Best Practices for Public Sector Agency Data Breaches
Walter Hoffman
Vice President, Public Sector, Sontiq (a TransUnion Company)
In this podcast episode, Walter Hoffman explores the risks associated with public sector data breaches, including financial, reputational and operational impacts. He advises on post-breach best practices, like employee training for fraud prevention and working with global response partners for legal compliance. The episode also delves into the MOVEit breach's consequences for public entities and recommends steps for affected organizations, including forensic investigations and protective measures.
*The views and opinions expressed in the Public Risk Management Association (PRIMA) blogs/podcasts are those of each respective author/speaker. The views and opinions do not necessarily reflect the official policy or position of PRIMA.*
Walter Hoffman
Vice President, Public Sector, Sontiq (a TransUnion Company)
Summary of Qualifications
Walter is an accomplished strategy executive with a history of building and nurturing mutually beneficial engagements across the government sector. He is an acknowledged thought leader in personal identity protection, breach readiness, breach response, data analysis and emerging technology. A skilled communicator, Walter has a strong track record of client-centered engagement with entities across the public sector vertical, from public universities to local municipalities.
Responsibilities
Walter builds relationships with both federal and SLED government organizations, helping them develop new strategies for personal identity protection, breach readiness and breach response.
Business Experience
Walter has held senior leadership positions with Fiserv, Equifax, LendingTree, Appraisal.com, Greenwich Associates, Javelin Strategy & Research, Hoffman Advisory Group and numerous start-ups.
Professional Affiliations
Walter is a mentor with the Sellinger School of Business Mentorship Program.
Education
Walter has an MBA from Loyola University of Maryland and a BA in Economics from Williams College.
You Might Also Be Interested In
Validating Your SOV: The Importance of Data
Thomas Logan
Risk Manager, PhilaPort
Anthony DiBernardino, CPCU
National Public Entity & Education Vertical Leader, USI Insurance Services
In this podcast, we're joined by Thomas Logan and Anthony DiBernardino. Together, they discuss the crucial process of validating statement of values for insurance purposes. They highlight the importance of accurate property valuations, explain the detailed assessment of building values, and emphasize the impact on insurance coverage and pricing. By understanding these factors and working closely with brokers and carriers, organizations can secure the coverage they need within their budget.
*The views and opinions expressed in the Public Risk Management Association (PRIMA) blogs/podcasts are those of each respective author/speaker. The views and opinions do not necessarily reflect the official policy or position of PRIMA.*
Thomas Logan
Risk Manager, PhilaPort
Tom is risk manager for PhilaPort, which is the fastest growing port in the country and one of the largest and oldest shipping areas in the United States which dates back to its original charter granted by William Penn in 1701. The port is a major center of maritime industrial commerce and it was also designated a strategic military port by the Department of Defense. The port manages diverse services from 15 locations along the Delaware River. Tom manages a complex portfolio of risk for the port. Before joining the port, his diverse career included working in leadership positions with carriers, agents and other commercial organizations in risk management. Tom is a graduate of West Chester University and lives in the Philadelphia area.
Anthony DiBernardino, CPCU
National Public Entity & Education Vertical Leader, USI Insurance Services
Anthony is a partner and leads the USI National Public Entity and Education Practice. Anthony joined USI after 25 successful years with global insurance brokers and insurance companies. He has held various local, regional, and national positions leading clients, broking and industry verticals. His responsibilities included leadership of all aspects of the commercial lines business including sales, strategic account management and carrier relations. Anthony consults with senior executives to understand their organizations and develops solutions to various enterprise risk issues. He is an expert in alternative risk transfer products. Anthony also has extensive experience in the insurance brokerage industry including analytics, program design and coverage, project insurance, enterprise risk management, safety, and claims. Anthony graduated from St. Joseph’s University as a Presidential Scholar with a Bachelor of Arts in economics and politics.
You Might Also Be Interested In
Navigating Law Enforcement Liability
Dan Foster, CPCU, ARM-P, CSP
Casualty Loss Control Expert, Munich Re
Thanh Hoang
Public Entity Underwriter, Munich Re
In this episode, we chat with Dan Foster and Thanh Hoang on law enforcement liability. They examine recent changes in law enforcement, underwriting challenges, and strategies for securing favorable liability terms. The discussion highlights the impact of the pandemic, regulatory shifts and social factors on law enforcement practices and liability risks. Dan and Thanh offer advice on managing risk through updated policies, compliance, training and transparency.
*The views and opinions expressed in the Public Risk Management Association (PRIMA) blogs/podcasts are those of each respective author/speaker. The views and opinions do not necessarily reflect the official policy or position of PRIMA.*
Dan Foster, CPCU, ARM-P, CSP
Casualty Loss Control Expert, Munich Re
Dan serves as the casualty loss control expert for Munich Re Specialty Insurance. He is responsible for overseeing casualty loss control services for all MRSI programs and insurable interests. He serves as an internal resource for underwriting, program administration, product development and marketing.
Dan has over 23 years of experience in public sector insurance and pooling for entities such as cities, counties, schools, utilities and more. In addition to loss control, Dan also has experience in program administration, workers’ compensation self-insured fund management and claims administration.
Dan has a Bachelor of Science degree in business from the University of Southern Indiana and has certifications in CPCU, ARM-P and CSP.
Thanh Hoang
Public Entity Underwriter, Munich Re
Thanh serves as the subject matter expert for municipalities and underwriter for Munich Re Specialty Insurance’s Public Entity Risk Solutions team. Thanh joined Munich Re in 2016 as a public entity underwriter. Thanh started his insurance career at Liberty Mutual in 2002, where he worked in national market claims and middle market commercial underwriting. He received the CPCU designation in 2005 and earned a bachelor’s degree in economics from Pitzer College. He holds an MBA from the University of California, Berkeley.
You Might Also Be Interested In
The Do’s and Don’ts of the RFP Process
Robert Bookhammer, ARM-P, CSRM
Senior Vice President/Partner, USI Insurance Services, LLC
In this podcast episode, we discuss the topic of request for proposal (RFP) do's and don'ts with guest Robert Bookhammer. Robert emphasizes the importance of clear objectives, stakeholder involvement, and adherence to rules in the RFP process for public entities. He discusses the need for comprehensive RFP documents, including legal forms, coverage specifications, evaluation criteria, and how the use of electronic RFP technology is highlighted for its efficiency. This episode covers the evaluation of RFP responses, the significance of vendor interviews, and the award process, stressing transparency and feedback to enhance the entity's reputation and the overall success of the RFP process.
*The views and opinions expressed in the Public Risk Management Association (PRIMA) blogs/podcasts are those of each respective author/speaker. The views and opinions do not necessarily reflect the official policy or position of PRIMA.*
Robert Bookhammer, ARM-P, CSRM
Senior Vice President/Partner, USI Insurance Services, LLC
Robert is a senior vice president for USI in the USI Dallas office. He is a national subject matter specialist for the public entity and higher education verticals of USI. Robert specializes in complex layered and quota share property placements, specific and aggregate excess casualty placements, risk management consulting, and alternative risk transfer program design and placement. He is a licensed TX risk manager and attained the ARM-P & CSRM designations during his tenured career.
You Might Also Be Interested In
Improving Transparency and Accountability in Public Safety
Greg Zarotney
Vice President, Risk Control, Tokio Marine HCC
In this podcast episode, Greg Zarotney discusses enhancing transparency and accountability in public safety. Greg explains that both concepts involve internal and external elements, with transparency focusing on open leadership and clear policies, while accountability emphasizes responsibility at all levels. He identifies agencies under federal consent decrees and progressive entities as early adopters. He suggests improving internal rules, public information access, accreditation for transparency, consistent policy enforcement, performance evaluations and civilian oversight for accountability. Greg also addresses the financial implications of lawsuits on agencies and the importance for insurers to promote these values to mitigate risks and maintain profitability.
*The views and opinions expressed in the Public Risk Management Association (PRIMA) blogs/podcasts are those of each respective author/speaker. The views and opinions do not necessarily reflect the official policy or position of PRIMA.*
Greg Zarotney
Vice President, Risk Control, Tokio Marine HCC
Greg is a licensed attorney and vice president of risk control for Tokio Marine HCC, where he leads a diverse team of risk control professionals charged with identifying risk exposures and working in partnership with the insured public entities to mitigate risks and reduce claims. Greg retired from the Michigan State Police in 2020 after serving for 26 years. During his tenure at the MSP, Greg served as the department’s director of policy and chief of staff where he had operational oversight of the department’s public affairs, government relations, risk management, litigation coordination, internal affairs and human resources.
You Might Also Be Interested In
Confessions of a High Functioning Professional with Chronic Anxiety
Leslie Whitten
Partner, Chartwell Law
In this episode, Leslie Whitten, shares her lifelong struggle with chronic anxiety and the various strategies she employs to manage it as a high-functioning professional. She discusses the accidental discovery that medication prescribed for weight loss significantly reduced her anxiety and addresses the stigma around mental health treatment. Leslie advocates for trying different methods to combat anxiety, such as yoga, exercise, sunlight exposure, breathing exercises and meditation. She also emphasizes the importance of diet, sleep quality, and incorporating "happy foods" to improve mental well-being. The use of fitness trackers and the impact of physical activities on anxiety are also explored. The episode concludes with a reminder to prioritize self-care and explore personal strategies for managing anxiety.
*The views and opinions expressed in the Public Risk Management Association (PRIMA) blogs/podcasts are those of each respective author/speaker. The views and opinions do not necessarily reflect the official policy or position of PRIMA.*
Leslie Whitten
Partner, Chartwell Law
Leslie focuses her practice on workers’ compensation, cybersecurity and information privacy. She represents large self-insured companies, insurance carriers, businesses and government entities operating in South Carolina. Her clients span across industries that include retail, hospitality, education, health care and finance. Leslie handles workers’ compensation claims from start to finish. Leslie received Martindale-Hubbell’s AV Preeminent® Judicial Edition, which is the highest rating an attorney can receive from their peers for both her legal ability and ethical standards.
You Might Also Be Interested In
Reducing Police Claims: Building Bridges Together
Chief Terry Nichols (ret.)
Director of Business Development and Grant Management, Wrap Technologies
In this PRIMA podcast episode, Terry Nichols discusses how technology can reduce police claims and improve law enforcement practices. Terry highlights the role of insurers in encouraging law enforcement agencies to adopt best practices and use technology to mitigate risks. He provides examples of technologies such as GPS darts, devices to disable a vehicle's electrical system, and non-pain inducing devices like the BolaWrap remote restraint device. Nichols also discusses the consequences for agencies that do not adhere to best practices, including increased insurance premiums or loss of coverage.
*The views and opinions expressed in the Public Risk Management Association (PRIMA) blogs/podcasts are those of each respective author/speaker. The views and opinions do not necessarily reflect the official policy or position of PRIMA.*
Chief Terry Nichols (ret.)
Director of Business Development and Grant Management, Wrap Technologies
Summary of Qualifications
Terry retired from the Seguin, TX Police Department in June 2022 after serving 33 years in law enforcement in Texas. During his career, he worked in various assignments including patrol, narcotics, SWAT, investigations, training and administration. Terry is a published author and a nationally recognized expert in active shooter/threat response and training. As the chair of Officer Safety Committee for the Texas Police Chiefs Association, Terry worked closely with the TML Risk Pool on officer safety strategies, programs and partnerships. He also has extensive experience in all aspects of grant development and management.
Responsibilities
Terry currently works on strategic business initiatives and partnerships with Wrap Technologies, introducing and expanding the BolaWrap Remote Restraint Device and Wrap Reality products. This includes managing partnerships with the Arizona Municipal Risk Retention Pool and other insurance/risk pool associations. He is responsible for updating all training curriculum and instructing courses. Terry also speaks at conferences, authors articles and develops curriculum on contemporary police use of force issues, de-escalation, force avoidance, and technology related to the use of force.
Business Experience
- San Marcos (TX) Police Department 1988 - 2010. Retired at rank of Commander leading the Criminal Investigations Division and Hays County SWAT Team.
- Texas State University Advanced Law Enforcement Rapid Response Training (ALERRT) program 2010 - 2016. One of three founding members of the internationally recognized and national standard for active shooter training and research program. Served as Director of Curriculum Development and Assistant Director.
- Brownwood (TX) Police Department 2016 - 2019. Served as Chief of Police responsible for all aspects of full-service municipal police department and regional 911/Dispatch center.
- Seguin (TX) Police Department 2019 - 2022. Served as Chief of Police responsible for all aspects of full-service municipal police department in a fast growing community.
- Wrap Technologies (AZ) 2022 - Current. Serve as Director of Business Development and Grant Management.
Professional Affiliations
- International Association Chiefs of Police (IACP)
- Texas Police Chiefs Association (TPCA)
- National Tactical Police Officers Association (NTOA)
Education
- Bachelor of Science, Southwest Texas State University (now Texas State University) - 1991
- Master of Science, Administration of Criminal Justice, Southwest Texas State University - 1997
You Might Also Be Interested In
Applying Data-Driven Risk Management
Dan Foster, CPCU, ARM-P, CSP
Casualty Loss Control Expert, Munich Re
In this podcast episode, Daniel Foster discusses data-driven risk management. He explains how risk managers can utilize various data sources, such as loss data, industry benchmarks, workplace surveys, biometrics, and telematics, to gain insight into loss drivers and mitigation strategies. He emphasizes the importance of data accuracy and relevance, and shares a case study where data analysis led to protective changes in elementary schools.
*The views and opinions expressed in the Public Risk Management Association (PRIMA) blogs/podcasts are those of each respective author/speaker. The views and opinions do not necessarily reflect the official policy or position of PRIMA.*
Dan Foster, CPCU, ARM-P, CSP
Casualty Loss Control Expert, Munich Re Specialty Insurance
Dan serves as the casualty loss control expert for Munich Re Specialty Insurance. He is responsible for overseeing casualty loss control services for all MRSI programs and insurable interests. He serves as an internal resource for underwriting, program administration, product development and marketing.
Dan has over 23 years of experience in public sector insurance and pooling for entities such as cities, counties, schools, utilities and more. In addition to loss control, Dan also has experience in program administration, workers’ compensation self-insured fund management and claims administration.
Dan has a Bachelor of Science degree in business from the University of Southern Indiana and has certifications in CPCU, ARM-P and CSP.
You Might Also Be Interested In
Understanding OSINT: Open-Source Investigations in Risk Management
Stephen Roper
Partner, DigiStream Carolinas
In this episode, Stephen Roper discusses open source investigations and risk management. He explains open-source intelligence (OSINT) as the collection and analysis of publicly available information, including social media content and background records. He highlights the depth and legitimacy OSINT provides compared to social media investigations. Roper also discusses the versatility and vast utilities of OSINT, noting its evolution to include not just the subject of interest but their connections as well. The conversation emphasizes the importance of a solid methodology to ensure the legitimacy of findings.
*The views and opinions expressed in the Public Risk Management Association (PRIMA) blogs/podcasts are those of each respective author/speaker. The views and opinions do not necessarily reflect the official policy or position of PRIMA.*
Stephen Roper
Partner, DigiStream Carolinas
Stephen is a managing partner for the DigiStream Investigations in the Carolinas region. Prior to that, he was the senior intelligence specialist of the DigiStream Intel Division overseeing background, social media, medical and accident scene investigations nationally. Stephen has completed over 1,000 digital investigations and is a licensed private investigator. Prior to DigiStream, Stephen was a reporter for the Shenzhen Daily in Shenzhen, China as well as an instructor at the prestigious Bao’an Zhong Xue Academy. He graduated with honors from the University of North Carolina at Greensboro with a double major in English and media writing.
You Might Also Be Interested In
Cultivating Psychological Safety to Mitigate Risk
Amy Hartsfield
Risk Management Analyst, City of Eugene, OR
In this podcast episode, Amy Hartsfield explains the importance of psychological safety in risk mitigation. Amy explains that psychological safety, a shared belief in the team's safety for interpersonal risk-taking, is crucial for risk management as it encourages proactive identification and addressing of risks. She suggests strategies for increasing psychological safety in the workplace, emphasizing the importance of leadership buy-in for successful implementation. The discussion highlights how psychological safety leads to early identification and correction of mistakes, essential for effective risk mitigation.
*The views and opinions expressed in the Public Risk Management Association (PRIMA) blogs/podcasts are those of each respective author/speaker. The views and opinions do not necessarily reflect the official policy or position of PRIMA.*
Amy Hartsfield
Risk Management Analyst, City of Eugene, OR
Summary of Qualifications
As a relatively new professional in the Enterprise Risk Management world, the past two years have both opened Amy's eyes to the various aspects of the field and given her the opportunity to apply her past in training, marketing and events. Amy brings experience participating as volunteer coordinator in large-scale community emergency exercises while exercising a passion for connecting the dots between the psychology of how humans operate and realizing the goals we need to achieve in ERM.
Responsibilities
Amy is primarily a project-based management analyst on the City of Eugene's Enterprise Risk Management Team. She supports her colleagues who specialize in liability claims, workers' compensation, and insurance while handling a variety of tasks that keep the team moving, such as serving as admin for claims software, running monthly and ad hoc reports, processing claims payments and purchase orders and managing the city's physical exams database.
Business Experience
15 years in local government:
- Marketing and Events Coordination
- Volunteer Program Management
- Deputy Operations Chief in COVID Emergency Operations Center
- Management Analyst on ERM team