Thursday, March 24, 2016

Ransomware Protection

A recent article in the Washington Post highlighted the issues of ransomware for cities and their police departments. Below is a guest blog by Greg Van Wormer, LMC’s Assistant Technology Services Director, on how to protect your department and city from ransomware.

It doesn’t seem like we can go a day without hearing about another entity hit by ransomware. A type of malware that restricts access to the infected computer system in some way, ransomware demands that the user pay a ransom to the malware operators to remove the restriction.

Lately it appears many public agencies, such as law enforcement, are targets of ransomware attacks. Protecting computers and networks from ransomware is pretty much the same as protecting from viruses and malware in general. Below is a brief list of steps you should take to help protect your computers and network.

  1. Back up your systems on a daily basis. This includes cloud-based services. Make sure you can restore data if a system is compromised.
  2. Install updates as soon as possible. On end user equipment, critical updates should be installed as they’re released.
  3. Limit people’s access to their computers. Don’t allow end users to have local administrative rights. This means end users and a large number of viruses are unable to install software without first gaining administrative access.
    Greg Van Wormer
  4. Limit data access to only what users need to do their job. If a user only needs to view data and not change it, make sure they can only view the data. Ransomware can only encrypt or take hostage data if change or write rights are granted.
  5. Filter email for executable code and other malicious attachments. If you’re using online services like Office 365 or Google Apps, this is usually part of their service.
  6. Use firewalls, both on your network and on local computers.
  7. Use anti-virus.
  8. Separate any public wireless network from the network used for city business. (And avoid using wireless networks whenever possible.)
  9. Educate employees to not click on unknown links, download unknown documents, and be cautious with email.

For more information on keeping city computer networks safe, please see our memo on Computer and Network Loss Control, or join us for the Technology Track at our 2016 Safety & Loss Control Workshops.

Up Next: The Off-Duty Rescue

In the meantime, stay safe and be careful.

Rob

Friday, March 11, 2016

Police Liability Surveys

“Give me six hours to chop down a tree and I will spend the first four sharpening the axe.”—Abraham Lincoln.

That well known quote speaks volumes about public safety work: It’s all about being ready, prepared, and having the tools to do the job. It’s about doing work ahead of time to ensure the task can be managed.

The LMCIT Police Liability Surveys are free and
only take 90 minutes to complete.
Well, the same is true for police liability; you need to be sure your risk management strategies have a solid foundation. LMCIT has a new tool for police departments that will help them gauge their readiness. The Police Liability Surveys have just been released as a tool for police administrators to assess their liability, and it offers advice in areas that need improvement.

AND it’s free.

The surveys were developed by Tracy Stille, a public safety specialist from our loss control staff. These surveys actually consist of three separate surveys administered over a period of several years. The first survey deals with police operations liability, the second survey with police employment liability, and the third survey covers workplace injuries and safety.

The liability surveys are designed to identify best practices and aid cities/police departments in loss control prevention strategies and best practices currently in place and/or absent within law enforcement agencies in order to help reduce exposure to police liability and workplace injuries.

To schedule a survey, contact Tracy Stille
at tstille@lmc.org or 
(651) 215-4051.
The survey takes about 90 minutes to complete. If you would like more information, or if you would like to schedule a police liability survey, contact Tracy Stille at the League of MN Cities Insurance Trust at tstille@lmc.org or (651) 215-4051.

Up Next: Ransomware Protection

In the meantime, stay safe and be careful.

Rob

Thursday, February 25, 2016

Firefighter Recruitment and Background Checks

A Guest Blog by LMCIT Field Consultant Troy Walsh

Recruitment
Recruiting firefighters should be an
everyday task.
With the number of firefighters decreasing, and continued services increasing, fire departments are always looking for new firefighters. Many municipalities across the state are looking and actively recruiting firefighters to fill open positions and looking toward the future when our 20-30 years-of-service members retire.

How are you recruiting members? And what are you doing to make sure that you’re getting the best qualified applicants?

Firefighter recruitment is a top
priority.
There are a variety of ways to recruit members, such as social media, newspaper, fliers, banners, or even adding “Now Recruiting Firefighters” magnets to your fire trucks. Part of the message is that you need to recruit every day, on every call, and at every event. Whatever your process is, hopefully you are getting eager applicants that are going to be positive and ready to serve their communities.

Background Checks 
When we think of new firefighters, we budget for their training and to equip them with the proper turnout gear and PPE. We instruct them on the department’s policies and procedures for responding to calls. But how many of you are completing a criminal background check on your new applicants?

Troy Walsh
State Statute 299F.035 requires background checks on every firefighter recruit. When you are recruiting and hiring firefighters it is important to use a formal application process, and don’t forget that prior to hiring there needs to be a background check. Adding background checks to your application process, and having a written application process, will greatly reduce the risk of hiring an individual with a criminal history and opening up the city for liability claims. To read the statute, visit https://www.revisor.mn.gov/statutes/?id=299F.035

Up Next: The New Police Liability Survey

In the meantime, stay safe and be careful.

Troy