PRIMA’s Education Series Center (ESC) features resources developed to enhance the skill-set and increase the effectiveness of public risk management professionals.

The ESC shares information regarding fundamental risk management methodology as well as emerging trends within the profession. PRIMA members have the opportunity to learn from practitioners who are subject matter experts.
This self-paced virtual learning center is beneficial to all!

PRIMA's Insight Hour

-

PRIMA's Insight Hour

Tune into PRIMA’s Insight hour to hear risk management experts share their stories, key tools, and takeaways for risk management professionals. You have questions, they have answers! Participate in live Q&A!

PRIMA’s Insight Hour with Marilyn Rivers

Speaker:
Marilyn Rivers

Thursday, August 5th at 3pm ET

-

PRIMA’s Insight Hour with David Parker

Speakers:
David Parker 

Thursday, August 12th at 3pm ET

-

PRIMA’s Insight Hour with Margaret Spence

Speakers:
Margaret Spence

Thursday, August 19th at 3pm ET

-

PRIMA’s Insight Hour with Dean Coughenour

Speaker:
Dean Coughenour

Thursday, August 26th at 3pm ET

Dean Coughenour

Presenter: Marilyn Rivers

Marilyn Rivers is a nationally recognized public-private entity strategic risk management professional and educator who has extensive experience in delivering program development, fiscal oversight, compliance, and education tailored to meet the dynamic needs of business. She recently retired from public service with a combined thirty-five years of experience managing risk in both the public-private sectors. Marilyn is the Principal of Rivers Risk Consulting. She holds a BS in Chemistry from Clarkson and a MEd from Tufts University. Her professional designations include the CPCU, ARM and AIC. Marilyn was the recipient of the PRIMA Risk Manager of the Year in 2007. She was instrumental in designing the resurgence of PRIMA Institute and actively facilitated and designed its programming for many years. She actively provides risk mitigation services to the local non-profit community. She’s an active volunteer for multiple organizations and currently serves as the President of her Lions Club. She’s won national and international awards including the Lions International Robert J Uplinger Award (2014), Knight of the Blind (2016), and Melvin Jones Fellowship Distinguished Service Award (2018).

David Parker

Presenter: David Parker

David Parker has worked to further the practice of public risk management for over 30 years as a risk manager, regulator, and practice leader, and by actively supporting and serving on the boards of directors of both PRIMA and his local chapter. David has managed risk for state and local government, higher education, and special districts, and has worked with and supported risk managers across the country in many different types and sizes of organization and leadership philosophies. Leadership development includes the Certified Public Manager, Leadership in Police Organizations, Master Continuity Practitioner, and Senior Executives in State and Local Government programs. He has been recognized by PRIMA several times for his commitment to the practice of public risk management including PRIMA’s Certificate in Advanced Risk Management, and International Exchange and Public Risk Manager of the Year awards.

Margaret Spence

Presenter: Margaret Spence

Margaret is a transformational leadership development expert, keynote speaker, business strategist and champion for women in the C-Suite. Determined to create a glide path for diversity and inclusion in executive leadership, Margaret launched The Employee to CEO Project, a global initiative aimed at increasing the representation of women, with specific emphasis on minority women, in C-Level leadership roles. Her bold mission to empower 10,000 women, over the next five years, into executive leadership and ultimately into the C-Suite. Margaret has authored three books. Her latest book, Leadership Self-Transformation: 52 Career-Defining Questions Every High-Achieving Women Must Answer, challenges women to clarify their vision, pivot from expert to leader and build the career they want.

Dean Coughenour

Presenter: Dean Coughenour

Dean Coughenour is the Risk Manager for the City of Flagstaff and directs their Risk Management Department, managing a comprehensive risk and safety program that includes reducing risk factors, grass root integration of the risk management decision matrix, safety, insurance, litigation management, Workers' Compensation, training, and facility inspection programs. Coughenour has over 30 years’ experience in proactive Risk Management and has served on various boards and associations including Arizona Municipal Risk Retention board, City of Scottsdale Loss Trust Fund board is a past national board member of PERI (Public Entity Risk and Insurance), past loss trust fund board chair for the City of Scottsdale, past president of PRIMA National and has held various other community leadership positions. He is a frequent speaker on Risk Management topics both at national and local conferences. Serves on the national speaker bureau and is a champion for Risk Management and the employment of the Risk Management decision matrix in day to day operations of public sector entities.

Emerging Risk Virtual Training

-

Emerging Risk Virtual Training

PRIMA's Emerging Risks Virtual Training is designed to provide risk managers with the insight necessary to address issues that may currently affect their entity or that are upon the horizon. The training is now available on-demand for your viewing pleasure. Access to the entire training is free for PRIMA members and $200 for non-members. Make sure to take advantage of this PRIMA benefit and prepare your organization for what’s to come!

Preparedness is the Key to Risk Reduction and Resilience

Speaker:
Irene Navis, AICP, Managing Partner, Navis Strategis Services, LLC

This session provides a framework for preparedness that can be used by the private sector, public sector and non-profit organizations to support the reduction of risk. This session demonstrates how investment in preparedness against both natural and man-made threats and hazards minimizes recovery time and expense, and promotes resilience strategies for both organizations and their employees. The session covers three case study examples of preparedness, response and recovery in Clark County, Nevada, and offers a number of tools and strategies for minimizing risk and maximizing resiliency that can be applied to any organization.

Learning Objectives:
1. Lessons learned from Clark County, NV disaster preparedness, response and recovery
2. Tools for enhancing business preparedness and response capability
3. How emergency management, risk management and resiliency are inextricably linked

-

Law Enforcement Safety and Loss Control

Speakers:
Kurt Braatz, MPA, SPHR, Loss Control Manager, Arizona County Insurance Pool
Greg Veitch, Owner, Noble Cause Training and Development, LLC

The never ending challenges faced by risk managers and the law enforcement community
continue to evolve into 2021. This session will review new challenges brought to us by the year 2020 and will continue throughout our careers moving forward.

Learning Objectives:
1. Safety and loss control amidst COVID-19
2. A proficient understanding of police reform and safety programs

-

A Scientific Review of COVID-19 Vaccine

Speakers:
Trang Nguyen, MD, PhD, President, MedicusRx

Alexis A. Nguyen, Student, Louisana State University

This session will present the latest medical literature of COVID-19 vaccines as well as its safety and efficacy. The attendees will have a thorough understanding of the different vaccine trials, and where and how they were conducted. Explanations of the safety and efficacy data will be provided.

Learning Objectives:
1. Basic understanding of vaccine development, phases of vaccine testing, FDA approval and production to distribution
2. Population immunization and herd immunity
3. An understanding of the safety/efficacy data of the COVID-19 vaccines to help attendees make informed decision.

-

Title IX Emerging Risks and Their Impact on Public Entity Risk

Speaker:
Marilyn Rivers, CPCU, ARM, AIC, Director of Risk and Safety & Safety and Compliance Officer, City of Saratoga Springs, NY

Each of our communities have a rich fabric of diversity that is woven with multi-colored threads of different socioeconomic norms. The recently passed Title IX legislation changes the parameters for the reporting and response of alleged sexual assault and transgressions within our communities. Complexities continue to evolve regarding our society’s new normal and the expansion of how we view ourselves in the context of our community. This session will focus on creating proactive strategies to try and mitigate potential Title IX violations and environments which cultivate sexual misconduct.

Learning Objectives:
1. Understand the 2020 changes in protections of Title IX and their implications for risk programming for your organization
2. Identify a practical approach to proactively addressing and preventing potential misconduct as it pertains to Title IX within your community
3. Explore the consequences of Title IX violations, investigations and the balance of justice in determining penalties within the new parameters

Diversity & Inclusion: Insurance Industry Insights

Speaker:
Dan Myer, Director, Professional and Executive Liability Group, CRC Group

Chris Cavaliere, Partner, Shumaker

There is a growing trend of diversity-related claims under Directors and Officers insurance. During this session the speaker will discuss current diversity-related exposures and lawsuits. Attendees will learn how to proactively mitigate the risk and respond to the exposure.

Learning Objectives:
1. Understanding current diversity-related exposures & lawsuits
2. How D&O insurance responds in these situations
3. How current trends impact D&O insurance

-

Cybersecurity: What You Need to Know

Speaker:
Kelvin Coleman, Executive Director, National Cyber Security Alliance

In an increasingly interconnected world, it is important to educate individuals on cybersecurity best practices. This session will identify current threats from malicious attackers. Further, the speaker will discuss the importance of convening with partners who recognize strength in the security collective.

Learning Objectives:
1. Identify current threats from cyber malicious attackers
2. Educate individuals on cybersecurity best practice
3. Amplify the importance of convening with partners who recognize strength in the security collective

-

Addressing PTSD Among Our Heroes

Speaker:
Teresa Bartlett, MD, Senior Vice President and Senior Medical Officer, Sedgwick

Post-traumatic stress syndrome (PTSD) is showing up more frequently among our front-line heroes in the public sector. Many of our first responders and medical personnel routinely confront horrific or disturbing scenes while protecting those in the community. However, recent events across the country underscore the need to address PTSD on a much broader basis than in the past. Additionally, a person may have been the victim of assault, domestic violence, or car crash and bring associated consequences to the workplace including flashbacks or severe anxiety. This can impact the safety and productivity of that individual and those around them. This session will look at what public officials can do to identify and assist employees suffering from PTSD and what steps to take to minimize and mitigate its affect at the workplace.

Learning Objectives:
1. Describe PTSD in terms of its causes and characteristics
2. Explain how someone suffering from PTSD might manifest symptoms at the workplace and possible consequences if left unchecked
3. Share ways public officials can help those suffering from PTSD and proactive strategies to have in place at work

-

Environmental Risk Management: Weather, Climate Change and Natural Disasters

Speaker:
Ashley Bonner, Senior Risk Control Consultant, Trident Public Risk Solutions

As the Earth constantly evolves, we must change with it. We must be prepared for hurricanes, floods, fires, tornadoes and other disasters in moments of great uncertainty and limitations. We must gain knowledge that can help prevent or mitigate losses from these phenomenon. It is important to learn from other cities’ experiences, such as New Orleans, what worked and how to avoid what didn’t work by addressing: 1) how to best prepare and protect assets in advance, 2) what can and can’t be conserved, 3) how to recover and stabilize items for restoration, 4) preparing for and handling staffing concerns, and 5) security and financial resource considerations.

Learning Objectives:
1. How to best prepare to protect assets, staffing and the community
2. What assets can and can’t be conserved; recovering and stabilizing items for restoration
3. How to address financial and security needs

-

Incident Command Strategies for Crisis Communication

Speaker:
Jason Stoddard, Director of School Safety and Security, Charles County Public Schools (MD)

In an effort to effectively address an unforeseen crisis that afflicts your entity, it is imperative to maintain a clear line of communication. This will require that all affected stakeholders are abreast of the situation in order to mitigate any unfavorable outcomes that may result from the crisis. During this session, attendees will learn of the Incident Command System with the hopes of successful implementation and response in the face of a catastrophic event.

Learning Objectives:
1. General understanding of what Incident Command and the Incident Command System is
2. An understanding of how crisis leadership is rooted in everyday leadership but requires a more strategic skill set
3. An understanding of how to create and build a proactive communication plan for crisis.

PRIMA Tutorials

-

PRIMA Tutorials

Whether a newcomer to Risk Management or a longtime practitioner, the PRIMA Tutorial Series is built to enhance an understanding of how to implement common risk management policies and functions for the public agency risk manager. Contributors from across the country share their risk management strategies on specific risk topics via user-friendly videos that include real-world scenarios, step-by-step narratives and supporting documentation. The tutorials are a shared resource; use the information as it’s presented or take what you need and craft your own programs.

The Value and Purpose of a Cyber Incident Response Plan

Speakers:
Rick Jenkins, Director of Business Intelligence & Technology Services, Schools Insurance Authority
Joe Costamagna, Risk Manager, Schools Insurance Authority

Description:
During this presentation, attendees will learn how to develop a cyber incident response plan, including
discussion of a plan’s five key elements. Viewers will understand the importance of having a plan in place with well-defined roles, objectives and actions.

Click here to view the tutorial.

DE&I Fluency: How to Communicate and Apply Best Practices in the Workplace

Speaker:
Aaisha Hamid, Assistant Vice President, DE&I, Alliant Insurance Services, Inc.

Description:
To engage everyone and foster cultures of inclusion and belonging, leaders must be willing to effectively communicate and implement diversity, equity and inclusion (DE&I) best practices in the workplace. By re-visiting the fundamentals and gaining a more substantive understanding of DE&I terminology, it can become easier to operationalize the concepts in the workplace on an individual, teams and organizational level. 

Click here to view the tutorial.

Emergency Response Plans: How to Establish and Maintain Effective Communication Channels for Continuity of Operations

Speaker:
Jasmin Curtis, WSO-CSM, TSSP, Transit Safety & Training Manager, City of Greenville, SC

Description:
If an emergency happens within your organization, does your workforce know what to do? Who will manage communication with internal and external stakeholders? When you enter the recovery phase, do you know who you’ll contact to identify needed resources, total losses and acquire damage estimates? Communication and strong working relationships with both internal and external stakeholders are critical for successfully managing a crisis event and ensuring continuity of operations. This presentation will focus on the need to establish formal lines of communication for effective emergency preparedness, response and recovery.

Click here to view the tutorial.

Office Ergonomics: An Opportunity to Re-evaluate Your Office Ergonomics with Proper Workstation Set-Up

Speaker:
Bill Pudlewski, CSP, CSC, CEAS, Senior Risk Control Specialist, PMA Companies 

Description:
As a result of our nation dealing with the coronavirus, many employers will eventually be moving employees back into their corporate offices. This situation may present an opportunity to review both the ergonomic risk factors associated with “permanent” workstation set up and the keys to reducing these risks factors for the individual. This tutorial will focus on how positive outcomes can often be accomplished by making adjustments to the individual’s workstation based on a few body link segment measurements.  

Click here to view the tutorial.

Click here to view the tutorial.

Risk Transfer: Financing of Your Risks and Best Practices to Consider

Speaker:
Keith Wentz, CRM, Risk Management Director, County Commissioners Association of Pennsylvania

Description:
This presentation emphasizes key considerations and possible perils with regards to risk transfer. In addition, the presentation introduces available cost effective risk management tools and delves into the importance of understanding the review process of contracts and agreements to ensure accuracy when stating your risk transfer position. 

Click here to view the tutorial.

SAM: What You Need to Know

Speaker:
Dorothy Gjerdrum, ARM-P, Senior Managing Director, Arthur J. Gallagher & Co. 

Description:
There are multiple factors influencing the increase in sexual abuse and molestation (SAM) claims and the decrease in insurance coverage for this risk. This tutorial will explain the changing landscape of SAM claims and recommend actions you can take to protect the children in your care, as well as your entity.

Click here to view the tutorial.

School Safety Risk Management

Speaker:
Michael Trujillo, Safety & Risk Manager, Town of Vail, CO 

Description:
This tutorial elaborates on risks and response that take place at the confluence of risk management and school safety. Up for discussion will be contingency plans, questions to consider when evaluating risk management and school safety, and methods to utilize with regards to continually monitoring risks. 

Click here to view the tutorial.

Embracing Accessibility for All

Speaker:
Gloria Carvajal, ADA Coordinator, City of Miami, FL.

Speaker Biography:

Gloria is an ADA compliance coordinator with over 10 years of occupational safety and human resources experience. She has experience in regulatory compliance and has managed risk and safety for both the private and public sectors in different capacities. She earned the ADA Coordinator Training Certification and is part of the Florida ADA Network and Miami Dade County ADACP. In her role as ADA Coordinator, she oversees Title II compliance. She is tasked with ensuring that City of Miami will not discriminate based on disability in its services, programs and or activities.

Tutorial Description:

ADA sensitive training helps organizations to ensure equal opportunity is provided to people with disabilities, improving customers’ experience and fostering a more inclusive environment overall. This session is designed to outline ADA compliance requirements and increase awareness to improve customer experience.

Learning Objectives:

  1. Outline ADA compliance requirements & increase awareness to improve customer experience
  2. Learn to recognize accessibility barriers to facilities, programs, activities under Title II ADA compliance
  3. Incorporate accessibility principles and best practices to ensure inclusion and prevent disability-based discrimination

Click here to view the tutorial.

Click here to download the PPT.

Simplifying Site Inspections

Speaker:                                                  

Edward Shelton, MS, Safety Specialist, Virginia Risk Sharing Association.

Speaker Biography:

Edward has over 10 years of experience in occupational safety and health to include work in the United States Air Force, state government with Virginia OSHA, as well as local governments, schools and authorities. Edward provides guidance, training and other consulting to local governments to manage direct and indirect risk with the goal of maintaining compliance with State and Federal regulations.

Tutorial Description:

In this virtual engagement, we will take a site inspection “study guide” and apply it to the real-world. Coming from a former Virginia OSHA Inspector, you will get a first-hand look at how to look for and identify hazards in the workplace. Additionally, we will talk through the inclusion of your workforce to ensure that these inspections are not just one-off events, but rather, contribute to your organization’s culture of reducing and eliminating hazards that cause accidents, injuries and illness.

Learning Objectives:

  1. Understand what OSHA looks for
  2. Understand how to conduct inspections
  3. Involve front line employees

Click here to view the tutorial.

Click here to download the PPT.

OSINT & Surveillance Investigations

Speaker:

Matthew Gates, FCLS, Midwest Account Manager, DigiStream Investigations.

Speaker Biography:

Matthew Gates is a seasoned investigator with more than eight years of experience in the area of worker’s compensation and liability claim investigations. He is the Midwest account manager for DigiStream Investigations and travels the country meeting with and lecturing to clients in an effort to help them see a return of investment on the dollars they spend on investigations.  Matthew has a Bachelor of Science from Western Illinois University in law enforcement and justice administration and is a certified Fraud Claim Law Specialist (FCLS). His qualifications rest heavily in customer service, a strong understanding of investigations and practical methods to obtain quality results for all clients.

Tutorial Description:

Learn how social media is being used to uncover fraud as well as enhance the quality of other investigations. The session examines successful real-life cases, and fascinating trends in open source and geospatial investigations. The dynamic between OSINT and surveillance will also be examined through case study. Attendees will come away with an understanding of the investigative best practices required for a successful investigation.

Learning Objectives:

  1. Learn the differences and intricacies of various types of “intelligences,” also known as INTs.
  2. Learn how other INT’s interact specifically with OSINT
  3. Explore a number of tools and case studies in an effort to conduct efficient surveillance investigations

Click here to view the tutorial.

RFP/Bid and Contract Insurance Terms

Speaker:                                                  

Brad Stein, MPA, CPCU, ARM, AIC, Risk Manager & ADA Coordinator, City of Asheville, NC.

Speaker Biography:

Before joining the City of Asheville, Brad worked in other municipal governments, county government, and public education. He has worked with insurance pools, government agencies, and third-party administrators. He’s familiar with the challenges of human resources, insurance, safety and financial services in connection with public service. Brad earned an undergraduate degree from the University of Oregon and a master’s degree in public administration from Portland State University. He is also an alumnus of the University of North Carolina School of Government's Municipal/County Administration Program. His designations include Chartered Property and Casualty Underwriter (CPCU), Associate in Risk Management (ARM), Associate in Claims (AIC), Associate in Claims Management (AIC-M) and other Insurance Institutes designations.

Tutorial Description:

During this tutorial, the audience will understand how to incorporate risk management into entity contracting processes. This session will teach the audience how to provide risk management the opportunity to review prospective third-party activities, advise adequate risk transfer or other risk treatment accordingly and review/approve third-party COI to ensure adequate coverage.

Learning Objectives:

  1. Learn why risk management review of RFP and contract insurance terms adds value to your entity
  2. Ensure prospective service providers are aware of insurance requirements and prepared to keep/maintain adequate insurance throughout period of performance
  3. Demonstrate expectation that third-party service providers understand risk transfer and are prepared to provide financial guarantee for their service

 Click here to view the tutorial.

Loss Analysis Fundamentals for the Public Sector

Speaker:                                                

Sean Catanese, ERM Program Manager, King County, WA.

Speaker Biography:

Sean has been the ERM manager for King County, Washington since 2014. He has developed King County’s ERM program from a nascent concept into a highly-sought resource in the toolbox of decision makers across the county’s diverse agencies and well beyond. Sean has led projects to modernize the county’s risk management information system and claims intake process. He has also led the development of customer service policies to ensure transgender, non-binary and gender-diverse claimants are served with respect while ensuring their safety and privacy. Sean was recognized as PRIMA’s 2023 Public Risk Manager of the Year and is very involved in PRIMA.

Tutorial Description:

Loss analysis is the practice of examining data about adverse incidents such as tort claims and workers’ compensation claims, with the goal of understanding an organization’s history and where it may find opportunities to adjust its operations, prevent injuries and damage, and improve performance and financial stewardship. In public service, this work can have special qualities and nuances that deserve examination. In this discussion, we’ll dive into the practice of loss analysis for public sector organizations and highlight some of the specific considerations a risk manager or analyst in public service should keep in mind as they approach this important body of work.

Learning Objectives:

  1. Understand the essential steps to analyzing data specific to tort claims and workers’ compensation claims involving a public sector organization
  2. Understand the ways a loss analysis can be used to improve safe operations for a public sector organization
  3. Understand the best communication practices for sharing findings of a loss analysis for a public sector organization

 Click here to view the tutorial.

Cyber Security Toolkits

-

Cyber Security Toolkits

PRIMA's yearly Cyber Security Toolkit is created to commemorate National Cyber Security Awareness Month (NCSAM), which takes place in October.
NCSAM resources are intended to equip public risk management professionals with the necessary knowledge to understand cyber threats, protect their cyber space, and properly respond to cyber incidents.

-

Click a Year to Access its Toolkit
The National Cyber Security Alliance (NCSA) and the U.S. Department of Homeland Security (DHS) designated October as National Cyber Security Awareness Month (NCSAM). NCSAM was designed to serve as a collaborative effort among federal, state and local governments as well as non-governmental organizations, to increase awareness regarding the significance of cybersecurity and provide the necessary resources to ensure people are safe and secure online.

Do Your Part. #BeCyberSmart PRIMA’s 2024 National Cyber Security Awareness Month:

Learn with: Podcast, Infographics, Videos and White Papers

    Week 1: Vulnerability Management and Updating Your Software

    Speaker: CJ Dietzman, CISSP, CISA, Senior Vice President, Alliant Insurance Services, Inc.

    In this week's episode for National Cyber Security Awareness Month, CJ Dietzman explains the importance of updating your software and vulnerability management. He also details how third parties can provide and manage software and systems for organizations and speaks on lessons learned from handling vendor and software issues.

    Travelers Week 1 Resource:

    5 Cyber Safety Best Practices to Boost Your Cybersecurity

    Alliant Week 1 Resource:

    Data Breach Prevention: Your Comprehensive Guide

    Week 2: National Cyber Security Awareness Month: What Is It?

    Speaker: Kelvin Coleman, Executive Director, TIC Council Americas

    On this week's podcast, Kelvin Coleman (Executive Director, TIC Council Americas) provides some information regarding the inception and evolution of National Cyber Security Awareness Month. He delves into his role in shaping NCSAM as well as the utility of embracing the month, even for non-technologically focused organizations. Overall, Kelvin emphasizes the importance of the month and gives insight into future NCSAM developments.

    Alliant Week 2 Resource:

    Week 3: Phishing Schemes and Risk Management

    Speakers: Karl Miller, Assistant Vice President, Sales & Compliance, American Computer Estimating, Inc. 
    Angelo Losardo, Sales Support, American Computer Estimating, Inc.

    This week on PRIMA's NCSAM Podcast Series, Karl Miller (Assistant Vice President, Sales & Compliance, American Computer Estimating, Inc.) and Angelo Losardo (Sales Support, American Computer Estimating, Inc.) speak on phishing and its impact on risk management. Karl and Angelo share both the legal and practical definition of what phishing is and explain how it affects risk operations. The speakers also provide information regarding common phishing schemes and how to combat them.

    Week 4: The Future of the Cyber Insurance Market

    Speaker: Temo Garcia, CISR, Vice President & Team Leader, E&O/Cyber Broking, Aon

    In this episode, we chat with Temo Garcia (Vice President and Team Leader, E&O/Cyber Broking, Aon). Temo provides an overview of the cyber insurance market for public entities, highlighting the importance of strong cybersecurity measures and proactive strategies against ransomware. He discusses trends in claims, common issues in cyber insurance policies and expected pricing trends.

    Alliant Week 4 Resource:

    https://alliant.com/risk-management/risk-solutions/cyber/cybersecurity-awareness-month/?utm_source=newsletter&utm_medium=email&utm_campaign=PRIMA_NCSAM_2024

    KYND Week 4 Resources:

    The Cyber Tea Podcast presented by KYND

    How KYND Simplified Cyber Risk Management for Washington Schools

    KYND for Public Entity

    Travelers Week 4 Resource:

    How Public Entities Can Better Manage Cyber Risks

    Week 5: Cyber Security Hygiene and the Public Sector

    Speaker: Tamika Puckett, Public Sector and Education Division Leader, Willis Towers Watson

    In the final 2024 NCSAM podcast, Tamika Puckett (Public Sector and Education Division Leader, Willis Towers Watson) shares her expertise on enhancing cybersecurity in the public sector. She discusses the increasing cyber threats faced by government entities and outlines best practices, such as strong password policies, asset management and comprehensive cybersecurity training. The episode aims to raise awareness and provide valuable resources for public entities to manage and mitigate cyber risks effectively.

    The National Cyber Security Alliance (NCSA) and the U.S. Department of Homeland Security (DHS) designated October as National Cyber Security Awareness Month (NCSAM). NCSAM was designed to serve as a collaborative effort among federal, state and local governments as well as non-governmental organizations, to increase awareness regarding the significance of cybersecurity and provide the necessary resources to ensure people are safe and secure online.

    Thanks to our NCSAM partner!

    Do Your Part. #BeCyberSmart PRIMA’s 2023 National Cyber Security Awareness Month:

    Learn with: Podcast, Infographics, Videos and White Papers

      Week 1: Combating Phishing Schemes

      Speaker: Jason McMahon, Risk Management Director, Midwest Public Risk

      In this week's episode for National Cyber Security Awareness Month, Jason McMahon explains the dangers of phishing schemes and their impact on public entities. He also details how bad actors use social engineering techniques to manipulate individuals into responding to phishing attempts and methods used to address the attacks.

      How to Protect Your Company from Business Email Hacks – Article & Video

      Week 2: Multifactor Authentication and Security

      Speaker: Kirstin Simonson, AVP - Cyber Lead, Travelers Global Technology, Travelers

      In this podcast episode, Kirstin Simonson talks about the significance of multi-factor authentication (MFA) for public entities. She emphasizes that passwords alone are not enough, as they can be easily compromised. Kirstin also discusses the costs and damages associated with cyber breaches and highlights the importance of a comprehensive cybersecurity strategy.

      How Multifactor Authentication (MFA) Can Help Protect Against Cyber Threats – Article & Video

      Week 3: Cyber Insurability and Risk Management

      Speaker: CJ Dietzman, Senior Vice President, Alliant Insurance Services, Inc.

      In this podcast episode, C.J. Dietzman discusses the current insurance market in the public sector and the cyber threats that public entities may face. He highlights the importance of developing and testing incident response plans to effectively handle cyber attacks.

      9 Key Elements of a Data Security Policy – Infographic

      Week 4: Utilizing Complex Passwords and Key Cyber Security Controls in Public Entities

      Speaker: Bryan Hurd, Managing Director, Chief of Office, Seattle, Aon 

      In this podcast episode, Bryan Hurd discuss the importance of password complexity in public entities. He explores the evolution of passwords and highlight the need for stronger security measures beyond passwords. Bryan provides insights into password complexity rules and emphasizes the risks associated with password expiration and password vaults.

      The National Cyber Security Alliance (NCSA) and the U.S. Department of Homeland Security (DHS) designated October as National Cyber Security Awareness Month (NCSAM). NCSAM was designed to serve as a collaborative effort among federal, state and local governments as well as non-governmental organizations, to increase awareness regarding the significance of cybersecurity and provide the necessary resources to ensure people are safe and secure online.

      Thanks to our NCSAM partner!

      Do Your Part. #BeCyberSmart PRIMA’s 2022 National Cyber Security Awareness Month:

      Learn with: Podcast, Infographics, Videos and White Papers

        Week 1: Cyber Security: Identifying & Responding to Current & Future Threats

        Speaker: Thomas Bullock, Director of Education and Training, Virginia Risk Sharing Association (VRSA)

        On this week’s NCSAM Podcast, Thomas Bullock, teaches us how to identify and respond to current and future cyber security threats. He describes why a cyber security incident response plan is necessary, who you should include in your response team, who you need to notify and the four phases to the most effective response plans.

        Courtesy of Travelers

        Enable Multi-Factor Authentication

        How Multifactor Authentication (MFA) Can Help Protect Against Cyber Threats – Article & Video

        Week 2: Cyber Security Claims & Preventative Strategies

        Speaker: Jason McMahon, Risk Management Director, Midwest Public Risk

        On this podcast, Jason McMahon, Risk Management Director for Midwest Public Risk, provides insight and preventative strategies with regards to addressing cyber incidents. He emphasizes the importance of educating your staff and why having established protocol is necessary, as no software or hardware can fully prevent certain aspects of human nature.

        Week 3: The Cyber Security Landscape: 2021 and Beyond

        Speaker: Colette Klier, Senior Manager, Cyber Risk Services, Sedgwick

        This week, Colette Klier speaks on the current landscape of cyber security while revealing developments that have taken place within the past year, current trends and how they'll evolve in the future. She emphasizes how every institution should focus on identifying their vulnerabilities and testing their defenses.

        Week 4: Cyber Insurance and Mitigating Risks

        Speaker: Chetan Bhatia, Managing Director, Aon Cyber Solutions

        Chetan (Che) Bhatia, Managing Director, Aon Cyber Solutions, elaborates on the importance of cyber insurance in mitigating cyber risk. He discusses how the last few years have transitioned from prioritizing accessibility with regards to remote work to tapering attacks based off of cyber insurance carriers.

        The National Cyber Security Alliance (NCSA) and the U.S. Department of Homeland Security (DHS) designated October as National Cyber Security Awareness Month (NCSAM). NCSAM was designed to serve as a collaborative effort among federal, state and local governments as well as non-governmental organizations, to increase awareness regarding the significance of cybersecurity and provide the necessary resources to ensure people are safe and secure online.

        Thanks to our NCSAM partner!

        Do Your Part. #BeCyberSmart PRIMA’s 2021 National Cyber Security Awareness Month:

        • October 4thBe Cyber Smart
        • October 11thFight the Phish
        • October 18thEmerging Trends in Cyber Risk Management
        • October 25thCybersecurity First

        Learn with: Podcast, Infographics, Videos and White Papers

          Week 1: Be Cyber Smart

          Speaker: Souwei Ford, Senior Vice President, Willis Towers Watson

          On this week’s NCSAM Podcast, Souwei Ford kicks off the series by delving into the significance of cyber security and frameworks to implement to ensure systems security. Listeners will learn how to vet cyber security vendors and select insurance that best fits your entity.

          Courtesy of Travelers

          Webinar: Breaking the Chain of Cyber Attacks Webinar

          Week 2: Fight the Phish

          Speaker: Jennifer Cook, Director, Marketing and Communications, National Cyber Security Alliance

          On this week’s PRIMA NCSAM Podcast, Jennifer Cook will share tips to spot and address phishing attempts.

          Courtesy of Travelers

          Full Article With Video: How to Protect Your Company from Business Email Hacks
          Video: Gone in a Keystroke: Inside a Business Email Hack
          Interactive: Cyber Threats are Everywhere
          Article: Cyber Security Training for Employees

          Week 3: Emerging Trends in Cyber Risk Management

          Speaker: Richard Spiers, Risk Management Consultant, Spiers Consulting, LLC

          On this week’s PRIMA NCSAM podcast, Richard Spiers delves into emerging cybersecurity risks. Further, he discusses methods cyber criminals use to implement ransomware, reasons why cyber criminals target public entities, practices that can be utilized to protect your storage facilities and more.

          Courtesy of Travelers

          Infographic/article with video: How Multifactor Authentication (MFA) Can Help Protect Against Cyber Threats
          Video: Why Implement Multifactor Authentication
          Article: 5 New Cyber Threats: Prepare to Defend Your Business

          Week 4: Cybersecurity First

          Speaker: Sarah Creighton, Enterprise Risk Program Manager, Eugene Water and Electric Board

          On this week’s PRIMA NCSAM podcast, Sarah Creighton speaks on cybersecurity best practices and her personal experiences implementing cybersecurity within her entity.

          Courtesy of Travelers

          The National Cyber Security Alliance (NCSA) and the U.S. Department of Homeland Security (DHS) designated October as National Cyber Security Awareness Month (NCSAM). NCSAM was designed to serve as a collaborative effort among federal, state and local governments as well as non-governmental organizations, to increase awareness regarding the significance of cybersecurity and provide the necessary resources to ensure people are safe and secure online.

          Thanks to our NCSAM partner!            

          Do Your Part. #BeCyberSmartPRIMA’s 2020 National Cyber Security Awareness Month:

          • October 5th –If You Connect it, Protect it
          • October 12th –Securing Devices at Home and Work
          • October 19th –Securing Internet –Connect Devices in Healthcare
          • October 26th – The Future of Connected Devices

            Week One: If You Connect it, Protect it

            Speaker:
            Ben Scribner, NCSAM Lead, Cybersecurity and Infrastructure Security Agency (CISA)

            Courtesy of Travelers

            Article: The Growing Threat of Ransomware Attacks on the Public Sector
            Video and Infographic: What is the Current Ransomware Landscape?
            Article: Password Security Tips


            Week Two: Securing Devices at Home and Work

            Speaker:
            Noel Kyle, ICT Supply Chain Initiative Manager for the Cybersecurity and Infrastructure Security Agency (CISA)

            Courtesy of Travelers

            Infographic: 2020 Cyber Risk Index
            Video: How to Protect Your Organization from Business Email Hacks
            Webinar: Risks While Working Remotely


            Week Three: Securing Internet - Connect Devices in Healthcare

            Speaker:
            Josh Corman, Senior Special Advisor, Cybersecurity and Infrastructure Security Agency (CISA)

             

            Courtesy of Travelers

            Infographic: Medical and Healthcare IoT
            Video: Internet of Things


            Week Four: The Future of Connected Devices

            Speaker:
            Toni Benson, Deputy Associate Director, Cybersecurity and Infrastructure Security Agency (CISA)

             

            Social Media Safety

            Speaker:
            Brian Scully, Chief, US Department of Homeland Security's (DHS) Countering Foreign Influence Task Force

            -

            Learn more about social media safety:

            Article: Captured on Video: Managing the Risks to Law Enforcement, Security Personnel and Other Employees
            Infographic: 9 Key Elements of a Data Security Policy

            -

            Phishing Threat

            Speaker:
            Kelly Thiele, Information Security Analyst, DHS - Led the Cybersecurity and Infrastructure Security Agency's Phishing Campaign Assessment

            -

            Learn more about phishing threats:

            Interactive: Cyber Threats are Everywhere
            Article: Cyber Security Training for Employees

            -

            Safely Obtaining and Storing Data/Information from the Public

            Speaker:
            William Corcoran, Privacy Analyst, Cybersecurity and Infrastructure Security Agency, US Department of Homeland Security

            -

            Learn more about safely obtaining and storing data:

            Quiz: Cyber Risk Pressure Test - Put your network security to the test
            Article: How Smart Cities Prepare for Technology Infrastructure Risks

            -

            eCommerce Risk: Protect Your Transactions

            Speaker:
            Daniel Eliot, Director of Education & Strategic Initiatives for the National Cyber Security Alliance

            -

            Learn more about eCommerce risk:

            Infographic: 2019 Travelers Risk Index: Cyber
            Video: 5 Types of Cyber Criminals and How to Protect Against Them
            White Paper: Building Resilience to Cyber Risk

            -

            Preparing for and Responding to a Cyber Attack

            Speaker:
            David Zito, Deputy Section Chief of Host Forensics, Cybersecurity and Infrastructure Security Agency

            -

            Learn more about Cyber Attacks:
            Video: How to Protect Your Company from Business Email Hacks
            Quiz: Boost Your Cyber IQ
            Article: Crisis Communications Planning for a Data Breach

            -

            Essential Elements of Public Entity Loss Control

            -

            Essential Elements of Public Entity Loss Control

            This five-part webinar series covers developing, implementing and improving a loss control program. Seasoned risk management practitioners impart their knowledge in an effort to assist in proactively analyzing and addressing potential exposures within your entity.

            LC101: Loss Control Mission & Philosophy

            There’s no question that an effective loss control effort is an essential step in the risk management process. All too often, the risk manager attempts to launch loss control & safety programs before substantially defining the “why”… in other words, knowing the mission of the effort, and fully understanding the business philosophy behind that mission. This session is the first of 5 essential loss control training topics/webinars and highlights the need to “get your thinking right” and then establish your program. This webinar examines the need to build a framework for success and then identifying the people that can help accomplish the mission. You will learn how to prioritize your efforts and work to identify root causes of accidents.

            Speaker:
            Michael Fann, ARM-P, MBA, Director of Loss Control, Public Entity Partners

            -

            LC102: Identify & Analyze Exposure to Loss

            Establishing an effective approach to identification and analysis of your entity’s exposure to loss is an important step in developing or improving your loss control program. This webinar is the second of five essential loss control training topics/webinars, and will assist you in organizing your approach to analyzing both loss exposures and program controls that exist in your entity. Cities, counties and most public organizations are involved in, and responsible for, widely diverse operations. As a result, the task of analyzing exposures ranging from law enforcement and first responders, to recreation and social services, can oftentimes feel overwhelming. This webinar discusses a framework and system for organizing your approach and for simplifying your analysis.

            Speaker:
            Don Leonard, National Director, Public Sector Risk, Travelers

            -

            LC103: Examine & Select Your Loss Control Alternatives

            Once you have identified your entity’s exposures to loss, the next step in the process is to examine and select the loss control alternative that will meet your needs and reduce the entity’s risk of loss. This session is the third of five essential loss control training topics/webinars and will use real-life examples to walk through the examination and selection process of available loss control alternatives.

            Speaker:
            Amy Larson, Esq., Risk & Litigation Manager, City of Bloomington, MN

            -

            LC104: Implement Your Selected Loss Control Technique

            The loss control alternatives to help reduce your entity’s risk exposure have been chosen. Now what? This session is the fourth of five essential loss control training topics/webinars and will continue to use the prior real-life examples and the selection process from LC 103 and discuss how to implement the loss control alternatives to effectively reduce the entity’s risk exposures. Implementation will include developing a culture of safety and safety committee involvement as well as education and training ideas.

            Speakers:
            Amy Larson, Esq., Risk & Litigation Manager, City of Bloomington, MN
            Michael Fann, ARM-P, MBA, Director of Loss Control, TML Risk Management Pool

            -

            LC105: Monitor & Improve Your Loss Control Results

            The fifth and final webinar of the series begins with strategies on setting practical risk management goals. The session then explores the role of data analytics and offers ideas and suggestions for public entities new to analysis to those using advanced tools and benchmarking. We know that what gets measured gets done, but the trick is to create easy to read and efficient scorecards that report on progress at predetermined milestones. Along the way, it is important to discern the impact of loss control actions on actual loss performance. The webinar concludes with tactics to evaluate results against the plan and how to make adjustments along the way, including celebrating your success.

            Speakers:
            Jack Aspen, Vice President, Risk Control Services, PMA Companies

            -

            -

            Loss Control Q&A Webinar

            This webinar shares key takeaways from PRIMA's Loss Control Series. Further, PRIMA's Loss Control Task Force members respond to questions from the audience.

            -

            Pandemic & Coronavirus Resources

            -

            Pandemic & Coronavirus Resources

            As we monitor the ever-evolving COVID-19 situation, these resources will provide guidance on preventing the spread of the virus, appropriate occupational health measures and recommended national and international protocols.

            The Impact of COVID-19 on Public Risk Management: How Do We Move Forward?

            December 3, 2020 - Public Risk Management Association

            -

            Virtual COVID-19 Reopening Task Force Roundtable

            July 16, 2020 - Public Risk Management Association

            -

            COVID-19 Recovery: A Five-Step Process to Returning to the Workplace

            May 13, 2020 - Gallagher

            -

            COVID-19: Managing the Reopen

            May 7, 2020 - Public Risk Management Association

            -

            PRIMA Talk Goes Live! The Risk Management Response to COVID-19

            April 9, 2020 - Public Risk Management Association

            -

            2019 Novel Coronavirus: Public Health Legal Preparedness

            February 18, 2020 - American Bar Association

            -

            COVID-19 Re-Opening the Economy

            May 2020 - PRIMA

             

            Appendix C - D (OSHA Respirator Recovery Questionnaire and Respiratory Form)

            May 13, 2020 - OSHA

            -

            Sample Planning Guide from PRIMA Task Force

            May 13, 2020 - Lockton

            -

            Workplace Safety Planning Guide

            May 12, 2020 - Lockton

            -

            Gallagher COVID-19 Return to Workplace Guide

            May 11, 2020 - Gallagher

            -

            PPE Hazard Assessment Form

            May 8, 2020 - Duke Safety Office (based on OSHA guidelines)

            -

            AON COVID-19 Business Recovery: Decision-Making Tool Kit

            May 5, 2020 - Aon

            -

            Addressing COVID-19 in the Workplace

            August 18, 2020 - Public Risk Management Association

            -

            Medical Treatment & Costs Associated with COVID-19

            May 26, 2020 - Public Risk Management Association

            -

            Keeping Up With First Responder Presumption Laws

            May 04, 2020 - Public Risk Management Association

            -

            Follow-up Podcast: Q&A with Public Risk Managers Responding to COVID-19

            April 22, 2020 - Public Risk Management Association

            -

            Tips and Resources to Manage through the Coronavirus Crisis

            March 14, 2020 - Public Risk Management Association

            -

            Coronavirus: Preventative Workplace Infection Control Measures

            March 11, 2020 - Public Risk Management Association

            -

            Coronavirus Pandemic Preparedness from a Medical Perspective

            March 9, 2020 - Public Risk Management Association

            -

            The Safety Professional’s Role in Planning for a Pandemic

            March 2, 2020 – American Society of Safety Professionals

            -

            Guide on Preparing for a Pandemic

            February 5, 2020 - Ready.gov

            -

            Timeline: How the new coronavirus spread

            March 3, 2020 - World Health Organization

            -

            Coronavirus: How Local Officials and Emergency Managers Respond

            February 28, 2020 - Govtech

            -

            Coronavirus disease (COVID-19) advice for the public: Myth busters

            World Health Organization

            -

            Money, Money, Money: What's at Stake if Olympics Fall Victim to Coronavirus

            March 3, 2020 - The New York Times

            -

            Be Prepared but Don't Panic: Health Departments Respond to Coronavirus

            March 2, 2020 - Governing

            -

            The Best And Worst Travel Insurance Companies

            August 18, 2018 - Forbes

            -

            Cleaning and Disinfecting During and After a Pandemic

            May 13, 2020 - Guidelines - Travelers

            -

            FEMA & Coronavirus (COVID-19) Response

            March 2020 - Downloadable Help Document - Arthur J. Gallagher

            -

            Coronavirus Disease 2019 (COVID-19) Situation Summary

            March 3, 2020 - Situation Summary - Center for Disease Control (and Prevention)

            -

            Guidance for Businesses and Employers to Plan and Respond to Coronavirus Disease 2019 (COVID-19)

            February 26, 2020 - Resource - Center for Disease Control (and Prevention)

            -

            World Health Organization (WHO) Q&A on Coronavirus

            February 23, 2020 - FAQ - World Health Organization

            -

            Value of Risk Management Program

            -

            Value of Risk Management Program

            Composed of five modules, this webinar series is designed to illustrate how risk management is a necessary tool to advance the mission and achieve the vision within public entities.
            -
            Critical components required for establishing a constructive risk management atmosphere, such as effective communication and risk tolerance, are covered.

            Module 1: Introduction

            This introductory webinar is designed to deliver some perspective to the upcoming series. Findings of a recent PRIMA needs assessment survey will be provided, followed by a discussion of modern day disruptors that are reshaping demand in the public entity risk management practice area. The next four modules have been designed to respond to these perceptions and environmental disruptors, and if utilized, can set changes in motion within your own organization and help to establish your program’s desired brand identity.

            Attendee Takeaways:
            • How to use data and visual tools to develop a clearer understanding of risk and its costs
            • How to identify risk appetite and tolerance levels that are agreed upon and create accountability
            • How to show the maturity of a risk management program that can then evolve as part of the strategic planning process
            • How to use effective branding strategies, communication strategies and change management tactics to effect positive change

            Module 2: Total Cost of Risk

            The Total Cost of Risk, or TCOR, is just one of the tools that can be utilized to begin the process of communication with executive management. The aim of TCOR is to help enhance the organization’s decision-making process based upon its goals and correlate that process with the risks and costs associated with them. In this webinar, the speakers will present the methodology and framework associated with TCOR, as well as recommended data and sources.

            Attendee Takeaways:
            • Recognize how benchmarking can be used as a valuable communication tool
            • Different methods of presenting TCOR based on various programs
            • The importance of correlating data, whether qualitative or quantitative in nature, against activities over time

            Module 3: Risk Maturity Models

            Risk maturity models are an additional communication tool used to demonstrate the efforts and progress that are linked to the management of risk within the organization. The speakers will introduce broader reporting methodologies to depict the risk program’s maturity status by providing a variety of models that allow for flexible and graphic measurement of success.

            Attendee Takeaways
            • The purpose of using a risk maturity model: what it is, why it is important and how it can be used
            • The various visual forms of a maturity model and the manner in which they can be used with other reports
            • The categories of data and progress to track using a risk maturity model

            Module 4: The Risk Appetite and Risk Tolerance Framework

            The risk appetite and risk tolerance framework is a critical part of the risk assessment process. During this webinar, the speakers will teach you how to provide another dimension to your program by engaging upper management and by setting clear expectations in an effort to promote accountability.

            Attendee Takeaways:
            • Define risk appetite and risk tolerance
              Simplify complex information into actionable information
            • Discuss how to embed processes into existing organizational programs and reporting
            • Provide examples of lessons learned and sample dashboard reports

            Module 5: Strategies for Communication and Change Management

            By this webinar, you will be familiar with TCOR, maturity models and the risk appetite and tolerance framework. This newly equipped knowledge can be used to establish the value of risk management and provide meaningful communication with stakeholders. Since most of the strategies up to this point will require some degree of organizational adaptation, you will likely require some tactics for successful implementation. The speakers will share some methods that they have used to support and synergize their programs by infusing them with a surge of strength and resiliency.

            Attendee Takeaways:
            • How to create a risk management brand identity and “top-of-mind” awareness
            • How to take advantage of various communication vehicles based upon the target audience
            • How to plan for change using your champions as teams

            Grace Crickette Taylor

            Presenter: Grace Crickette Taylor

            As the vice chancellor for administrative affairs at UW-Whitewater, Grace is focused on finance, project management and team building. She is an accomplished administrator, financial executive, chief risk officer and chief compliance officer with an exceptional record of success. Among the fields in which she has garnered her achievements are institutional strategic business planning, finance and budgeting, administration and operations management, investment and business growth, as well as governance and risk management for the world’s #1 and #2 ranked public universities and health systems.

            Bonnie Kolesar

            Presenter: Bonnie Kolesar

            Bonnie’s background includes an impressive 25-year career in risk management, having served as risk manager to local, state and higher education entities. As a gubernatorial appointee, she was charged with and successfully developed a full-service program for California’s largest agency, the Department of Corrections and Rehabilitation.

            Her focus has recently shifted to independent risk consulting, serving a broad range of clients including law firms, public entities, national educational programs and corporate start-ups.