NAID 2015 Conference session examines data breaches
Ross Federgreen, CEO and founder of CSR Professional Services Inc., Jensen Beach, Florida, addressed the issue of data breach reporting in a session at the National Association for Information Destruction (NAID) 2015 Annual Conference and Expo, Saturday, March 21.
CSR is a leading provider of data compliance solutions and services for businesses. It also provides a data breach reporting service toolkit, a patented solution available through resellers “that delivers the right information at the right time to the right regulating bodies and affected individuals in the event of a suspected or actual data breach,” CSR says on its website, www.csrps.com.
Federgreen suggested that conference attendees view themselves as information governance professionals rather than solely as information destruction professionals, saying they will perform better in business by building stronger relationships with their clients.
He said shredding is a “tangential” relationship that is provided in a vacuum. “You need to become more ingrained in the day-to-day operations of clients,” Federgreen suggested, adding that such service providers are “difficult to remove from the process.”
This strategy also helps destruction services providers avoid the race to the bottom regarding pricing, he said. While businesses prepare for natural disasters, they often fail to devote resources to data breach planning, Federgreen said. He stressed the need for such a plan, saying that 48 states have laws relating to data, while 27 states have laws pertaining to data management.
|
In Brief NAID accepts ISO audits The board of directors for the National Association for Information Destruction (NAID), Phoenix, has authorized the optional use of ISO audits as a substitute for the scheduled audits in the NAID AAA Certification Program. Unannounced random and unannounced investigatory audits will continue to be conducted by NAID auditors, according to the association. The change will have little impact in North America, NAID CEO Bob Johnson says, but it could be a considerable advantage for members in other regions where ISO audits are commonly required for other reasons. ISO auditors will have to verify with NAID that the standard was integrated and agree to provide NAID with a copy of the audit results, the trade association says.
Jayhawk File Express celebrates 20th business anniversary Topeka, Kansas-based Jayhawk File Express celebrates its 20th anniversary in 2015. Chuck Karlan founded the records storage company in 1996 with five employees. Today, Jayhawk also provides document destruction, computer backup media storage and rotation, document imaging and electronic file management. Karlan died in 2014, but his entrepreneurial spirit lives on, according to the company, which today is owned by Cheryl Creviston, who serves as president and CEO, and Tyler Conway, who serves as director of operations, as well as Art Glassman and Dave McDermott. Jayhawk File Express employs 26 people. |
Despite the growth in legislation, CSR’s data show that 63.8 percent of companies are unprepared for a breach while 37.5 percent already have had such an incident.
“There is not a single person in this room who has not had a data breach in their own company,” Federgreen said, adding that most incidents are not malicious or planned. In fact, he noted that 42 percent of incidents were the result of malice, while 30 percent resulted from human error and 28 percent arose from computer glitches.
Incident response plans are essential, he said, and should help a company restore business continuity, reduce the impact of a breach and prevent a future incident.
It’s important for companies to analyze any breaches that affect them because knowing the information that was involved helps them know if it has to be reported. “Not all breaches need to be reported,” Federgreen said, adding that the majority of breaches don’t rise to this threshold because they involve a small number of files, encrypted data or data that is not protected, he said.
The NAID 2015 Annual Conference and Expo was March 20-22 in Grapevine, Texas, at the Gaylord Texan Resort and Convention Center.
PRISM International, Data Protection Association partner on conference
PRISM (Professional Records & Information Services Management) International, Chicago, and the Data Protection Association (DPA), Nashville, Tennessee, are co-hosting the 2015 International Data Protection Conference, Oct. 7-9, at the Dallas/Plano Marriott at Legacy Town Center in Plano, Texas.
DPA President Peter D. Komarkowski says, “By having a joint conference, we are able to pool our resources into a joint conference committee and work on the best points from each conference.”
The educational program for the 2015 International Data Protection Conference is already in the works, according to the show’s producers, along with a strong lineup of speakers and networking opportunities.
“I am excited about the shared environment for this conference—it’s a win-win for all of those who attend,” says PRISM International President Chris R. Kelley, COR365 Information Solutions, Winston-Salem, North Carolina. “Combining the power and expertise of DPA and PRISM International is sure to provide the best overall experience for those participating in the 2015 International Data Protection Conference.”
The conference is targeting key employees working in data protection or media vaulting, owners or managers of related businesses seeking to add data protection as a service and sales professionals ready to expand their knowledge of data protection to more effectively represent service offerings to clients, the organizers say.
More information about the 2015 International Data Protection Conference, including the conference schedule, brochure and speakers, will be available soon at www.prismintl.org and at www.dpassoc.org.
Williams Data Management acquires Shred Masters
Williams Data Management, headquartered in Los Angeles, has acquired the mobile shredding company Shred Masters Inc., Ontario, California.
Williams Data Management says the acquisition will allow it to extend its reach into the Inland Empire region of Southern California and to offer data protection services to more small and medium-sized businesses (SMB).
“By expanding into the Inland Empire, we’re able to answer the increasing need for data protection services among a region that’s growing at a rapid pace,” says Douglas Williams, CEO of Williams Data Management. “We know the needs of local businesses, and we’re eager to gain the confidence of SMBs across the region to trust in our ability to make their business data our priority,” he adds.
Williams says the purchase of Shred Masters not only adds to Williams Data Management’s client roster but also provides a greater breadth of product offerings to the Inland Empire region. The company’s menu of additional services, from on-site mobile shredding and hard drive destruction to cloud backup and firelock vault protection, provides added value for clients who have established a relationship with Shred Masters.
Customers also have access to a data management specialist at Williams Data Management, the company notes.
“Customer service is priority one for my customers, and I’m confident that I’m placing the management of their company’s data with Southern California’s most reliable data management firm,” says Rich Martinez, former owner and president of Shred Masters. “With Williams, they’ll continue to receive the highest level of professional service with additional data protection services and expertise. It’s a win for us; but, more importantly, it’s a win for the customers.”
2-20 Family of Cos. announces promotions
The 2-20 Family of Cos., a records and information management (RIM) firm headquartered in Edison, New Jersey, has announced the promotion of Paul Martin to regional vice president of operations, eastern division, and that of George Martinez to regional vice president of operations, western region.
Martin has worked in the RIM industry for 15 years and has been with Florida-based Certified Records Management (CRM), a member of 2-20, for 10 years. He has been instrumental in CRM’s growth and continued expansion, including the transition of 300,000 cubic feet of records from CRM’s original location to its current facility without interruption of client services, according to the company.
Martin also headed up the company’s 75,000-cubic-foot transition, completed in 30 days, and has managed the integration of two acquisitions.
With the promotion, Martin will add to his responsibilities and bring his expertise to another 2-20 Family company, InfoStore Records Management, Carlstadt, New Jersey.
“My goal in my expanded role is to further uniform our operations utilizing the 2-20 Family of Cos.’ Smart Storage Solutions and ultimately provide our customers with the best service available in the record storage industry,” Martin says. “This goes far beyond on-time pickups and deliveries,” he says, to include “100 percent accuracy, accountability, advanced technology, compliance and a customer service team that exceeds expectations in every interaction. We want to be an extension of our clients’ records departments.”
Martin adds, “While I welcome my promotion, I take the additional responsibilities very seriously.”
Martinez has more than 25 years of RIM industry experience, including time with Storetrieve, 2-20’s California operation. During his time with Storetrieve, 2-20 says he has streamlined operations at the Montebello and Rancho Cucamonga locations.
With the promotion, Martinez will add Arizona Records Storage Center, Phoenix, another 2-20 company, to his responsibilities.
“Data protection, destruction, imaging, digital solutions and health information management—we are here to serve,” Martinez says.
NAID announces election results
The National Association for Information Destruction (NAID), Phoenix, has announced the results of its March 18, 2015, board of directors elections. NAID says more members voted in this election than in prior years.
Don Andriaansen, CSDS, Titan Mobile Shredding, Pipersville, Pennsylvania, was elected as president-elect of the organization.
Angie Singer Keating of Reclamere, Troy, Pennsylvania, was elected to the post of treasurer.
Don Gerard, CSDS, Land Shark Shredding, Bowling Green, Kentucky, was elected as a director.
These individuals join NAID President Steve Richards of Richards & Richards, Nashville, Tennessee, and past President Chris Isabell of iSecure, Grants Pass, Oregon, and the following directors, who were recently elected in other NAID chapters:
- Paul Hurst, Green Team Shred-Safe of Pooraka, Australia, representing NAID-ANZ;
- Amadeo Roig Casanova of Destrupack, Barcelona, Spain, representing NAID-Europe; and
- Kristjan Backman, CSDS, Phoenix Recycling, Winnipeg, Manitoba, representing NAID-Canada.
The following board members continue their terms in 2015:
- Vladimir Vasak of K2 Partners, Villanova, Pennsylvania;
- Lucas Gilmore of Gilmore Services, Pensacola, Florida; and
- Dag Adamson of Lifespan International, Denver.
The NAID board appointed former board member Eric Haas of ARMS, De Pere, Wisconsin, to serve as secretary, the position vacated by Adriaansen, who is now president-elect. The board also named Patrick DeVries, CSDS, DeVries Records Management, Spokane, Washington, as a director, filling the vacancy created by Haas. DeVries will serve the remaining year of Haas’ two-year term.
NAID is a nonprofit trade association of the secure destruction industry.
COR365 Information Solutions introduces iCOR by M-Files
Winston-Salem, North Carolina-based COR365 Information Solutions has introduced a new service that it says provides businesses with faster, easier access to their digital files, regardless of format. With iCOR™ by M-Files™, documents, MP3s and videos are stored based on what they are, rather than where they are, creating a simpler, more intuitive system, according to COR365.
“When someone needs a particular file, instead of clicking through folder after folder, they simply enter a keyword or two, and the file pops up on their screen,” COR365 explains in a news release. “And that could be any screen—iCOR can be accessed anytime, from anywhere. Storage options include cloud, on-premise or a hybrid system.”
Chris Kelley, CEO of COR365, says, “In addition to being more efficient, iCOR is scalable and affordable, so any sized business can benefit from it. In fact, clients who have opted for this new system report realizing impressive ROI (return on investment) levels in just the first year.”
Kelley and COR365 President Andy Brown say they see iCOR as the future of digital information management. “We had been looking for a more intuitive way for clients to integrate and manage all forms of information,” Brown says. “ICOR is the answer. And in today’s fast-paced business climate, providing a mobile component was critical.”
COR365 Information Solutions offers hard-copy records management, secure tape vaulting, document imaging services and shredding services.
BDRS achieves Privacy+ certification
Business Data Record Services (BDRS), based in New Brighton, Minnesota, has attained Privacy+ certification.
The voluntary Privacy+ program, owned and administered by PRISM International, Chicago, is open to companies providing commercial storage and protection of hard-copy records and offline removable computer media.
BDRS President Mark Cloutier says, “We believe that adding this certification further establishes our dedication to data security.”
BDRS has been providing secure information management services for more than 35 years.
