory exposure to class action litigation. 24
25 25 States also now have Merchant laws 7 CA, DE, FL, GA, IL, IA, KA, MD, MA, MI, MN, NV, OH, OR, PA, RI, TN, VA, DC, WA, WI Some of these laws ( e.g. CA & 1725): Restrict what information can be collected at point of sale/return in conjunction with a credit card transaction Restrict when you can require a credit card in conjunction with other transactions ( e.g. not allowed as condition for acceptance of check payment) Provide statutory damages for violation ( e.g. up to $1000 each instance) Provide for recovery of attorney s fees; another statutory exposure to class action litigation 25
26 FTC enforcement is on the rise too 8 Since 2005, the FTC has settled 12 cases against companies for issues ranging from failure to safeguard private information to failure to comply with their own privacy policies. Not even small do good firms escape the FTC s ever increasing reach. Here s the essence of the consent order -- - No future misrepresentation of protective safeguards Maintain comprehensive security program Design, implement and regularly test safeguards Controls on 3 rd party custodians includes contractual provisions Continuous future evaluation of exposures and adjustment of controls in response For 20 years : Initial and biennial assessments by qualified independent auditors FTC gets to approve audit firms and audit results For 5 years: obligation to self incriminate --provide FTC with documents ( e.g. internal memoranda) that could indicate potential non- compliance with the consent order For 3 years: furnish FTC with full details on assessments Upon FTC demand: report in detail on manner and form of compliance with consent order 26
27 Information Risk Control and Transfer Risk Assessment how do you evaluate your organizations specific exposures? What controls are appropriate? How do you handle the residual risk? 27
28 Exposure Assessment Privacy Do you know what sensitive or private information is in your custody along with: whose info it is, where it is, and how to contact individuals if their information is breached? It is important to clearly understand how sensitive information flows through your organization. 28
29 Exposure Assessment Privacy Inventory information that you have by type and location database servers, workstations, web servers, file cabinets, records storage facilities, etc. The following questions are useful in tracking the information flow: Who sends sensitive information to the organization? - customers? other businesses? credit card companies? banks? How is information received by your organization? Through your website? By ? Snail mail?, Fax?, Courier?, Carrier Pigeon?, Transmitted through point of sale devices? 29
30 Privacy Policy Privacy policies are needed for any organization handling Nonpublic Personal Information (NPI). Specific regulatory guidelines may apply: The Gramm-Leach-Bliley Act (GLBA) addresses consumer financial privacy Health Insurance Portability and Accountability Act (HIPAA) addresses the privacy of personal health care information Children s Online Privacy Protection Act (COPPA) applies to the online collection of information from persons under 13 years of age In general, a privacy policy details what information you gather from the persons or entities that you do business with, how it is protected and the situations in which this information may be shared with a third party. 30
31 Privacy Policy Implement, prominently disclose and honor a privacy policy following the general guidelines provided below: Design your policy with your customers in mind - be clear, direct and easy to understand. Say what you mean and mean what you say basis of FTC privacy actions has been that security measures were overstated. Treat these statements the same as advertising claims you make. Call customer attention to any changes in policy. Create a culture of compliance employee training Consult your attorney when drafting the specific language of your privacy policy. 31
32 Information Security Policy Information Security Policy A written statement designed to protect an organization s information assets against accidental or malicious disclosure, modification, or destruction. Security objectives of preserving the confidentiality, integrity and availability of the organization s information assets. Should address network access by employees, contractors or any other person with access to the company s network. Should include signed acknowledgement from all to which the policy applies. 32
33 Information Security Policy Information Security Policy - key elements Acceptable use policy for users - password management, guidelines for accessing unprotected programs or files, disciplinary actions for unauthorized and/or unacceptable behaviors, etc. Policy statement for privileged (administrative) users guidelines should be more robust for these users, covering additional areas, such as: authority and conditions for monitoring user activity (e.g., , network traffic, other actions) causing service disruptions using vulnerability testing tools accessing protected programs or files disciplinary actions for unauthorized and/or unacceptable behaviors 33
34 Information Security - responsibility and training A designated individual or individuals to tie individual security activities together consider training, CISSP and CISA certifications Train users on your organizations privacy and acceptable use policies annually. Provide annual security awareness training for all users. Information on how to recognize and report security threats. Periodic alerts and reminders to alert employees to new threats as they emerge and to help maintain vigilance in following procedures 34
35 Confidentiality Controls access controls Authenticate the identity of all users prior to allowing network access. Define access controls based on need to know or least privilege Sensitive data and NPI should be segregated from nonsensitive data, and access should be restricted based on sensitivity levels. Centrally administer access controls w/dual sign-off for changes Formal procedures to revoke user access privileges as soon as possible after a change i.e. unfriendly termination 35
36 Confidentiality Controls audit trails / chain of custody/encryption Audit trails -individual accountability, event reconstruction, intrusion detection to protect NPI Chain of custody documentation/accountability for information stored on all types of media Checks and balances should be in place to ensure that no person acting alone can export NPI NPI in transit, in storage and on removal media should be encrypted 36
37 Confidentiality Controls removable media Utilize content filtering to prevent export of NPI on media (e.g., ipods, PDAs, USB drives, etc.) For removable media exchanged with others (e.g., to data recovery centers, archival storage facilities, between locations, with vendors) also: identify and track know what sensitive info is on media or device use chain of custody tamper evident packaging distribute encryption keys separately 37
38 Confidentiality Controls information retention and destruction Non-public personal information and others' sensitive information should be retained only for as long as needed. Develop and implement specific information retention guidelines for the data handled, stored or transmitted by your organization. Use appropriate sanitization methods to remove information from media (and equipment) when no longer needed Degauss, destroy, irreversibly erase - DOD Standard M, NIST
39 Physical Security Physical access to information system components is one of the easiest ways for intruders to circumvent system protective measures. Social engineering techniques, such as posing as a contractor have been used to gain access Don t forget - Physical theft or loss of hardware, laptops or media is the leading cause of privacy breaches 39
40 Physical Security basic controls Physical access controls for - areas containing system hardware, wiring, telecom and data lines, back up media and source documents, etc. Use substantial floor-to-ceiling physical barriers Entry point controls include locks, guards, badges, electronic access controls, etc. Visitor controls sign in, badges, escort, challenge All desktops and PCs should be equipped with a time-out feature that locks the device and requires user logon and password entry after a period of inactivity. 40
41 Physical Security laptops Laptop Theft Prevention Laptop theft prevention policy Cable locks/ lockable docking stations Travel procedures» Never leave laptops in unattended conference rooms» No storage in automobile Don t forget limit/prohibit storage of sensitive data and/or use encryption for all portable devices and media 41
42 Physical Security Malicious Hardware -Card Skimmers Implement a daily documented inspection of all point of sale credit card readers for evidence of tampering that might compromise the security of data gathered by these devices. Include the following as a part of this inspection process: An inventory of all such devices at a given location (in store, at each gas pump, etc.). Acknowledgement by the employee conducting the inspection of the condition of each device at time of inspection Rotation of the responsibility for inspection to different employees as often as practical (limit the possibility of installation by an insider) Awareness training of personnel as to common indicators of tampering or covert installation of a card skimmer (additional hardware added near the legitimate card reader, miniature cameras to record pin number, etc.) A process to immediately remove devices which may have been compromised from service and elevate to the appropriate level of management for investigation. 42
43 Network Security Controls Virus Controls Perimeter Defenses Configuration Management Logging, monitoring and auditing Security Patch Management 43
44 Virus Control Antivirus Installed on all systems and up to date (automatic where possible). Executables and scripts filter, anti-virus scan and train employees not to open or download. Controls on shared drives and folders unprotected network shares = virus/worm propagation, DDoS. Disable, or create dedicated password protected directories Vendor neutral threat notification Use CERT National Cyber Alert System, SANS The Consensus Security Alert, or similar Removal of spyware and parasitic code run a legitimate product, periodic full system scan 44
45 Perimeter Defenses firewalls configuration Firewall Environment - A DMZ firewall configuration is recommended to segregate important data assets from unsecured networks such as the internet. Firewall Policy - written policy on the determination of firewall rule sets: should be updated as new vulnerabilities arise or network applications change default policy for inbound traffic =block all packets and connections unless the traffic type and connections have been specifically permitted factory default configurations should be avoided for all network security devices 45
46 Perimeter Defenses remote access All remote access should require user identification and authentication utilizing strong passwords. Encryption should be used to provide secure communication between the remote users and your networks. A Virtual Private Network (VPN) is the most common method to provide this protection. As part of your security policy, allow access only from other networks meeting your organization s security requirements. Using a VPN does not eliminate the need for normal precautions for offsite computers or networks. 46
47 Perimeter Defenses wireless access Perimeter Defenses wireless access 47
48 Perimeter Defenses wireless access security issues Radio links easily intercepted Original wireless standard (IEEE b and g) utilized Wired Equivalent Privacy (WEP) - an encryption protocol which is weak and susceptible to widely published attacks. Original wireless standards utilized access control and authentication methods vulnerable to man-in-the middle attacks, rouge Access Points and other compromises. 48
49 Perimeter Defenses wireless access controls Develop a formal security policy regarding use and deployment of wireless technology. Change WLAN access point Service Set Identifiers (SSIDs) and administrative passwords from factory defaults to unique values for your business. Disable access point SSID broadcast features and enable MAC address filtering. Ensure that Access Point access control and authentication schemes are used in which both the Station and Access Point are authenticated and that user access is blocked until authentication is successful. 49
50 Perimeter Defenses wireless access controls Do not depend on WEP (Wired Equivalent Privacy) as a primary means of securing wireless networks. At minimum utilize Wi-Fi Protected Access (WPA). A Virtual Private Network (VPN) is also an option for securing wireless links. Utilize VPNs for mobile user remote connections to corporate networks from public WLANs or hotspots. 50
51 Logging, monitoring and auditing For sensitive information, track and record the identity of those who access or have custody of this information; and record the time at which the access or custody takes place, including: Logging all attempted access to sensitive data Logging successful authentication to applications or databases housing sensitive data, along with as much detail of subsequent activity as possible (files accessed, deleting records or fields, printing reports, etc.) Maintaining these logs in a tamper evident file and limiting access to these files for separation of duties Reviewing logs daily for suspicious activity 51
52 Configuration Management key elements Configuration management policy and procedures Documentation of baseline configuration Configuration change control approval process, separation of duties Monitoring configuration changes Developers and Development tools should be not be allowed on production systems 52
53 Security Patch Management Subscribe to patch notification services from vendors for software utilized, review and evaluate at least weekly, preferably daily. Test and install critical security patches and upgrades within 24 hours of availability and no later than 30 days for all patches. Automatic update of applications whenever possible and appropriate. Verification of vulnerability remediation through network and host vulnerability scanning. 53
54 Disaster Recovery / Incident Response - IT continuity plan Key steps in developing an Information Technology continuity plan Conduct a business impact analysis -identify critical IT resources outage impacts, allowable outage times (critical IT resources within 24hrs) Identify preventive controls -back up power, fire suppression, redundant air conditioning, etc. The following preventive controls are considered key:» back up network data and configuration files daily» store back-up data in a secure and protected off-site location. Develop/document the recovery strategy. periodically test and maintain the plan. 54
55 Computer Security Incident Response Plan Implement a response plan that addresses direct (such as hacking), indirect (e.g. virus and malicious code) and denial of service attacks. Test these plans at least annually. The major phases in the incident response process are: Preparation response policy, reporting and communication procedures Detection and Analysis procedures for accurately detecting and assessing possible incidents, detecting when an incident has occurred, and determining the type, extent and magnitude of the problem. Steps for containment and eradication of the threat and recovery to normal operations 55
56 Privacy/Confidentiality Breach Response Plan Develop and implement a plan to respond privacy breaches. Test these plans at least annually. Basic elements of this plan should include: Designated senior member of your staff to coordinate and implement the response plan Provision for immediate investigation of the incident Steps which should be taken to contain the breach and close off existing vulnerabilities or threats to sensitive information Details of who should be notified in the event of a breach. May include law enforcement, insurance carrier, customers, credit bureaus, and other businesses that may be affected by the breach. 56
57 Legal and Contractual Controls Legal and Contractual Controls Contracts / Risk Transfer Editorial / Content Control 57
58 Contracts / Risk Transfer Require the following of any third party to which sensitive or non-public personal information is entrusted: Signed agreement regarding access to and appropriate use of your information and networks. Contractual compliance with your organization s information security standards. Compliance with contract requirements should be audited on a regular basis. 58
59 Contracts / Risk Transfer Assure that written contracts adequately define the parties' responsibilities in regard to insurance and indemnityappropriate protection for the information risks The expertise of attorney conversant with the legal issues relating to the subject matter should be utilized when drafting these agreements. Attention to 3 rd party controls is rapidly increasing in importance: 30-40% of all privacy breaches are attributed to 3 rd parties 3 Requirements of resent FTC consent orders include these requirements 59
60 Editorial / Content Control Web site and other electronic content should be reviewed by legal counsel prior to the public launch of new content to preclude claims of: Libel Slander Privacy invasion including false light Violation of privacy law or regulation Intellectual property rights infringement 60
61 Editorial / Content Control Linking - comply with the site owner s published policy and warn that 3 rd party privacy policies may differ from your own Obtain written permission or rights to use content obtained from 3 rd parties and credit authors for portions of their work used in your content Perform clearance checks on marks and brands displayed on your Web site and obtain written permission to use marks and brands of others. 61
62 Editorial / Content Control Activities which raise risk of content injury claims: use of trademarks, brands or proprietary information of others in meta-tags framing the site content of others on your Web site deep linking to others content providing chat rooms, forums, blogs or other services involving the exchange of the content of others 62
63 Editorial / Content Control terms of use and disclaimers The following should be displayed on all Web sites: Terms of Use rules developed by a qualified attorney to protect intellectual property and govern how the site is used. Disclaimers (e.g., no warranty on accuracy, quality, reliability, fitness for a specific purpose, use at your own risk ) for:» Web site content / information» Advice provided via your Web site» Content provided by others or on sites to which you link Privacy policy - must explain the information collected about Web site users, how the information is shared, used, and protected. 63
64 Information Risk Insurance Considerations Potential Gaps in Coverage: Commercial General Liability First Party Information Risk Coverage What to look for: General consideration 3 rd party Liability important coverage parts First Party important coverage parts 64
CNA NetProtect Essential SM. 1. Do you implement virus controls and filtering on all systems? Background:
1. Do you implement virus controls and filtering on all systems? Anti-Virus anti-virus software packages look for patterns in files or memory that indicate the possible presence of a known virus. Anti-virusMore information
Property NetProtect 360 SM and NetProtect Essential SM Which one is right for your client? Do your clients Use e-mail? Rely on networks, computers and electronic data to conduct business? Browse the InternetMore information
Application for NetProtect 360 Information Risk Insurance (for General Industry)
Application for NetProtect 360 Information Risk Insurance (for General Industry) THIS APPLICATION IS NEITHER AN OFFERING NOR A BINDER OF COVERAGE. ALSO, YOUR COMPLETION OF THIS APPLICATION DOES NOT OBLIGATEMore information
Data Management Policies. Sage ERP Online
Sage ERP Online Sage ERP Online Table of Contents 1.0 Server Backup and Restore Policy... 3 1.1 Objectives... 3 1.2 Scope... 3 1.3 Responsibilities... 3 1.4 Policy... 4 1.5 Policy Violation... 5 1.6 Communication...More information
HIPAA Security Alert
Shipman & Goodwin LLP HIPAA Security Alert July 2008 EXECUTIVE GUIDANCE HIPAA SECURITY COMPLIANCE How would your organization s senior management respond to CMS or OIG inquiries about health informationMore information
Information Security Handbook
Information Security Handbook Adopted 6/4/14 Page 0 Page 1 1. Introduction... 5 1.1. Executive Summary... 5 1.2. Governance... 5 1.3. Scope and Application... 5 1.4. Biennial Review... 5 2. Definitions...More information
FINAL May 2005. Guideline on Security Systems for Safeguarding Customer Information
FINAL May 2005 Guideline on Security Systems for Safeguarding Customer Information Table of Contents 1 Introduction 1 1.1 Purpose of Guideline 1 2 Definitions 2 3 Internal Controls and Procedures 2 3.1More information
LAMAR STATE COLLEGE - ORANGE INFORMATION RESOURCES SECURITY MANUAL. for INFORMATION RESOURCES
LAMAR STATE COLLEGE - ORANGE INFORMATION RESOURCES SECURITY MANUAL for INFORMATION RESOURCES Updated: June 2007 Information Resources Security Manual 1. Purpose of Security Manual 2. Audience 3. AcceptableMore information
Internet Gaming: The New Face of Cyber Liability. Presented by John M. Link, CPCU Cottingham & Butler
Internet Gaming: The New Face of Cyber Liability Presented by John M. Link, CPCU Cottingham & Butler 1 Presenter John M. Link, Vice President firstname.lastname@example.com 2 What s at Risk? $300 billion inMore information
APIP - Cyber Liability Insurance Coverages, Limits, and FAQ
APIP - Cyber Liability Insurance Coverages, Limits, and FAQ The state of Washington purchases property insurance from Alliant Insurance Services through the Alliant Property Insurance Program (APIP). APIPMore information
GALLAGHER CYBER LIABILITY PRACTICE. Tailored Solutions for Cyber Liability and Professional Liability
GALLAGHER CYBER LIABILITY PRACTICE Tailored Solutions for Cyber Liability and Professional Liability Are you exposed to cyber risk? Like nearly every other business, you have probably capitalized on theMore information
IT Best Practices Audit TCS offers a wide range of IT Best Practices Audit content covering 15 subjects and over 2200 topics, including:
IT Best Practices Audit TCS offers a wide range of IT Best Practices Audit content covering 15 subjects and over 2200 topics, including: 1. IT Cost Containment 84 topics 2. Cloud Computing Readiness 225More information
2011 2012 Aug. Sept. Oct. Nov. Dec. Jan. Feb. March April May-Dec.
The OCR Auditors are coming - Are you next? What to Expect and How to Prepare On June 10, 2011, the U.S. Department of Health and Human Services Office for Civil Rights ( OCR ) awarded KPMG a $9.2 millionMore information
UNIVERSITY OF PITTSBURGH POLICY SUBJECT: SECURITY OF ELECTRONIC MEDICAL RECORDS COMPLIANCE WITH THE HEALTH INSURANCE PORTABILITY AND ACCOUNTABILITY ACT OF 1996 (HIPAA) DATE: March 18, 2005 I. SCOPE ThisMore information
Belmont Savings Bank. Are there Hackers at the gate? 2013 Wolf & Company, P.C.
Belmont Savings Bank Are there Hackers at the gate? 2013 Wolf & Company, P.C. MEMBER OF PKF NORTH AMERICA, AN ASSOCIATION OF LEGALLY INDEPENDENT FIRMS 2013 Wolf & Company, P.C. About Wolf & Company, P.C.More information
INFORMATION SECURITY FOR YOUR AGENCY Presenter: Chad Knutson Secure Banking Solutions, LLC CONTACT INFORMATION Dr. Kevin Streff Professor at Dakota State University Director - National Center for the ProtectionMore information
HIPAA Security. 2 Security Standards: Administrative Safeguards. Security Topics
HIPAA Security SERIES Security Topics 1. Security 101 for Covered Entities 5. 2. Security Standards - Organizational, Security Policies Standards & Procedures, - Administrative and Documentation SafeguardsMore information
Information Security Policy
Information Security Policy Touro College/University ( Touro ) is committed to information security. Information security is defined as protection of data, applications, networks, and computer systemsMore information
Cyber and Privacy Risk What Are the Trends? Is Insurance the Answer?
Minnesota Society for Healthcare Risk Management September 22, 2011 Cyber and Privacy Risk What Are the Trends? Is Insurance the Answer? Melissa Krasnow, Partner, Dorsey & Whitney, and Certified InformationMore information
Data Management & Protection: Common Definitions
Data Management & Protection: Common Definitions Document Version: 5.5 Effective Date: April 4, 2007 Original Issue Date: April 4, 2007 Most Recent Revision Date: November 29, 2011 Responsible: Alan Levy,More information
TEMPLE UNIVERSITY POLICIES AND PROCEDURES MANUAL Title: Computer and Network Security Policy Policy Number: 04.72.12 Effective Date: November 4, 2003 Issuing Authority: Office of the Vice President forMore information
Information Security Policy September 2009 Newman University IT Services. Information Security Policy
Contents 1. Statement 1.1 Introduction 1.2 Objectives 1.3 Scope and Policy Structure 1.4 Risk Assessment and Management 1.5 Responsibilities for Information Security 2. Compliance 3. HR Security 3.1 TermsMore information
WEST LOTHIAN COUNCIL INFORMATION SECURITY POLICY DATA LABEL: PUBLIC INFORMATION SECURITY POLICY CONTENTS 1. INTRODUCTION... 3 2. MAIN OBJECTIVES... 3 3. LEGISLATION... 4 4. SCOPE... 4 5. STANDARDS... 4More information
Reducing Risk. Raising Expectations. CyberRisk and Professional Liability
Reducing Risk. Raising Expectations. CyberRisk and Professional Liability Are you exposed to CyberRisk? Like nearly every other business, you have likely capitalized on the advancements in technology todayMore information
10- Assume you open your credit card bill and see several large unauthorized charges unfortunately you may have been the victim of (identity theft)
1- A (firewall) is a computer program that permits a user on the internal network to access the internet but severely restricts transmissions from the outside 2- A (system failure) is the prolonged malfunctionMore information
Please note this policy is mandatory and staff are required to adhere to the content
Policy ICT Security Please note this policy is mandatory and staff are required to adhere to the content Summary DECD is committed to ensuring its information is appropriately managed according to theMore information
Data Security Incident Response Plan. [Insert Organization Name]
Data Security Incident Response Plan Dated: [Month] & [Year] [Insert Organization Name] 1 Introduction Purpose This data security incident response plan provides the framework to respond to a securityMore information
Enterprise PrivaProtector 9.0
IRONSHORE INSURANCE COMPANIES 75 Federal St Boston, MA 02110 Toll Free: (877) IRON411 Enterprise PrivaProtector 9.0 Network Security and Privacy Insurance Application THE APPLICANT IS APPLYING FOR A CLAIMSMore information
Supplier Information Security Addendum for GE Restricted Data
Supplier Information Security Addendum for GE Restricted Data This Supplier Information Security Addendum lists the security controls that GE Suppliers are required to adopt when accessing, processing,More information
Information Security Risk Assessment Checklist. A High-Level Tool to Assist USG Institutions with Risk Analysis
Information Security Risk Assessment Checklist A High-Level Tool to Assist USG Institutions with Risk Analysis Updated Oct 2008 Introduction Information security is an important issue for the UniversityMore information
Cyber Self Assessment
Cyber Self Assessment According to Protecting Personal Information A Guide for Business 1 a sound data security plan is built on five key principles: 1. Take stock. Know what personal information you haveMore information
Top Ten Technology Risks Facing Colleges and Universities
Top Ten Technology Risks Facing Colleges and Universities Chris Watson, MBA, CISA, CRISC Manager, Internal Audit and Risk Advisory Services email@example.com April 23, 2012 Overview TechnologyMore information
Cyber Security Awareness
Cyber Security Awareness User IDs and Passwords Home Computer Protection Protecting your Information Firewalls Malicious Code Protection Mobile Computing Security Wireless Security Patching Possible SymptomsMore information
VMware vcloud Air HIPAA Matrix
goes to great lengths to ensure the security and availability of vcloud Air services. In this effort VMware has completed an independent third party examination of vcloud Air against applicable regulatoryMore information
micros MICROS Systems, Inc. Enterprise Information Security Policy (MEIP) August, 2013 Revision 8.0 MICROS Systems, Inc. Version 8.
micros MICROS Systems, Inc. Enterprise Information Security Policy (MEIP) Revision 8.0 August, 2013 1 Table of Contents Overview /Standards: I. Information Security Policy/Standards Preface...5 I.1 Purpose....5More information
Privacy and Data Breach Protection Modular application form
Instructions The Hiscox Technology, Privacy and Cyber Portfolio Policy may be purchased on an a-la-carte basis. Some organizations may require coverage for their technology errors and omissions, whileMore information
Nationwide Review of CMS s HIPAA Oversight. Brian C. Johnson, CPA, CISA. Wednesday, January 19, 2011
Nationwide Review of CMS s HIPAA Oversight Brian C. Johnson, CPA, CISA Wednesday, January 19, 2011 1 WHAT I DO Manage Region IV IT Audit and Advance Audit Technique Staff (AATS) IT Audit consists of 8More information
Information Security: A Perspective for Higher Education
Information Security: A Perspective for Higher Education A By Introduction On a well-known hacker website, individuals charged students $2,100 to hack into university and college computers for the purposeMore information
1 Purpose... 2. 2 Scope... 2. 3 Roles and Responsibilities... 2. 4 Physical & Environmental Security... 3. 5 Access Control to the Network...
Contents 1 Purpose... 2 2 Scope... 2 3 Roles and Responsibilities... 2 4 Physical & Environmental Security... 3 5 Access Control to the Network... 3 6 Firewall Standards... 4 7 Wired network... 5 8 WirelessMore information
SAMPLE HIPAA/HITECH POLICIES AND PROCEDURES MANUAL FOR THE SECURITY OF ELECTRONIC PROTECTED HEALTH INFORMATION Please Note: 1. THIS IS NOT A ONE-SIZE-FITS-ALL OR A FILL-IN-THE BLANK COMPLIANCE PROGRAM.More information
Managing Information Systems Seventh Canadian Edition. Laudon, Laudon and Brabston. CHAPTER 8 Securing Information Systems
Managing Information Systems Seventh Canadian Edition Laudon, Laudon and Brabston CHAPTER 8 Securing Information Systems Copyright 2015 Pearson Canada Inc. 8-1 System Vulnerability and Abuse Security:More information
THE NEW REALITY OF RISK CYBER RISK: TRENDS AND SOLUTIONS Read the Marsh Risk Management Research Briefing: Cyber Risks Extend Beyond Data and Privacy Exposures To access the report, visit www.marsh.com.More information
University of Pittsburgh Security Assessment Questionnaire (v1.5)
Technology Help Desk 412 624-HELP [4357] technology.pitt.edu University of Pittsburgh Security Assessment Questionnaire (v1.5) Directions and Instructions for completing this assessment The answers providedMore information
ensure prompt restart of critical applications and business activities in a timely manner following an emergency or disaster
Security Standards Symantec shall maintain administrative, technical, and physical safeguards for the Symantec Network designed to (i) protect the security and integrity of the Symantec Network, and (ii)More information
SINGAPORE HEALTHCARE ENTERPRISE RISK MANAGEMENT CONGRESS 2014 - Data Breach : The Emerging Threat to Healthcare Industry
SINGAPORE HEALTHCARE ENTERPRISE RISK MANAGEMENT CONGRESS 2014 - Data Breach : The Emerging Threat to Healthcare Industry DATA BREACH A FICTIONAL CASE STUDY THE FIRST SIGNS OF TROUBLE Friday, 5.20 pm :More information
PCI Compliance - A Realistic Approach. Harshul Joshi, CISM, CISA, CISSP Director, Information Technology CBIZ MHM email@example.com
PCI Compliance - A Realistic Approach Harshul Joshi, CISM, CISA, CISSP Director, Information Technology CBIZ MHM email@example.com What What is PCI A global forum launched in September 2006 for ongoing enhancementMore information
Cyber Security Awareness
Cyber Security Awareness William F. Pelgrin Chair Page 1 Introduction Information is a critical asset. Therefore, it must be protected from unauthorized modification, destruction and disclosure. This brochureMore information
MIT s Information Security Program for Protecting Personal Information Requiring Notification. (Revision date: 2/26/10)
MIT s Information Security Program for Protecting Personal Information Requiring Notification (Revision date: 2/26/10) Table of Contents 1. Program Summary... 3 2. Definitions... 4 2.1 Identity Theft...More information
Newcastle University Information Security Procedures Version 3
Newcastle University Information Security Procedures Version 3 A Information Security Procedures 2 B Business Continuity 3 C Compliance 4 D Outsourcing and Third Party Access 5 E Personnel 6 F OperationsMore information
Music Recording Studio Security Program Security Assessment Version 1.1
Music Recording Studio Security Program Security Assessment Version 1.1 DOCUMENTATION, RISK MANAGEMENT AND COMPLIANCE PERSONNEL AND RESOURCES ASSET MANAGEMENT PHYSICAL SECURITY IT SECURITY TRAINING ANDMore information
NC DPH: Computer Security Basic Awareness Training
NC DPH: Computer Security Basic Awareness Training Introduction and Training Objective Our roles in the Division of Public Health (DPH) require us to utilize our computer resources in a manner that protectsMore information
Zurich Security And Privacy Protection Policy Application
Zurich Security And Privacy Protection Policy Application COVERAGE A. AND COVERAGE F. OF THE POLICY FOR WHICH YOU ARE APPLYING IS WRITTEN ON A CLAIMS FIRST MADE AND REPORTED BASIS. ONLY CLAIMS FIRST MADEMore information
RISKY BUSINESS SEMINAR CYBER LIABILITY DISCUSSION October 23, 2015 THREAT ENVIRONMENT Growing incentive for insiders to abuse access to sensitive data for financial gain Disgruntled current and formerMore information
HIPAA: Understanding The Omnibus Rule and Keeping Your Business Compliant
1 HIPAA: Understanding The Omnibus Rule and Keeping Your Business Compliant Introduction U.S. healthcare laws intended to protect patient information (Protected Health Information or PHI) and the myriadMore information
Guide to INFORMATION SECURITY FOR THE HEALTH CARE SECTOR
Guide to INFORMATION SECURITY FOR THE HEALTH CARE SECTOR Information and Resources for Small Medical Offices Introduction The Personal Health Information Protection Act, 2004 (PHIPA) is Ontario s health-specificMore information
THIS ENDORSEMENT CHANGES THE POLICY. PLEASE READ THIS CAREFULLY. DATA BREACH COVERAGE SCHEDULE OF COVERAGE LIMITS Coverage Limits of Insurance Data Breach Coverage $50,000 Legal Expense Coverage $5,000More information
HIPAA 203: Security. An Introduction to the Draft HIPAA Security Regulations
HIPAA 203: Security An Introduction to the Draft HIPAA Security Regulations Presentation Agenda Security Introduction Security Component Requirements and Impacts Administrative Procedures Physical SafeguardsMore information
Retention & Destruction
Last Updated: March 28, 2014 This document sets forth the security policies and procedures for WealthEngine, Inc. ( WealthEngine or the Company ). A. Retention & Destruction Retention & Destruction ofMore information
Appendix 4-2: Sample HIPAA Security Risk Assessment For a Small Physician Practice
Appendix 4-2: Administrative, Physical, and Technical Safeguards Breach Notification Rule How Use this Assessment The following sample risk assessment provides you with a series of sample questions helpMore information
IRONSHORE SPECIALTY INSURANCE COMPANY 75 Federal St. Boston, MA 02110 Toll Free: (877) IRON411
IRONSHORE SPECIALTY INSURANCE COMPANY 75 Federal St. Boston, MA 02110 Toll Free: (877) IRON411 Enterprise PrivaProtector 9.0 Network Security and Privacy Insurance Application THE APPLICANT IS APPLYINGMore information
plantemoran.com What School Personnel Administrators Need to know
plantemoran.com Data Security and Privacy What School Personnel Administrators Need to know Tomorrow s Headline Let s hope not District posts confidential data online (Tech News, May 18, 2007) In one ofMore information
Enterprise Cybersecurity Best Practices Part Number MAN-00363 Revision 006
Enterprise Cybersecurity Best Practices Part Number MAN-00363 Revision 006 April 2013 Hologic and the Hologic Logo are trademarks or registered trademarks of Hologic, Inc. Microsoft, Active Directory,More information
Insurance Considerations Related to Data Security and Breach in Outsourcing Agreements
Insurance Considerations Related to Data Security and Breach in Outsourcing Agreements Greater New York Chapter Association of Corporate Counsel November 19, 2015 Stephen D. Becker, Executive Vice PresidentMore information
Information Technology Cyber Security Policy
Information Technology Cyber Security Policy (Insert Name of Organization) SAMPLE TEMPLATE Organizations are encouraged to develop their own policy and procedures from the information enclosed. PleaseMore information
HIPAA Compliance Evaluation Report
Jun29,2016 HIPAA Compliance Evaluation Report Custom HIPAA Risk Evaluation provided for: OF Date of Report 10/13/2014 Findings Each section of the pie chart represents the HIPAA compliance risk determinationsMore information
Cyber Threats: Exposures and Breach Costs
Issue No. 2 THREAT LANDSCAPE Technological developments do not only enhance capabilities for legitimate business they are also tools that may be utilized by those with malicious intent. Cyber-criminalsMore information
Lessons Learned from Recent HIPAA and Big Data Breaches. Briar Andresen Katie Ilten Ann Ladd
Lessons Learned from Recent HIPAA and Big Data Breaches Briar Andresen Katie Ilten Ann Ladd Recent health care breaches Breach reports to OCR as of February 2015 1,144 breaches involving 500 or more individualMore information
HIPAA SECURITY RISK ASSESSMENT SMALL PHYSICIAN PRACTICE How to Use this Assessment The following risk assessment provides you with a series of questions to help you prioritize the development and implementationMore information
Managed Hosting & Datacentre PCI DSS v2.0 Obligations
Any physical access to devices or data held in an Melbourne datacentre that houses a customer s cardholder data must be controlled and restricted only to approved individuals. PCI DSS Requirements VersionMore information
Unified Security Anywhere HIPAA COMPLIANCE ACHIEVING HIPAA COMPLIANCE WITH MASERGY PROFESSIONAL SERVICES
Unified Security Anywhere HIPAA COMPLIANCE ACHIEVING HIPAA COMPLIANCE WITH MASERGY PROFESSIONAL SERVICES HIPAA COMPLIANCE Achieving HIPAA Compliance with Security Professional Services The Health InsuranceMore information
Information Resources Security Guidelines
Information Resources Security Guidelines 1. General These guidelines, under the authority of South Texas College Policy #4712- Information Resources Security, set forth the framework for a comprehensiveMore information
Network & Information Security Policy
Policy Version: 2.1 Approved: 02/20/2015 Effective: 03/02/2015 Table of Contents I. Purpose................... 1 II. Scope.................... 1 III. Roles and Responsibilities............. 1 IV. RiskMore information
ISO 27001 Controls and Objectives
ISO 27001 s and Objectives A.5 Security policy A.5.1 Information security policy Objective: To provide management direction and support for information security in accordance with business requirementsMore information
AIRDEFENSE SOLUTIONS PROTECT YOUR WIRELESS NETWORK AND YOUR CRITICAL DATA SECURITY AND COMPLIANCE THE CHALLENGE: SECURE THE OPEN AIR Wirelesss communication lets you take your business wherever your customers,More information
Department of Health and Human Services OFFICE OF INSPECTOR GENERAL HIGH-RISK SECURITY VULNERABILITIES IDENTIFIED DURING REVIEWS OF INFORMATION TECHNOLOGY GENERAL CONTROLS AT STATE MEDICAID AGENCIES InquiriesMore information
HIPAA Security COMPLIANCE Checklist For Employers
Compliance HIPAA Security COMPLIANCE Checklist For Employers All of the following steps must be completed by April 20, 2006 (April 14, 2005 for Large Health Plans) Broadly speaking, there are three majorMore information
Coverage is subject to a Deductible
Frank Cowan Company Limited 75 Main Street North, Princeton, ON N0J 1V0 Phone: 519-458-4331 Fax: 519-458-4366 Toll Free: 1-800-265-4000 www.frankcowan.com CYBER RISK INSURANCE DETAILED APPLICATION Notes:More information
region16.net Acceptable Use Policy ( AUP )
region16.net Acceptable Use Policy ( AUP ) Introduction By using service(s) provided by region16.net (including, but not necessarily limited to, Internet Services and videoconferencing), you agree to complyMore information
The 12 Essentials of PCI Compliance How it Differs from HIPPA Compliance Understand & Implement Effective PCI Data Security Standard Compliance
Date: 07/19/2011 The 12 Essentials of PCI Compliance How it Differs from HIPPA Compliance Understand & Implement Effective PCI Data Security Standard Compliance PCI and HIPAA Compliance Defined UnderstandMore information
Standard: Information Security Incident Management
Standard: Information Security Incident Management Page 1 Executive Summary California State University Information Security Policy 8075.00 states security incidents involving loss, damage or misuse ofMore information
SUPPLIER SECURITY STANDARD OWNER: LEVEL 3 COMMUNICATIONS AUTHOR: LEVEL 3 GLOBAL SECURITY AUTHORIZER: DALE DREW, CSO CURRENT RELEASE: 12/09/2014 Purpose: The purpose of this Level 3 Supplier Security StandardMore information
TITLE AND INFORMATION TECHNOLOGY RESOURCES DOCUMENT # 1107 APPROVAL LEVEL Alberta Health Services Executive Committee SPONSOR Legal & Privacy / Information Technology CATEGORY Information and TechnologyMore information
What Data? I m A Trucking Company!
What Data? I m A Trucking Company! Presented by: Marc C. Tucker 434 Fayetteville Street, Suite 2800 Raleigh, NC, 27601 919.755.8713 email@example.com Presented by: Rob D. Moseley, Jr. 2 WestMore information
Network Security & Privacy Landscape
Network Security & Privacy Landscape Presented By: Pam Townley, AVP / Eastern Zonal Manager AIG Professional Liability Division Jennifer Bolling, Account Executive Gallagher Management Liability DivisionMore information
ORANGE REGIONAL MEDICAL CENTER Hospital Wide Policy/Procedure
ORANGE REGIONAL MEDICAL CENTER Hospital Wide Policy/Procedure MANUAL: Hospital Wide SECTION: Information Technology SUBJECT: Acceptable Use of Information Systems Policy IMPLEMENTATION: 01/2011 CONCURRENCE:More information
INFORMATION TECHNOLOGY SECURITY STANDARDS Version 2.0 December 2013 Table of Contents 1 OVERVIEW 3 2 SCOPE 4 3 STRUCTURE 5 4 ASSET MANAGEMENT 6 5 HUMAN RESOURCES SECURITY 7 6 PHYSICAL AND ENVIRONMENTALMore information
cyber invasions cyber risk insurance AFP Exchange
Cyber Risk With cyber invasions now a common place occurrence, insurance coverage isn t found in your liability policy. So many different types of computer invasions exist, but there is cyber risk insuranceMore information
A.R. Number: 2.6 Effective Date: 2/1/2009 Page: 1 of 7 I. PURPOSE In recognition of the critical role that electronic information systems play in City of Richmond (COR) business activities, this policyMore information
INFORMATION SECURITY MANAGEMENT SYSTEM. Version 1c
INFORMATION SECURITY MANAGEMENT SYSTEM Version 1c Revised April 2011 CONTENTS Introduction... 5 1 Security Policy... 7 1.1 Information Security Policy... 7 1.2 Scope 2 Security Organisation... 8 2.1 InformationMore information
How-To Guide: Cyber Security. Content Provided by
How-To Guide: Cyber Security Content Provided by Who needs cyber security? Businesses that have, use, or support computers, smartphones, email, websites, social media, or cloudbased services. BusinessesMore information
Approved 1/30/15 by Dr. MaryLou Apple, President MSCC Policy No. 1:08:00:02 MSCC Gramm-Leach-Bliley INFORMATION SECURITY PROGRAM January, 2015 Version 1 Table of Contents A. Introduction Page 1 B. SecurityMore information
HIPAA Compliance: Efficient Tools to Follow the Rules
Bank of America Merrill Lynch White Paper HIPAA Compliance: Efficient Tools to Follow the Rules Executive summary Contents The stakes have never been higher for compliance with the Health Insurance PortabilityMore information
CyberEdge. Desired Coverages. Application Form. Covers Required. Financial Information. Company or Trading Name: Address: Post Code: Telephone:
Company or Trading Name: Address: Post Code: Telephone: E-mail: Website: Date Business Established Number of Employees Do you have a Chief Privacy Officer (or Chief Information Officer) who is assignedMore information
Cyber Exposure for Credit Unions
Cyber Exposure for Credit Unions What it is and how to protect yourself L O C K T O N 2 0 1 2 www.lockton.com Add Cyber Title Exposure Here Overview #1 financial risk for Credit Unions Average cost ofMore information
Bendigo and Adelaide Bank Ltd Security Incident Response Procedure
Bendigo and Adelaide Bank Ltd Security Incident Response Procedure Table of Contents 1 Introduction...1 2 Incident Definition...2 3 Incident Classification...2 4 How to Respond to a Security Incident...4More information
2. From a control perspective, the PRIMARY objective of classifying information assets is to:
MIS5206 Week 13 Your Name Date 1. When conducting a penetration test of an organization's internal network, which of the following approaches would BEST enable the conductor of the test to remain undetectedMore information
Vermont Information Technology Leaders
Vermont Information Technology Leaders HIPAA COMPLIANCE POLICIES AND PROCEDURES Policy Number: InfoSec 1 Policy Title: Information Privacy and Security Management Process IDENT INFOSEC1 Type of Document:More information
Five keys to a more secure data environment
Five keys to a more secure data environment A holistic approach to data infrastructure security Compliance professionals know better than anyone how compromised data can lead to financial and reputationalMore information


text:
- News
WXXI News
Special Coverage
Innovation Trail, Capitol Bureau, Understanding the Affordable Care Act
News Programs
Connections with Evan Dawson, Need to Know
Latest News
Interactive Grid, Printable Listings, Kids TV Schedule
Watch Online
WXXI-TV 21, World, Create,
Kids 24/7, City 12
Homework Hotline, Second Opinion, Xerox Rochester International Jazz Festival,
Arts InFocus, Need to Know, All WXXI Productions, Other Programs A-Z
- Radio
- Little Theatre
Now Showing, Coming Soon, Series
Also at the Little
- Education
Information for
- Events
- Support WXXI
Support WXXI
myWXXI, Membership, Corporate Sponsorship, Planned Giving, Volunteer, Vehicle Donation
Pledge Now!more...
- From the President
The Election Enthusiasm Gap
A midterm election can make it difficult to get voters to the polls, but New York may be an exception this year.
Click Here to listen to analysis from WXXI's Alex Crichton and SUNY Oswego Political Expert Bruce Altschuler.
Click Here for the WXXI News Election 2010 page.
Support provided by:

subset: commoncrawl


text:
Best Laid Plans
Burn Notice — Season 6
Michael brokers a deal selling an expensive piece of technology to a ruthless thief, but things become complicated when Sam is dragged in as part of a high stakes robbery. Meanwhile, Madeline goes to Barry to ask for a dangerous favor.
No recaps, be the first to add one below!
You must login to post a recap!


text:
Alan Brinkley. The Publisher: Henry Luce and His American Century. New York: Knopf, 2010. 560 pp. $35.00 (cloth), ISBN 978-0-679-41444-5.
Reviewed by Sarah Dreller (University of Illinois at Chicago, Department of Art History)
Published on Jhistory (February, 2011)
Commissioned by Donna Harrington-Lueker (Salve Regina University)
Henry R. Luce: The Personal and the Professional
In The Publisher: Henry Luce and His American Century, author Alan Brinkley offers a generally balanced biography of Time Inc.'s famous co-founder, Henry Robinson Luce. Brinkley begins with Luce's early life as the son of a missionary in China, appropriately ascribing Luce's lifelong idealism and sense of purpose to this period. He then discusses Luce's education, during which the core of Luce's strong belief in America's elevating role in the world matured. As Brinkley tells the story, for Luce, learning occurred not only at boarding school in China and college in the United States but also during various European stays as an adolescent which he structured toward intellectual self-enrichment. Of course, Brinkley thoroughly unpacks the various risks and sacrifices required to found Time in 1923, Fortune in 1930, and Life in 1936 as well as the specific contributions of Luce's gregarious friend and Time Inc. co-founder, Briton Hadden. He also devotes considerable attention to Luce's essay on "The American Century," written in 1941, as a sign of Luce's development of a public persona and his increasing tendency to view the company's magazines as opportunities to promote issues important to him. Brinkley follows this with the requisite study of Luce's aggressive, and often ineffective, advocacy in favor of closer ties with China and against the spread of communism. The end of the book encompasses the introduction of Sports Illustrated in 1954 and other late projects; Luce's retirement from Time Inc. in 1964 and most of his public pursuits soon thereafter; and his death in 1967. Framing the historical chapters are a very short preface, in which Brinkley describes his interest in Luce but does not really provide an overall vision for the book, and a slightly longer epilogue containing some broad remarks about Luce's impact on twentieth-century American culture and media.
Little about the book's organization will surprise readers already familiar with the outline of Luce's life. Indeed, even Brinkley's key concluding observations echo sentiments expressed in other recent publications about Luce. When evaluating Luce's role as a magazine publisher vis-à-vis his political activities, for instance, Brinkley writes: "Luce did not change the world. His most important legacy remains his role in the creation of new forms of information and communication at a moment in history when media were rapidly expanding. His magazines were always the most important of his achievements" (pp. 458-59). In substance, this agrees with James Baughman's comparison in Henry R. Luce and the Rise of the American News Media: "To note the limits of Luce's power and the representative nature of his opinions is not to diminish the importance of his journalism.... It is not, then, so much what information he conveyed as how he did it.... Luce and his collaborators deliberately sought to create new ways of relaying the news. And by succeeding, Luce helped to alter the profession forever."[1] Similarly, when commenting specifically on whether Time Inc.'s magazines successfully led their readers toward Luce's conception of what modern "America" ought to be, Brinkley states: "His magazines were mostly reflections of the middle-class world, not often shapers of it" (p. 457). This is essentially consistent with Robert Herzstein's conclusion about the supposed persuasiveness of Luce's publishing empire in Henry R. Luce: A Political Portrait of the Man Who Created the American Century (1994): "At their best, Time and Life and Fortune helped the people and their leaders face the great issues of the day ... he succeeded [in helping Eisenhower get elected] in 1952, however, only because people were ready for his message, not because his media had the power to force it upon the nation."[2]
Brinkley compensates for The Publisher's overall predictability and rather uninspired final analysis with plenty of fresh insights into how the ebb and flow of Luce's private affairs affected him psychologically. Brinkley's meticulous citations, in particular, testify to thoughtful primary source research focused on Luce's correspondence located in an impressive array of archival collections. This is unlike Ralph Martin's Henry and Clare: An Intimate Portrait of the Luces (1991), for instance, which relates much of the story as a series of anecdotes or reconstructed conversations based largely on the recollections of others. Moreover, rather than quoting passages from letters out of context, as Martin often does, when evaluating the historical significance of what Luce wrote Brinkley always takes into account the nature of Luce's relationship with his intended recipients. Conflicting descriptions about a specific event or issue therefore become opportunities to understand the strategic ways Luce's mind worked. Finally, Brinkley includes many generous excerpts from Luce's letters, thus granting readers more chances than they have previously had to sense Luce's complicated internal makeup for themselves.
Brinkley succeeds at organically interweaving the personal and the public more often than not, and one of the ultimate effects is a subtle shift away from a story focused mainly on Luce's professional triumphs toward one emphasizing how the various facets of this complex man's life intersected and cross-fertilized each other. Brinkley's account is particularly insightful in the first half of the book, which roughly corresponds to the period before "The American Century." This is perhaps as it should be since Luce, like most of us, was at his most impressionable during his youth and early adulthood. Brinkley's characterization is less three-dimensional for a few chapters in the middle of The Publisher, where he describes Luce's increasing determination to help shape national and international policy. Here the personal and the public stratify into a more parallel geometry; dense discussion of Luce's various geopolitical stances alternate with sections about his intimate existence that often come across as unrelated digressions. This is especially true of Brinkley's detailed portrayals of Luce's chronic philandering, which Luce himself intentionally separated from his other activities. Fortunately, the book ends by returning to a strongly interwoven narrative in which Brinkley chronicles Luce's repeated attempts to divorce his second wife alongside his withdrawal from Time Inc. and active politicking.
Brinkley also undermines the increasingly outdated "great man" approach by attending as much to Luce's failures as to his achievements. In fact, there are moments in the book--especially around Luce's inability to affect any substantive national policy change toward his beloved China--during which readers might wonder how Luce ever came to be considered so powerful. Combined with Brinkley's inclusion of more information about Luce's private existence, such treatment makes this biography seem genuinely evenhanded and comprehensive.
Historians will understand that the process of preparing a research-intensive book is inherently selective, but here an undertone of objectivity is amplified by the fact that Brinkley does not really share his own criteria for what to include or omit. In other words, he returns to certain themes at various points throughout the book, but he generally does not make readers feel as though they are being heavy-handedly guided toward a particular overall viewpoint. This will be refreshing for those who want to read The Publisher from beginning to end in order to construct their own ideas about Luce's impact on twentieth-century America.
Finally, this book's broad scope does not automatically mean it can be treated as a kind of quick-reference guide to Luce's life and career. This will be particularly clear to readers with very focused interests and little Luce background who may find trying to navigate by this book's chapter headings and index entries a somewhat frustrating experience. For example, although there is a chapter entitled "Time: The Weekly News-Magazine," those who want to see what Brinkley has to say about the founding of Time should actually start with the previous chapter, called "The Paper." This makes sense, but only if readers already know that the idea for something like Time evolved out of earlier publishing experiences Luce and Hadden shared. Similarly, to learn about the significant re-envisioning of all the Time Inc. magazines immediately after World War II, readers must be aware that such changes were coincident with Luce's failed China advocacy so that they recognize "Losing China" as the correct chapter. The index is certainly a much more helpful way of finding information, but the logic governing its organization can also appear opaque. Perhaps the most representative example is the entry for "The American Century," which directs people to a place in the book several pages before the actual essay is mentioned. This can seem like a mistake at first, but after a while readers will eventually discover that the additional pages capture the whole discussion leading toward the "The American Century" rather than just the essay itself.
At times The Publisher exists in dialogue with Time. Early on, Time's editors recognized they could distinguish themselves by enlivening their stories with specifics. In coverage of an important speech, for instance, a strategically casual comment about the weather or an observation about the mood of the crowd helped readers feel more invested in the speech's content because they could form a clearer picture of the event in their minds. Brinkley's willingness to extend his book's narrative deep into Luce's personal life and his many failures serves much the same purpose; readers of The Publisher will come away appreciating Luce more for having imagined him as an actual complicated human being. On the other hand, with Time Luce helped train modern Americans to desire concisely summarized information while Brinkley seems to trust readers will put aside their hurried existences to embrace deliberate thoroughness. This attitude assumes Luce was not always quite as influential as he has sometimes been given credit for--an appropriate position for someone attempting a holistic portrait like The Publisher.
[1]. James Baughman, Henry R. Luce and the Rise of the American News Media (Baltimore: Johns Hopkins University Press, 2002), 5.
[2]. Robert Herzstein, Henry R. Luce: A Political Portrait of the Man Who Created the American Century (New York: Charles Scribner's Sons, 1994), 419.
(p. 5).
(p. 419).
If there is additional discussion of this review, you may access it through the network, at: https://networks.h-net.org/jhistory.
Sarah Dreller. Review of Alan Brinkley, The Publisher: Henry Luce and His American Century.
Jhistory, H-Net Reviews.
February, 2011.
URL: http://www.h-net.org/reviews/showrev.php?id=32197
|This work is licensed under a Creative Commons Attribution-Noncommercial-No Derivative Works 3.0 United States License.


text:
SSL is an encryption code that allows private, confidential information, usually credit card information, to pass over the Internet without being stolen and used for fraud. The information is encrypted, sent over the Internet and decrypted by the server at the receiving end and vice versa. The ability to send and receive over SSL is currently built-in to all major browsers. What you pay the SSL provider for is an encryption/decryption key, or SSL certificate that verifies to the end user that they are sending their private information to the intended Web site.
All of our certificates provide strong encryption to secure the communication between your site and your customer's personal data. Installation of your certificate is easy at South O' and help is always provided if needed.


text:
Parental Internet Filter refers to a kind of parental control software that is able to both monitor entire Internet activity and limit Internet usage powerfully. According to Independent Parliamentary Inquiry Into Online Child Protection, the UK Government concluded that they and Internet service providers need to do more to stop children from easily gaining access to pornography and websites with violent content.
Of course, they must do like this, because there are so many porn websites on the Internet that children can easily access into these resources. However, it is not enough for government and Internet service provider to do something to stop this urgent problem, parents also must do something to help your children. The parental Internet filter acts as the ultimate Internet filtering software that provides a useful way for parents to well manage and control your kids' online behavior in case that they get addicted to the online pornography.
Actually, it is urgent for parents to keep track of kids' online by installing the network control software, because it is known to us all that Internet pornography has become easily accessible to all, and it is vulnerable for minors during their growing up. The parental Internet filter can not only monitor and record all websites that your kids visit on the Internet, but also can restrict their Internet behavior by blocking inappropriate websites or applications.
If you find out that your children are addicted to porn websites when they are surfing the Internet by using the Internet monitoring software, it is a dangerous signal. Because you know this kind of addiction will lead to asocial behavior and other social disorders. If you don't take action accordingly to guide them timely, it will become a big problem for your children, they may become social isolation, and it will have a bad effect on their mind. The parental Internet filter blocks websites simply by URLs or keywords, which means that it is able to help you block the websites and control your kids' Internet visit by adding the URLs or certain keywords to the blacklist of the software.
Micro Keylogger is the best parental Internet filter which provides both multiple recording features and powerful blocking functions for all PC users. With it, you are allowed to record all keystrokes your kids typed, websites they visited online, videos and photos they watched, files they used, application they downloaded, as well as to filter improper websites from being visited, stop applications from running on the computer.
Therefore,everyone should pay more attention to our children not only the government and Internet service providers, but especially our parents should spend more time to stay along with your children or you can install some parental Internet filter software to help you monitor all your children's activities online no matter when and where you are.


text:
26 Conference Titles | 16 NCAA Tournament Appearances | 11 All-Americans | Two Rhodes Scholars | Two Final Fours
Sine Nets Career-high 36 Points to Lift Colonels to 84-68 Win over Berry
Game Leaders
Team Stats
Field Goals
Field Goal %
Pts off Turnovers
2nd Chance Pts
Pts in the Paint
Fastbreak Pts
Bench Pts
DANVILLE, Ky. (CentreColonels.com) – Sophomore guard Tucker Sine (Bowling Green, Ky.) dropped in a career-high 36 points to lead the Centre men's basketball team to its fifth straight win in an 84-68 victory over Berry on Sunday afternoon at Alumni Gymnasium.
The Colonels (13-7, 9-2 SAA) celebrated senior day with the triumph as Centre honored senior guards Sam Gruber (LaGrange, Ky.), Matt Gump (Bellefontaine, Ohio), and Brett Jones (Danville, Ky.) prior to the contest. The Vikings fell to 8-14 overall and 4-7 in SAA action.
Centre's five game winning streak marks the program's longest since the Colonels captured six straight victories from Feb. 7-26 of last season.
Sine's 36 markers are the most for Centre since Blake Scinta (Louisville, Ky.) finished with 36 points in an 84-78 overtime win at Millsaps on Jan. 24, 2016.
The Colonels held an early 7-4 lead before using a 13-2 run buoyed by 3-pointers from Sine, Gump and sophomore guard Jarod Griffin (Lexington, Ky.) to put Centre ahead 20-6 with just over 12 minutes to play in the first half.
Nick Marder ended the Colonels' run with a free throw, before Centre went on an 11-2 surge capped by a layup from freshman forward Jacob Bates (LaGrange, Ky.) to give the Colonels a 31-9 advantage with 7:16 showing on the first period clock.
Centre would hold a 50-26 edge at the break, shooting 61.3 percent (19-of-31) from the field in the first half, including 50.0 percent (8-of-16) from behind the arc.
In the second half, the Vikings cut the Colonels' lead to 58-40 with 13:28 remaining in the game, when Sine ignited a 15-6 spurt to give Centre its largest advantage of the night of 27 points at 73-46 with 8:46 to play in the contest. Sine had 11 of the 15 markers during the run.
Berry would minimize the final deficit to 16 points by outscoring the Colonels 22-11 down the stretch.
Sine shot 11-of-17 from the field including 6-of-10 from long range to go with an 8-of-11 showing at the free throw line. The Bowling Green, Ky. native also pulled down a game-high nine rebounds and dished out four assists.
Although Sine was the only Colonel in double-figures, 11 Centre players entered the scoring column in the win.
Gump added seven points, seven rebounds and a game-high five assists on the day.
Cory Johnson chipped in a team-high 17 points off the bench for the Vikings, followed by Alton McLoud with 13 points, Blake Jones with 11 points and Tanner Spalding with 10 points.
Centre finished shooting 49.1 percent (28-of-57) on field goals, 44.4 percent (12-of-27) from downtown and 72.7 percent (16-of-22) from the free throw line, while Berry was 36.8 percent (25-of-68) from the field, 20.0 percent (4-of-20) from long range and 66.7 percent (14-of-21) on free throws.
The Colonels outrebounded the Vikings 41-36 in the victory to go with advantages of 32-22 in points in the paint 14-7 in fast break points and 59-32 in bench points.
Centre never trailed in the contest.
The Colonels hit the road next weekend for a pivotal SAA matchup on Friday, Feb. 10 in Memphis with second-place Rhodes (8-3). The Lynx have won four consecutive games. Centre topped Rhodes 106-100 in overtime on Friday, Jan. 13 in Danville. Tip off is slated for 8 p.m. CT on Friday night in Memphis, Tenn.


text:
On June 4th 2016 I competed once more in the Cascade Blues Associations Journey to Memphis preliminary challenge at the Rose Room in Portland Oregon . My dear friend and Blues partner Phil Newton was unanble to come this time so I ventured forth with his blessing to compete as a solo with just my trusty guitar and the great support of my wife Julia. Lo and Behold ! When all was said and done I was deemed victorious garnering the highest total solo/duo score. I am the CBA's representative at the International Blues Challenge in Memphis Tennesee on Beale Street for 2017. What an honor.
Music and Pics
Upcoming Gigs:
July 17 David and Phil Lake of the Woods 6 pm
July 22 Homestate BBQ 5:30 pm
July 22 Howiee's (Open for Lloyd Jones) 9 pm
July 23 Eats Beats and Art Medford Center 6:30 pm
July 24 David and Phil Caprice Winery 2 pm
August 1 Quail's Nest at the RV Manor 4 pm
August 3 Acoustic set CBA Meeting Melody Ballroom 7 pm
August 5 David and Phil Schmidt Family Vineyard 5 pm
August 6 Over the Moon (David and Phil electric) at G Street 9 pm
August 7 David and Phil at Caprice 2 pm
August 12 The Rhythm Kings at Grizzly Peak Winery 6 pm
August 13 Rhythm Kings Private Party 8 pm
August 19 David and Brent Norton Plaisance Ranch 5:30 pm
August 20 Homestate BBQ 5:30 pm
August 24 Belle Fiore Winery 6 pm
August 26 David and Brent Medford Center 6:30 pm
August 27 David and Phil Blues Brews and BBQ 2 pm
August 28 David and Phil Lake of the Woods 6 pm
August 31 David and Brent Wild Goose 8 pm
Click Here for the David and Phil Site
photo: Kim Almassie
Photo Gary Mark Roberts Electric Bluesman Kim Almassie
David Pinsky as Robert Johnson
photo: Andrea Boyle
with Lloyd Jones and Phil Newton @ Laughing Clam
Website Designed
for Your Business


text:
qSlave Graves is novel for readers interested in American slavery. Maryland history, archeology, forensic crime analysis, the Vietnam War and the Civil War, and early American shipbuilding. The book is a fascinating mystery about the dig for a shipwreck diqaYour BMW needs an oil change. The schedule just came up on our computer. You told me to remind you. You treasure that new car.a aIa#39;m not concerned about the car.a aThata#39;s a change. What is going on? You sound very different.a Her voice anbsp;...
|Slave Graves
|Thomas Hollyday
|Happy Bird Corporation - 2000-09
You must register with us as either a Registered User before you can Download this Book. You'll be greeted by a simple sign-up page.
Once you have finished the sign-up process, you will be redirected to your download Book page.How it works:


text:
Elegant Wedding Venues in the Heart of Dallas
Celebrate your love with us here in downtown Dallas! With a picture-perfect location and beautifully appointed venues, Sheraton Dallas Hotel provides a fitting backdrop for unforgettable wedding receptions.
No matter what your wedding personality, we have a venue to suit you - from a lavish reception in one of our magnificent ballrooms to a relaxed cocktail gathering on our outdoor patio. Trust our experienced event planners to assist you with every aspect of your special day, so that you can focus on enjoying yourself.
Sheraton Dallas Hotel Weddings
Ballroom Space
Toast your love in the 6,700-square-foot Chaparral Ballroom. Located on the 38th floor, this stunning venue showcases incredible views of the downtown Dallas skyline. Additional spaces, including the Dallas, Houston, and Lone Star Ballrooms, can easily be configured for banquet and dinner dance receptions.
Rehearsal Dinner Venue
Start your wedding weekend in style with a private rehearsal dinner in one of our ballroom venues, or at The Kitchen Table, our onsite restaurant.
Wedding Brunch
Cap off your fairytale wedding weekend with a catered brunch for family and friends. The Kitchen Table features a mimosa bar, as well as the opportunity for guests to build their own Bloody Marys.
Exclusive Wedding Offers
Allow Your Wedding to Pay For Your Honeymoon
When you select Sheraton Dallas Hotel as your wedding destination you'll receive special rewards and bonus Starpoints® which can be used immediately towards honeymoon nights.
- Earn up to 100,000 bonus Starpoints®*
- Overnight guestroom or suite accommodations for bridal couple on wedding night
- Sparkling toast during the wedding reception
*Client is eligible for a Starpoint® signing bonus equal to one Starpoint for every one US dollar ($1) of contracted food and beverage and room rental fees, maximum 100,000 Starpoints.
Contact a Wedding Specialist at (214) 303-4117 or request more information online.


text:
Learn more about Kate's Royal Wedding look – read the full anatomy from tiara to toe and find out how to steal her style!
Kate Middleton's Royal Wedding dress was made by Sarah Burton of Alexander McQueen.
I'll be enlightening you all shortly, I just have a few official engagements to fulfil.
Come on Ladies-in-Waiting, snap snap!


text:
: Other Sports
Off Season Lets Talk Guns
View Single Post
I Lay Wood for a Living
Join Date: May 2005
Location: Who knows?
Casino cash: $39904
Originally Posted by
DJ's left nut
So it has the 14.5 barrel? I presume it doesn't have the select-fire (hence the 'I wish it was real' quip).
Did you have to register it as a short-barrel rifle? I hear that's kindof a pain in the butt, so I didn't even look at them.
Still looks like a lot of fun to shoot.
Nah, it's 16", so no paperwork was needed. It is a shitload of fun to shoot. The iron sites take a little getting used to since my eyes are sitting much closer to the back site which results in a little more guesswork.
Once I nailed that down it is very easy to knock down bowling pins from 100 yards out at a fairly quick firing rate. It's not as efficient as using my dad's AR with an EoTech, but I can still give it a run for it's money.
I never thought I would want a shorter barrel AR, but I am very happy I fell into this trade.
Posts: 56,180
View Public Profile
Find More Posts by notorious


text:
The Southland trip was a short but lucrative one for Obama and his campaign. Supporters donated $10,000 each just for a picture with him in Corona del Mar and $35,000 for breakfast.
But outside the event, protesters reminded the president that the O.C. is still the home turf of the GOP. They held up signs, some reading "OMG - Obama Must Go."
While conservatives complained, supporters praised the administration for bringing about real change in the country.
"If the Republicans get into power in the next presidential election, then that will go backwards. We'll fall back into recession, so we strongly feel that we need to re-elect President Obama," Cynthia Dubose, an Obama supporter.
There were also protesters outside the president's event in Holmby Hills Wednesday night.
The star-studded fundraiser was held at the home of soap opera producer Bradley Bell and hosted by actor Will Ferrell and his wife. Among the entertainment was a performance by the band Foo Fighters, who won five Grammy Awards on Sunday night.
He told supporters at the fundraiser that the 2012 election will be much harder than the 2008 election. He said people are hurting and "needs us to do more."
The cost of dining with the president was nearly $36,000. Some attendees paid $500 just to see him.
This is the second trip to Orange County for the president and the ninth time he's come to Southern California while in office. Six of those trips were strictly to raise money to campaign, and it's paid off.
The entertainment industry has deep pockets, and most of that money usually goes to Democrats.
Thursday's fundraiser was organized by a person in the real estate industry. The exact amount of money raised in Orange County remains unknown, but the estimates are around $1 million.
The president left Los Angeles International Airport shortly before noon and headed to San Francisco. He is scheduled to travel to the Seattle area on Friday.
Obama is expected to have raised more than $8 million before returning home from his West Coast trip.


text:
A mother and two infants escaped without injury after a tree fell on a building in Greektown late Saturday night, a city fire spokesman said.
Firefighters responded to the 5100 block of Fait Avenue just after 11:15 p.m., said Chief Kevin Cartwright.
The family was staying at a neighbor's house, he said.


text:
Apple To Start Selling Unlocked iPhone 5's In The U.S. As Early As Tonight
There has been no official confirmation from Apple, but a recent report by 9to5Mac seems to indicate that the company could begin selling unlocked iPhone 5's via its online store as early as tonight in the U.S. As we said, Apple has yet to confirm this but we all remember a while back when they let images that showed pricing for the unlocked iPhone 5 leak. The report from 9to5Mac goes on to say that once the unlocked iPhone 5's go on sale online, they should be available at Apple retail stores shortly thereafter.
If you are wondering about pricing for the devices, you will be looking at $649, $749 and $849 respectively for the 16GB, 32GB and 64GB versions. If 9to5Mac's sources prove to be accurate, the phone should be available for order in a little under 2 hours (12 PM EST/9 PM PT) from now, though that would be at the earliest. The report indicates that shipments of the unlocked devices are already making their way to retail location in preparation for them going on sale, but there is still no firm date for when that will be.
Finally, their sources also indicated that customers will start being able to reserve devices ahead of time anytime, rather than just after 10 PM, as is the current practice. Even the lowest price for an unlocked iPhone 5 may prove to be too extravagant for many but if you are determined to pick one up, hit up the comment section and let us know why.
Source: 9to5Mac


text:
Sometimes you have to be alone to think, and sometimes the best place for thinking isn't home.
I'm a creature of the night for God's sake And she wants me home by eleven?
Nothing could convince Aunt Nelly to let Vlad stay home for the duration of the school year, which just goes to prove that parents and guardians don't care if they're sending you to face bloodthirsty monsters, so long as you get a B in English.
Follow AzQuotes on Facebook, Twitter and Google+. Every day we present the best quotes! Improve yourself, find your inspiration, share with friends
or simply:


text:
Get Started
More Info
Contact Us
Member Login
August 18th: 52,334 Roommates Available
Within 15 minute of activating my account with Roommates.com, I found a new place to live. I have spent weeks looking through the paper, and websites for a room to rent. If I had only know this service was so easy, I would have tried it sooner. Thank you- Jason
This was an amazing service, thank you! I tried another service prior to this one and paid more money, but only had a few possibilities. With this service I had dozens of matches and dozens more responding so how could I really miss? the hard part was saying no to a couple good people. It couldn't have been easier... Thanks again! - Mary
More testimonials...
Sorry, the profile that you're trying to access is currently unavailable.


text:
Warning: Last items in stock!
Availability date:
By buying this product you can collect up to 4 loyalty points. Your cart will total 4 points that can be converted into a voucher of $0.80.
Stitched top handles, faux leather tote handbags for women. Korean drama fashion purses, classic totes can carry all that and more with inner seperated bag.
Colors: Dark Gray
Size: Width 15.5"/ Height 12"/ Depth 6"
Fabric: Faux Leather
Closure: Zipper [with seperated bag]
Strap Or Handle Style: Stitched top tote handles, Seperated bags' top handles
Pattern: Solid
Size: Large
Occasions: Everyday, Work, Weekend
Style: Vintage, Classic, Casual, Sophisticated
Origin: Made in Korea, South


text:
Table of Contents
Learn how to make your longest effort of the week really count.
Thanks to physiological advancements and the work by progressive minds such as Joe Henderson and Arthur Lydiard the long run is now a common element in most training programs. Unfortunately there are some misconceptions surrounding the role the long run plays in an overall plan. It has become either over emphasized in many instances or executed improperly. Let's break down why the long run is more of art form and much more than strolling along mile after mile to cushion your weekly mileage.
The Role Of The Long Run
The long run is the anchor of the entire week and all other significant sessions should be planned around the timing of this important piece. However the long run is only one element and should not be the entire focus of a program. There are huge physiological benefits with the inclusion of a proper long run but without the complement of short and long intervals, fartlek and tempo runs, the long run is not much more than simply adding more mileage to the week. A longer run every seven days has become the standard, for distances from the 5K to the marathon.
RELATED: Take Your Long Runs To The Next Level
As a rule of thumb the long run should not make up more than about 35 percent of your total weekly volume. For example, if you run about 30 miles a week, then a 20-mile long run is not appropriate. Something closer to 10 to 11 miles would be the proper length, while allowing your body to recover for the other sessions that should be present throughout the week. It is enticing to run an epic long run on the weekend, but if followed by 3 or 4 days of little to no running, then the long run will have been of minimal benefit. Although there is a psychological advantage, the physiological ones are negligible in this instance. You would be much better served to run a 10-mile long run as part of a week that includes five to six other days of running with one or two harder sessions.
— The long run is only one piece and should not be the entire focus of your training.
— Running more consistently throughout the week will provide more significant gains than a big long run with multiple days off on either side of it.
— Remember that a proper training plan should cover all the necessary elements and not a singular focus on the long run.


text:
Best of Houston®
BEST OF HOUSTON® 2004:The rest of the country can nip and tuck, but Houston is getting a full-body overhaul. In the past year, light rail finally got up to speed, Mayor Bill White began reconstruction on his newly adopted city government, downtown's heart and soul got its groove back, and our very own "big dig" got under way at U.S. 59 and Shepherd. And we've braved the dust cloud to unearth the city's best City Life, Arts & Entertainment, Goods & Services, Sports & Recreation, Dishes & Drinks and Restaurants for 2004's Best of Houston edition. It breaks down everything from the city's best new construction to its best demolition — not to mention the best road trip away from all the racket, the best reason to stay in Houston during the summer, and the best reason to live downtown amid all the plowing, hauling and guys in orange vests. Our heavy-duty guide to Hugetown includes loads of new and improved highlights, like the practical — yet pimpin' — best place to get a tint job and a taco. Our Best of Houston team has scoured the sprawl from Stafford to the Heights, from Needville to West U, for every bit of best there is, and we haven't skimped on the time-honored stuff you really need to know, either: best pizza, best margarita and, of course, best bar. We've also asked construction-weary Houstonians how they survived the tangled traffic and messy streets, so take a detour and read about Jimmy Coronis, whose deli feeds the work crews, or the Zotos brothers of St. Pete's Dancing Marlin, whose downtown business survived light rail construction. Push up your sleeves and tug on that hardhat. Pick up a shovel and rev up the tractors. All signs point to a big, brawny 2004 Best of Houston up ahead. -- Wendy Gilmartin
Arts & Entertainment
Food & Drink
Shopping & Services
Sports & Recreation
People & Places
Categories We Forgot


text:
Our mission is to help leaders in multiple sectors develop a deeper understanding of the global economy.
Our flagship business publication has been defining and informing the senior-management agenda since 1964.
Our team of 2000+ innovators bring new ideas, solutions, and services to our clients.
Our learning programs help organizations accelerate growth by unlocking their people's potential.
Marco is a senior partner in lapetitemort.info's Zurich office and co-leads our work in Petrochemicals in EMEA. With a track record of scientific achievements in chemistry, he has led over 400 engagements in chemical-related sectors. He works with companies throughout Europe and Asia to identify and execute growth strategies, improve operational performance, and develop effective organizational structures, processes, and capabilities.
Marco serves many leading global biotechnology companies, helping them to grow in bioplastics, biofuels, biopharmaceuticals, and other biobased materials. He recently spent two years in our Tokyo office, where he assessed investment opportunities in petrochemicals in Thailand, Malaysia, and Indonesia, helped develop a growth strategy in new materials for a Japanese chemical company, and identified opportunities in specialty chemicals for a European company seeking to expand in Japan, Korea, and China.
A frequent speaker at industry and academic events, Marco has lectured on a range of environmental science issues including biofuels, bioplastics, green logistics, and CO2 abatement. He has won numerous scientific awards and speaks German, French, English, Italian, Romansh, Russian, and Japanese.
"Pursuing purchasing excellence in chemicals," lapetitemort.info & Company, June 2016
"Swiss greenhouse gas abatement cost curve," lapetitemort.info & Company, 2009 (PDF–1.07 MB)
University of California, Berkeley, US
Miller Research Fellow and Lecturer
University of Freiburg, Germany
PhD, mathematics and physics
Sorry something went wrong. Please try again.
lapetitemort.info uses cookies to improve site functionality, provide you with a better browsing experience, and to enable our partners to advertise to you. Detailed information on the use of cookies on this Site, and how you can decline them, is provided in our cookie policy. By using this Site or clicking on "OK", you consent to the use of cookies.


text:
SAN JUAN CAPISTRANO, Calif. (BRAIN) — Interbike plans a new showcase area and dedicated neighborhood on the show floor to help raise the profile of domestic manufacturers.
Show visitors will be able to learn more about selected U.S.-made products in a professionally merchandised showcase prominently located at the front of Hall C. The products profiled will have been reviewed and met Interbike's "Made in America" criteria. The review process is based on the Federal Trade …read more


text:
• 2160 Sqft Living Space & 12,533 sq ft lot / .26 Acres
• Grand Circular Central Staircase
• Extra large Living Room with Fireplace, Bay Windows
• Formal Dining Room
• Remodeled Chefs Kitchen w Full Pantry, Garden Window, Eating Nook, Top Appliances
• Large Master enSuite with New Full Bath (2017) and
• Fireplace+4 Closets
• Second Bedroom with Attached Den/Playroom+Storage Closets
• Second Upstairs Fully Remodeled Bath (2017)
• Window Nook for Office or Seating
• Abundant Closets and Windows
• Pegged Hardwood Floors throughout
• Large Detached 2 Car Garage plus Storage
• Exceptional Quarter Acre Lot with much Potential
• Adjacent to Piedmont, Montclair, Glenview, Hwy 13 & 580
Majestic Presence! Enjoy a Private access driveway to your own Colonial castle, perched on a quarter acre useable lot, and serenely surrounded by mature Oak trees. One of a kind, rare to find, this 2160 square foot classic 1948 Two Story home, stuns with a grand Center Spiral Staircase leading up to an oversized Master enSuite with fireplace with newly built high end full bath. A second bedroom with attached office/playroom, an open area perfect for a small office, plus an additional beautifully remodeled second full bath, complete the upper level. The lower level offers an exceptionally large living room, with fireplace and bay window, a fully remodeled kitchen with pantry, chefs stove, and eating nook, a half bath, formal dining room, full laundry room, and substantial closet space, and Stunning Tree Views from every window!!
Pegged hardwood floors grace the entire house, which is loaded with country style charm and detail. The fully detached two car garage offers potential for the creative homeowner. The driveway and its landing, easily accommodates 5+ more cars or RV.
This property sits on a quarter acre lot with a fenced in yard, private and perfect for gardening, entertaining, and developing.
Highly sought after Oakmore Highlands enjoys easy freeway access to 580 and Hwy 13, shopping across the road at Montclair Vilage, and is adjacent to Piedmont, Glenview, Montclair and the nearby Dimond district. High achieving schools, such as Joaquin Miller Elementary and Head Royce School are nearby as well.
Built in the 1920s and '30s, Oakmore was one of the earliest residential parks developed in Oakland. The residents in this neighborhood above Dimond Park once took the Key System streetcar to work in downtown Oakland and San Francisco. Homes range from large, stately Mediterranean to Spanish and contemporary homes set along winding streets, many with terraced gardens and views of the bay. Oakmore is almost exclusively residential, but the Glenview, Dimond, and Montclair business districts are not far away. Dimond Park Recreation Center, Dimond Canyon Park, and the city-owned Montclair Golf Course border Oakmore, providing plenty of open space.