The Schenle Laboratories, producers of penicillin Schenle, and Schenle Pharmaceuticals, presents Jan Korthier. Jan Korthier to play tonight, The Life of Louis Pasteur. Our star is Paul Lucas. Schenle Laboratories presents another in a new series of great dramatic programs. Some of our stories are fact. The struggles and accomplishments of great men of medicine. Others are fiction. Stories of devotion to an ideal. Individual heroism or great courage. By these programs, Schenle Laboratories would remind you that medical science and progress is not cold, impersonal research or pages of statistics, but a warm human story told in living terms. Whether it's the life of one of medicine's immortals or the simple everyday record of service rendered by your family physician. The Life of Louis Pasteur, starring Paul Lucas as Pasteur and George Zuko as Charbonnet. You cannot begin to tell the story of Louis Pasteur without telling many stories. For his story must be told in terms of human lives and human progress. His own lifetime is not even so much his story as the story of an era in medicine and of people marked for death who lived because of him. Who was he? What was he? Well, first and last he was a chemist. A chemist and a fighter. And never a very tactful one. Take that matter of the pamphlets he had distributed all over Paris. Louis, a copy of your pamphlet just arrived. Oh, good. Let me see it. Doctor, surgeons, wash your hands, boil your instruments, microbes cause disease. Did they say whether they have started distributing these? They said that by nightfall there would be a copy at every home in Paris. Well, then by nightfall my dear, we are sure to be in trouble in the good many homes in Paris. Even I suspect in the Palace of the Emperor. Yes, the story of Louis Pasteur is the story of many people. It is certainly the story of Monsieur Charbonnet, advisor on health matters to Napoleon III. Charbonnet, a man who hated Louis Pasteur. The pamphlets afforded Charbonnet a rare opportunity. Your Majesty, look at these pamphlets. This man isn't even a doctor. He's a chemist. Oh, yes, I recall. He claimed to have found little animals in sour wine. Yes, your grace. By heating wine to a certain temperature, Monsieur Pasteur was able to destroy them.  Heaven forbid. I won't tolerate such practices, Charbonnet. Of course not. Why, if doctors want to do anything so absurd as to boil instruments or scrub their hands and be laughed out of the hospital. Ask Pasteur to come to court, Monsieur Charbonnet. We will put an end to this nonsense. Monsieur Pasteur. Yes, your Majesty. Monsieur Pasteur, in the preservation of the wine industry, you have been of service to France. It is my command that in the future you can find your work to that field. But, sir, what are the pamphlets he's already written? For that, Monsieur, you will publish an immediate retraction or suffer my displeasure. What happened, Louis? You'll have to pack, Mary. We are leaving Paris tomorrow. Yes, Louis. We want you to apologize for the pamphlet. Oh, no. But I won't. I won't take back what I know is true.  Oh, don't worry, my dear. Someday you'll prove your right. Where are we going, Louis? To Arbor. We may have to spend many years in Arbor. The story of Louis Pasteur is the story of the sheepherders and cattlemen of Arbor, in whose cause he spent the next few years. And because of those years, his story also is the story of the first President of France. This is the first President of the New Republic of France, President Louis Adolphe Teers. Gentlemen of the Cabinet, you are aware of the conditions upon which Bismarck has consented to withdraw the German armies from France. In addition to forfeiting, I'll say, Slurrain, we have to pay an immediate indemnity of five billion francs. Mr. Charbonne, you are Chairman of the Agricultural Board. How do you suggest we raise the money? Your Excellency, I hardly know what to say. Industry is a standstill. Farms are being neglected. A devastating plague is destroying our cattle everywhere, except in one small province. The District of Arbor. Why is there no plague in Arbor? I don't know, Your Excellency. You don't know? As Chairman of the Agricultural Board, you should have investigated. Mr. Charbonne, you and your assistant, Dr. Montel, will kindly leave for Arbor immediately. I beg your pardon. We were sent to Arbor to discover why your sheep have escaped the plague.  You're quite welcome. I'm sure Father will be delighted to see you, Monsieur. My name is Annette Pastor. Pastor? That chemist again? So, Monsieur Charbonne, we meet again. This is Dr. Montel, Father. How do you do? Won't you come in? Our quarters are very humble, but you are most welcome. Thank you. So, you're now the savior of sheep, Monsieur. You're supposed to tell us about them, microbes. I'll be glad to. We are convinced after eight years of experimenting that we have discovered a vaccine which, when injected into the animal, will set up an immunity.  It would take 80 years to convince me. Yes. I am sure it would. Well, I've heard enough. You coming, Dr. Montel? No, Monsieur Charbonne. I'm going to stay. Who does you please, but I'm going back and make a report to the Cabinet. With you or without you? I'll make no report without an investigation first. And so, Dr. Jean Montel met Annette Pasteur and her illustrious father, and his life became part of the story of Louis Pasteur. He stayed several days trying to grasp Pasteur's theories. Here. Now, look at this slide under the microscope. You see, it reveals a number of dormant germs or spores, as we call them, which are found in the grass and soil, wherever diseased animals have been buried. Now, our health is stuck in the grass.  The germs become spores again, and the cycle starts all over again. And you say these spores are present even here in the pastures at Arbois? Oh, yes. For an animal that hasn't been vaccinated, Arbois is one of the worst areas in all of France. Father! I'm sorry to disturb you, but the newspaper just came, and there's a proclamation in it. Well, let's see. No, anthrax at Arbois. What in the name of heaven are they talking about? A government to appropriate huge areas for grazing. Charbonnet urges farmers to bring healthy sheep to Arbois free of charge.  All of them! The fields are reeking with contagion. Even if they let me, I couldn't inoculate them all. It would take weeks to make the vaccine. But is there anyone we can appeal to? Yes, there is, but it won't be easy. I can call a meeting of the Academy of Medicine and tell them about your discoveries. Would you do that? Of course. It's the only thing we can do. They came from all over France to hear about anthrax. The great medical men gathered on the floor of the auditorium. And in the gallery, the people sat to listen. Farmers, sheepherders, cattle raisers. And in their midst, sat the small, humble figure of Louis Pasteur, listening to Dr. Martel. I tell you, I've seen with my own eyes what Pasteur has done for the cattle and sheep of Arbois. We, on the other hand, members of the Academy of Medicine have contributed nothing in the fight against anthrax. Then why in heaven's name don't we listen to a man who has? Dr. Martel. Yes, Monsieur Charbonnet? Monsieur Pasteur was discovered to be a charlatan ten years ago when he made a ludicrous claim concerning the cause of child-bed fever, which he was never able to prove. Consequently, I see no reason for humoring him father. I disagree. If someone's got a cure for anthrax, I want it all back. Yes, all of I. Very well. In that case, I propose an experiment. Let us take 50 normal healthy sheep, 25 of which will be vaccinated by Monsieur Pasteur, the other 25 will remain as they are. I shall then infect all 50 sheep with anthrax, and I defy any man or any vaccine to save one of them. Well, Dr. Martel. Well, I can't take it upon myself. I defy him to try. Missus, I accept! 25 of those sheep? I have, Monsieur Charbonnet. I am now at liberty to inject into their veins the blood of an animal that has died of anthrax? Proceed by all means, Monsieur Charbonnet. Monsieur Pasteur, I am from the London Times. Would you care to make a statement?  The others won't even be ill, I suppose. At least let us hope they won't, for the sake of France. In a moment we shall return to our play, but first an important message which vitally concerns all people. Today, with many parts of the world in the grip of famine conditions, penicillin, the drug known as the savior of human lives, now is bringing a new benefit to mankind, through its use in maintaining the health of domestic animals as well as human beings. By combating disease in animals, penicillin helps to increase the amount of milk, meat and other foods so vital today in the face of the world food shortage. These new uses for penicillin demand a large supply, and among the firms contributing to that supply is Schenley Laboratories. Because of its extensive background of research in mold and fermentation processes, many of which Pasteur investigated, Schenley was particularly well fitted to play a part in the development of penicillin and allied products. Schenley Pharmaceuticals developed to date include penicillin tablets and trochets for administration by mouth, and penicillin ointments for local application upon your physician's prescription. In producing these, it has been the aim of Schenley Laboratories to contribute all within its power to the cause of man's well-being. This will continue to be our goal. We are now turning our resources and facilities toward perfecting other types of pharmaceuticals, so that your doctor may have more and better weapons with which to fight disease. Now, back to the life of Louis Pasteur, starring Paul Lucas' Pasteur and with George Zuko as Charbonnet. The story of Louis Pasteur is, too, the story of the people he loved, the story of Annette and of Jean Martel. You're very quiet, Annette. What are you thinking? Oh, all sorts of things. I was thinking about Father. I'm praying a little, I guess. This experiment is so important to him. And I was thinking about Mother and how good she is, and a little about you and how good you are. What were you thinking? You've been very quiet yourself. I was thinking about you. I was thinking that you're very beautiful and very good, very understanding, that the man you accept for a husband will be the most fortunate man that ever walked this earth. Then I started thinking, if I were that man, and then I was completely lost. If I were to accept a husband, it would have to be someone very much like you. And if you don't ask me, I don't know where on earth I'll find one. Annette? Annette, my darling. Mrs. Pasteur, have you any idea what's going on in your garden? No, and you come away from that window immediately. Your daughter is being kissed? Oh, she's your daughter, too, Louis. Not when she's being kissed and she's all her mother's. Well, how good it must be to be as young as that. How good it is to be as old as this. Louis, do you realize what this means? Tomorrow if you're successful, every farm in Europe will want your vaccine. You won't have a moment's peace day or night. Marie, the benefits of science are not for scientists. They are for humanity. John and I have something to tell you. With your permission, we want to be married, sir. Well, I should think so. Yes, the story of Louis Pasteur is of his loved ones, Marie and Annette and John and the others. It is also the story of 50 sheep, 25 live ones and 25 dead. The story of Louis Pasteur is the story of the great Dr. Lister who traveled from Edinburgh to observe his experiment. They met, shook hands that day, two men who are making history. Mr. Pasteur, you are making the entire world microbe conscious. I foresee marvelous benefits, especially in the field of surgery. The honor is mine, doctor. I'm well acquainted with the work you are doing on antiseptics. Thanks to you and your brilliant leadership. Today marks a definite turning point in the world of science. You can no longer be classified merely as a chemist.  Yes, the story is of many people, supporter and opponent, friend and enemy, man and animal. The story is part of the lives of millions who never knew him, of those who survived operations because of sterile instruments, of those who survived deadly diseases, because of his knowledge of the microbe. What's going on in the laboratory? And why is that dog howling? No, Marie, don't get yourself all upset. There's nothing to be so concerned about. Louis, you're not working with... Oh, Louis, no, not hydrophobia. Well, I suppose you may as well know. I've been trying to discover a cure for months. I've pledged myself to wipe it from the earth. And the story is part of the life of the Russian doctor, Zoranov, who defied Pasteur's old enemy, Shabone, on the floor of the Academy of Medicine. I came here commissioned by my government to investigate Pasteur's efforts. My people have for centuries been preyed upon by rabid wolves. And, messieurs, I would worship, I would kneel to any man who could point the way to a cure. How do we know back to Eurya not harmful? How dare we say they do not do the deadly work that Pasteur claims? We invited Pasteur to attend this meeting. He ignored the invitation. Monsieur Shabone, if Pasteur is unwilling to come to us, then let us go to Pasteur. Go to Pasteur? Humility, monsieur, is a virtue not only in those who suffer, but in those who hope to heal. Well, gentlemen, it's fortunate we found you in, monsieur. It is the wish of some here that the Academy of Medicine on the earth with the committed visit. Dr. Zoranov has been reading your recent statements in the journal, promising a cure for rabies. Dr. Zoranov, as usual, depressed take liberties. I said only that I wasn't the threshold of a vast new world. I understand. May one inquire when you intend to cross that threshold? Monsieur Shabone, science takes a step, then another. Then it stops and reflects before taking a third. Step by step, I am reaching the ultimate conclusion that all diseases are caused by microbes. Oh, Pasteur. You don't believe me, Shabone. Look at this wire. In my hands, I hold enough rabies virus to wipe out the city. Let me see that. Now, be careful. Don't uncork it. Why? If you have the tiniest scratch on your hand. Oh, really? Let me make a scratch. I have a pen knife.  There. Is that deep enough? Give me that wire. Oh, no. Now I'll just rub this virus into the cut.  There. I'm, monsieur Pasteur. All I want is for you to predict the hour of my death. I came to see you, monsieur Pasteur, because I wanted to warn you about Shabone. For weeks now, he's been parading up and down the boulevard, making a great show of the fact that he is alive and healthy.  The work you are doing is too important. I wish it were important, but it isn't. My results have all been negative. You cannot find the microbe? Not a sign of it. I'm completely baffled. Every animal that was vaccinated with the contents of the test tube died except Shabone. For some reason, he was able to resist the disease. Why, I don't know. Are you certain it was the same tube? Positive. It was the only specimen I had. Perhaps you let it stand too long. Perhaps the germs grew less violent with age. Wait a minute. Wait a minute. That must be it. The germ was weak enough for the system to overcome. Come with me. I want to speak to my assistant. Oh, yes, Louis. How old was the dry tissue when Shabone rubbed it into his arm? 14 days. That must be it, Zainov. Now, suppose we start with a 14-day-old virus that's no longer deadly. Suppose we inject it into a healthy animal and day by day, as nature builds up its resistance, we increase the doses with stronger, fresher samples until he is able to withstand the actual disease. Would he not be then immune? No, no, it would never work. If the first injection did not kill him, the second would, or the third. Now, where are those tubes you've been preparing, Jean? Right behind you, sir. They're all in order. Each one is dated. Here we are. 14 days. How many dogs have we left? 10. Are they all well, healthy? Perfect condition. They've never been exposed. Inaccurate them with a virus of hydrophobia. And so the story of Louis Pasteur's, the story of 10 dogs, who became immune to hydrophobia in 14 days. And it is also the story of a German doctor and a little boy. Oh, Monsieur Pasteur, I apologize for not giving you notice, but I've come all the way from Alsace with a child who has been bitten. He's outside in the carriage. Would you help him? How long has it been, Dr. Pfeiffer? 11 days. You cauterize the wounds? Not right away. It must have been 24 hours. I don't know what to say to you. Monsieur, I implore you. My treatment has saved dogs. Yes, 10 of them. But I haven't defamed this notion what effect it would have upon a human being. If I failed, it would mean prison. Perhaps the guillotine. I am not a doctor. There are rules and traditions governing these things.  You may be able to save it. You alone in the entire world. I paid you to try. He paced the floor late that night, hour after hour, he walked while a child's life hung in the balance and countless millions of other lives.  Yet, life was doomed if he did not. He went up to the boy's room. He sat there watching, watching. In the distance of dogs howling, lashed the night and shivered to him. And at last, he knew whatever the consequences he had to risk them. He rose and then went into the laboratory. And the Bunsen burner that he lit was like a beacon. How is he, John? He's improving all the time. What is there? I don't know. Shall I open it? But of course. Dr. Sorenoff. Yes, Monsieur Pasteur. But of course, come in, Dr. Sorenoff. I am sorry to intrude, but I just came from the Russian Embassy. Those people outside are Mojique's peasants. They have been bitten by rabid wolves. Their villagers have sent them to you. They've heard so soon. Monsieur Pasteur's cure of the boy is the talk of the continent. But it isn't proved yet. That's why they are here to offer themselves for the test. Dr. Sorenoff, I'm a scientist. My treatment was intended for dogs. Vaccinate dogs and the disease will vanish. I only attempted the treatment with the boy because his case was desperate. But these people are all desperate. Surely you won't refuse them the same opportunity. Oh, my friend. You are their only chance. Very well. I will try. Jean, take them to the hospital. Isolate them. See that I get a full report on every case. Thank you, Monsieur. Thank you. But we must have permission from the Academy. I will see that we get permission. Patient number one, first treatment. 14-day-old virus. Patient number seven, fourth day. Any change? Not this morning. Continue treatment. Patient number eight. Let me see the report. 11-day-virus. The results are amazing, Pastor. Every single case improving. How proud you must be. No. No. Only grateful, Dr. Sorenoff. I'm sorry to interrupt you, Louis. But Monsieur Charbonnet is waiting at your house. Charbonnet? Yes. He says he himself wants the Pastor treatment for hydrophobia. Mr. Charbonnet just told me that a foreign scientist is giving a lecture at the Academy this afternoon. He claims to have disproven your entire germ theory. What? Who is he? What is his name? His name is Lister. Dr. Lister attacking me? I'm afraid so. Order of carriage. He came in a side door, worried, almost in tears. For he loved and respected Lister. Charbonnet met him at the door. His eyes warm. Come with me. They want you to sit on the platform. They hurried down a side aisle and hesitated on the edge of the platform where Lister was standing. And a man came off the platform and offered him his arm. And that man was Louis Adolphtiers, President of France. Stunned and completely unable to grasp what was happening, he took the President's arm and walked out on the stage. They stood up as he walked out on the platform, the members of the Academy of Medicine and the young medical students. And all the people who had been able to crowd in, they stood up applauding and shouting their approval. And Louis Pasteur held out his arms to them. And the tears ran down his face. Mr. Sir Pasteur, I greet you in the name of humanity. Dr. Lister. Mr. Pasteur, on behalf of His Majesty the Tsar of Russia, with profound gratitude, I present you with the diamond cross of the Order of Santa. Thank you. Thank you. I have no words to express. You young men, doctors and scientists of the future, do not let yourself be tainted by skepticism, nor discouraged by the sadness of certain hours that creep over nations. Do not become angry at your opponents, for no scientific theory has ever been accepted without opposition. Live in the serene peace of libraries and laboratories. Say to yourselves first, what have I done for instruction? Until the time comes when you may have the immense happiness of thinking that you have contributed in some way to the welfare and progress of all mankind. Back our star, Paul Lucas. But first, ladies and gentlemen, may we leave you with this thought. One of the most notable facts about the practice of medicine is that each succeeding discovery in the field has always become the property of all who devote themselves to the cause of healing. Schenley Laboratories pays tribute through this series of programs to this unselfish, progressive ideal. We of Schenley Laboratories feel that physicians everywhere may well take pride in the spirit of sharing for the greatest good of the greatest number. Now, ladies and gentlemen, Mr. Lucas. Friends, to sum up the spirit of the Schenley Laboratories program, this simple and beautiful prayer of the physician written centuries ago by Maimonides seems to me to be apt and fitting.  May I always see in the patient a fellow creature in pain and grant me strength and opportunity always to extend the domain of my craft. This is the prayer of the physician. It is ages old. Yet today it is as new as the hope for a peaceful way of life for all the world. And now, may we invite you to listen again next week at the same time when Schenley Laboratories presents Yellowjack, starring Ronald Coleman, a great star in a great story. Good night. The life of Louis Pasteur, produced and directed by Bill Lawrence, is presented to the courtesy of Warner Brothers, who this year is celebrating the 20th anniversary of Sound Pictures. It was adapted for radio by Gene Holloway. Paul Lucas appeared to the courtesy of International Pictures, producers of The Stranger, soon to be released through RKO. This is Frank Graham speaking for Schenley Laboratories. This is CBS, the Columbia Broadcasting System.


Welcome, everybody. This is Sartreau with LS NTAP. I'm working with Northwest Justice Project to put together a series of trainings for remote work for legal services. First, this has been put on by Northwest Justice Project through a grant from Legal Services Corporation. I'll be working with Northwest Justice Project. That means we've got videos through the next few weeks to get everything up there. We've got some wonderful volunteer presenters here today that are helping us out. Alex Clark here is a security expert with Metria. We've got Joshua Lennon over at Clio who works on their tech side and legal. And then we've got Jeff Harvey from Community Legal Services of Mid Florida. Hi, everybody. I want to talk about improving cybersecurity at law firms. My name is Joshua Lennon. I'm the lawyer and resident at Clio. I'm an attorney admitted into New York. I'm very active on social media. You can find me on Twitter at Joshua Lennon. I'm happy to continue this conversation outside of that. I'm also the data protection officer at Clio. And that means that I do work a lot with our cybersecurity and data protection team. And that gives me, I think, a little bit of a unique insight when it comes to blending technology, the needs of lawyers, and working with vendors like Clio in order to improve your cybersecurity. So I've got a lot to cover. I'm going to race through, but we can always go back and talk about some of these things and questions, and I will be sharing a copy of my deck so you can dive into things in great detail later. My agenda, why cybersecurity? What are your top risks? How to eliminate those risks? How to recover, which I think is a very important part of a discussion for cybersecurity. Some new virtual lawyering risk that I think we're really starting to wrestle with in our new work from home environment. And of course, I want to save time for questions. So again, that's why I'm rushing. So why cybersecurity? I think there are four reasons.  And we're going to jump through each of these really quickly. When it comes to your ethical duties, under the rules of professional conduct, which exist in pretty much every jurisdiction in the U.S., there's competency. You need to know the benefits and risks of technology. And there's confidentiality. You need to not reveal information unless impliedly authorized to carry out the representation or expressly authorized. And very importantly, under 1.6 on confidentiality, it's all about reasonable efforts to prevent the inadvertent or unauthorized disclosure. So we're not talking about that there needs to be perfect security. And I don't think there is, to be perfectly honest, but there needs to be reasonable security. And what are those reasonable factors kind of revolve around? They list eight. I think they talk about the sensitivity in the information, the likelihood of disclosure, the cost of employing additional safeguards. This one's really big because the cost of security is really dropping right now. And so not using security because of cost, I think, is no longer really a valid argument, a good chunk of the time. The difficulty of implementing the safeguards I think is very important as well that we're finding the difficulty is vanishing on a lot of these safeguards. The extent in which it affects your ability to represent your clients is another very important one. So is it cheap? Is it easy to use? Is it easy to use on behalf of your clients? And a lot of these factors were starting to be discussed in ABA's formal ethnic opinion 477. This is about securing communication to protect the client information. They often looked at email, but they came up with seven guidelines that they think lawyers should go through before they start picking online communication tools. You need to understand the nature of the threat. Who can access it? How? You need to understand how client information is transmitted and where is it stored. Jurisdictional issues often rise up around stored data. You need to understand and use reasonable electronic security measures, and I'll be going over those. Determine how electronic communications should be protected. Label client information confidential. We all have those disclaimers at the bottom of our email. They don't really protect anybody but the lawyers to send the email, but it's there. Add trained lawyers and non-lawyers. I think it's especially important for the organizations on and then conduct due diligence on your vendors. But in addition to those ethical duties, you may have legal obligations, your state privacy laws, your business area privacy laws, federal regulations that may impact. For example, every state in the union now has breach notifications laws. This is a great handy website put up by Perkins Cuey, a big law firm, where you can just go and quickly see what are the breach notification laws for your state. And if you're storing your information online and electronically or transmitting online, this is actually something that you are required to know and work with as a part of your own protection of data. We also know that the FTC has started to really enforce the idea of protecting data and preventing unfair and deceptive trade practices under section five. They came out in the FTC versus Windom Worldwide case where they found that Windom had poor cybersecurity and on three different occasions they resulted in fraudulent charges to their customers that exceeded 10.6 million. And from this case, which went up on appeal and then was ruled with a consent degree, the FTC established that they should have the authority to go after cybersecurity incidents for unfair practices. Now, what's important about that is they put together some really good guidance on what they seem to be like the standard of care when it comes to cybersecurity incidents. And I think what's important is that they recommend the businesses and organizations take reasonable and necessary measures to protect consumer data. The reasonable standard comes out again. So you may be like, we're starting to see a federal corpus of consent degrees and litigation on what is reasonable, and that should be guiding some of the choices that you're making. In addition to FTC guidance, there's also client business areas that may apply to you. If you're helping people, for example, with foreclosures, the mortgage lending rules under the Consumer Finance Protection Board, Bulletin 20203 might apply to some of the work that you're doing. If you are working with criminal justice organizations, you may be subject to CEGIS and the data security requirements that come there. So there's a lot of information that can be coming your way that creates legal obligations on behalf of cybersecurity. Another good reason for cybersecurity is operational continuance. We probably have all heard about DLA and their hack with malware that shut them down. DLA, one of the biggest law firms in the world, they put roughly 3,600 attorneys and support staffs across 40 countries on lockdown. And these lawyers had to go into courtrooms and say to judges, we need a continuance because somebody somewhere clicked a bad email and it took down our entire system. Don't be that organization. And then lastly, there's the cost when it comes to different types of cybersecurity incidents. And we know, unfortunately, from IBM's security cost of a data breach report 2019, that the average cost of a data breach is $3.92 million or about $150 per record. So the cost of not getting this right really adds up quickly. And when you consider, according to eDiscovery vendor logical, that if we pay $150 per record in a cybersecurity incident, and the average case contains over 130 gigabytes of data, 6.5 million pages of data, that is actually a ridiculous amount of risk that you could be facing as a law firm or legal aid organization. All right, so what are your top risks? I actually think in terms of area, it goes from outside in your biggest area of risk is your employees.  And then finally, there's this small threat of outside actors. And so when you start planning your cybersecurity and working to address it, start with the greatest surface area that of employees, that's your greatest risk. And how do we know that that's the greatest risk? Well, according to Verizon's 2019 data breach investigation report, 60% of all security incidents were caused by insiders. So that's six out of 10. And what actions were being used that impacted those insiders, social attacks where people just call them up and say, Hey, I need these information. 28% were malware, 21% were causal casual events, and 15% were misuse. So it's really easy actually for people to kind of game your systems if you aren't adequately prepared to protect them. And we know that most law firms aren't adequately prepared. If you look at the International Legal Technology Association survey, there's a huge amount of risk that's being associated with law firm data, because they don't invest and don't utilize the tools. The biggest one here is the 96% have no two factor authentication for internal access. That just blows my mind. And then lastly, we know from Gartner that at least through 2022, and admittedly, this is before the pandemic. So this may even go longer now. But they find that 95% of all anticipated cloud security failures will be the customer's fault. You guys are the risk.  So how do you eliminate those risks? Well, if we go back to the FTC's guidelines that they issued as a part of their authority, they actually came up with 10, I think, really good, really simple guidelines to work our way through this. And again, I'm not going to read them all, we're going to you can read these at your own time. But there are a couple that are just really like sensible control access to data, put procedures in place to keep your security current, like update your apps. All of these are things that you should be taking a look at. And when we look at most cybersecurity legislation like HIPAA for medical records, they tend to come up with three different types of safeguards, administrative, we have a policy, physical, we lock our doors, technical, we lock our data. And if you can put those three together, they work really well, and they should complement each other. I actually picked this graphic intentionally, because I think your goal should be to start with the administrative and work your way through to technical. And I'll show you some examples of this right off the bat. For example, cybersecurity safeguard, you may have a corporate policy of don't click on malware. You probably should have that policy, to be perfectly honest. But you may also implement a technology that actually screens for malware and attempts to remove it before your employees can click on it. So you shouldn't rely on one versus the other, you should rely on both together. But once you do that, you should have appropriate safeguards in place. If you're using Google for nonprofits, for example, in their Gmail, they do have certain types of scanning capabilities to remove spam and malware. It's not 100% effective. But it's better than not having it. And so you should use those things together. Your cybersecurity habits should be kind of circular in nature. You should vet a tool. You should set it up to make sure that it has the appropriate limitations. You should train your employees on it, both lawyers and non lawyers. You should run your backups because no cybersecurity is perfect.  And it just goes around and around. So if we look at vetting, the ABA does have some guidance under their vendor review, reference checks, for example, what are their hiring policies? For example, here at Clio, we actually do a criminal background check for every employee I've had to go through it. Make sure that they've got an agreement that recognizes your type of secure confidentiality needs. An example on Clio is that we recognize the confidentiality needs of lawyers in our terms of service and that provides some extra contractual protection in addition to some of the technological protections that we use. Make sure that they're using confirmed technology. So this is a trust but verify moment. Here, and again, I'm just providing examples from Clio, but all of your providers should do this. They should have a security page where they talk about who's watching the watchman. Here, for example, we use McAfee Secure, which scans our servers to make sure that they're up to date. They have no obvious flaws. We use trustee, which reviews our privacy policy and make sure we're up to date and our promises to our customers. And we use Digisert to take a look at our encryption and make sure that we're using the appropriate encryption that is right for us. And these are public pages that you can click on each certification to see something like this. The certification is current and here's a report that you can go for. You should also be trusting but verify your own personal technology. So I recommend that you encrypt your hard drives. This sounds like a lot of work, but actually if you look at Macs and Windows, they both have built-in hard drive encrypting technology. And this is something that we at Clio force as a default setting in all of our computers, such that if a computer is ever accidentally left somewhere, say at a grandma's house, grandma can't get into it. And so that hacks it. When transmitting data, you want to make sure that you are encrypting it in transit. And so the most important thing you take a look at is in your browser, HTTPS. The S is for Secure. What that really means is that it's creating one-time key transcriptions. That certification I just showed you before from Digisert is actually how Clio does this. And it creates a one-time key between you, the user, and our servers. And all the data in between is encrypted. This is really important because you will be working from a private internet connection, which your organization may not control. And so make sure that you know that AT&T, Verizon, Comcast, whoever is providing the internet, isn't setting you up for a man in the middle attack. You want to control data at access sensibly. Make sure that the tools you use have permissions that limit what people can see. And you want to use passwords intelligently. I am a big believer in a password manager, but you can actually force certain types of passwords and many types of tools, including a certain level of entropy. This is a tough concept, but passwords are easy to guess when you kind of broadcast what the rules are. You need one capital letter. You need one number. You need one symbol. Well, that tells a computer what type of password they should be randomly generating to try and get through. And so instead you want to look for passwords that have a high degree of entropy. So it could be like two or three random words combined, but memorable to you or a password manager that keeps track of these things and creates longer and more complex passwords. Use tools that require strong passwords and even maybe expire passwords automatically after a period of time.  This is probably the most important tip I can give you today. Make it hard to unlock without two factor authentication. Given that we are now giving everybody work from home tools, it means that anybody with an internet connection potentially has access to data online, right? And so we know that there are hackers attempting to break into systems because they know more and more people are using them every day. So what I highly recommend is that you mandate that all of the tools you provide your users require two factor authentication. And how does that work? It means that when you log in using your email and password, it also requires you to pull up a separate one time code usually from a separate device. And so here I've shown you an example from Google Authenticator. It's the one on the left. And it generates these short little like 10 second long codes that are constantly updating based on paired timing. And if I don't enter that code while it's active, it means I can't log in. And this seems like a really like onerous thing. And I have to be honest, I do this probably like 20 times a day right now. But Google, when they did a study found that a security key, the bottom left here, blocked 100% of automated bot attacks, bulk fishing attacks, and targeted attacks. It was the single best method of securing your online accounts, period. And this is from their 2019 research on effective account management security. So I cannot recommend enough that you turn on 2FA. You should do it immediately during this presentation, but I'm okay if you wait till the end of it. You should be using secure communication channels. I know texting is actually a really strong communication channel for legal aid organizations. Unfortunately, it's not very secure. So take a look for things like client portals or I'm a big fan of signal for secure communications back and forth. It's just like texting, but it's an app. And use these tools as a part of your cybersecurity habits that set up train backup monitor again include backups. This is highly important. Clio actually provides the ability to do a backup. You want to do I think at least two backups. You want a cloud based backup that can be accessed in the event of a natural disaster or force relocation. And if you're the IT person and you've got your vetting in place, a local backup is actually highly encouraged as well. So that way one or the other based on where you are. And lastly, monitor access. So use things like who's logging in from when from where are we detecting unusual activities? Like why is somebody logging in from Belarus? That should be a warning flag. And if you have all of these tools in place, you should be in good shape to go. It doesn't 100% protect you though. And that's something that we have to recognize. We're looking for reasonable security because there's no such thing as perfect. So as part of your cybersecurity plan, you should have a plan to recover the ABA and their formal ethics opinion 482. So the lawyer should be prepared for a disaster. Getting hacked is a disaster. You should be able to recover from them. And in 483, they listed your duties if you are hacked. So they said you have a duty to monitor. You have a duty to stop the breach and restore your systems. You have a duty to determine what occurred and you have a duty to notify current and former clients. I think that's also tempered by the breach notification rules that we talked about before. I think this is a simplification of the National Institute of Standard and Technology, the federal agency's security framework for improving critical infrastructure cybersecurity, where they did something very similar as well. Identify, protect, detect, respond, recover. And if you are able to work through kind of all of those five steps, which have an increasing degree of complexity, depending on the needs of your organization, you will be in good shape when it comes to cybersecurity. You'll be able to meet all four reasons for having it, except for the last, and that's the fiscal prudence. I actually recommend that law firms and legal aid organizations take a look at cybersecurity insurance. According to the American Bar Association, only 34% of law firms have it. This is important because most cybersecurity incidents are not covered under commercial liability insurances or professional malpractice insurance. I just want to give you an example of what is covered if you have proper cybersecurity insurance. This is from Alps. They are a provider of cybersecurity insurance to private law firms. But if you take a look at their types of plans, you can see what they cover and how they help. And if you don't specifically have this type of coverage laid out in your current insurance plan, it's time to look for more. Last thing, virtual lawyering risk.  It's a classic New Yorker cartoon. So I think there are four areas where we're going to have to get really better about when it comes to working from home. The first is know your client, the ABA's gatekeeper commission. Actually, there's some really good guidance on how to vet clients if they are an individual or if they are an organization. I recommend you take a look at that. I think we need to get better about fraud and anti-money laundering regulations as a part of our own current fiscal processes and that includes collections if collections are there. So getting comfortable with wire transfers, getting comfortable with electronic payments via credit cards and knowing all of the different cybersecurity requirements behind each of those is something that we're all having to build up on speed right now. And the last one is decorum. We need to make sure that as we work apart, that we're working harder to work together. We've all seen those funny incidents of somebody who unintentionally goes to the bathroom with their laptop because they believe the camera is off. Don't be that lawyer, but also know that judges are watching. We've seen several articles right now of judges who have commented on the fact that it's inappropriate from counsel to argue from the pool side. It's inappropriate for counsel to argue in pajamas. And so we need to maintain our professional standards even in a pandemic situation. And I think these are all risks that we need to work upon linked to our own use of tools and cybersecurity. I'm going to hand it back to Sarteris now and we'll take questions from everybody at the end. You can reach out to me. Here's my contact information. And I want to thank everybody for the opportunity to discuss this. How did I do on time? Sarteris, you're on mute. Excellent. Thank you. One quick question here. Any suggestions on training staff on things like malware or just those social hackings that are the biggest kind of internal threat? Yeah. Actually, there's a ton of great training provided by privacy companies, if you believe it or not. So there's a company called Trust Arc, for example, that has some really great courses that are available online. You can track people's process through them. And it gives you a record that everybody's gone through them. So such that you can demonstrate we've done the training, everybody should know this information. So we've taken our reasonable steps in the event that something does happen. So look at privacy companies and their online training courses. Many of them are provided for free or at low cost. And I highly recommend them. With regards to two-factor authentication, what are some of those suggestions if a particular program does not have that as an option? I know that some of the technology here used in legal services have not enabled that. And besides really pushing on those particular vendors, are there external solutions that can add that to a current program? Not really added to a program, but what you might take a look at is user management programs. So it could be that an individual tool doesn't have two-factor authentication, but they might have a user management program that does. So we've all had tools where you can sign in using your Google account. And you can turn on two-factor authentication for the Google account, such that when somebody signs into Google, the two-factor authentication is required. And then that security is then carried over to the secondary tool that doesn't have two-factor authentication. So that might be one way around it. So OCTA OKTA is actually a very popular user management tool. Microsoft has, I think, really impressive user management tools as well. So if your organization is using Microsoft Office 365, you can use a good chunk of that to carry over some of your security onto third-party vendors. Now, excellent tip there, using the authentication through another program that controls the users there. So thank you, SART, for having me be a part of this. My name is Jeff Harvey. I'm the CEO of Community Legal Services in mid-Florida. We're an LSE-funded organization and work to assist citizens in 12 counties and clients in 12 counties with their legal issues. So we've been asked, and SART asked us to be a part of this, to kind of give the little perspective on what we have gone through in our experience as it relates to COVID specifically, because we have, I believe, been very successful. So I'm going to kind of start with, you know, what was our experience. So just as kind of a note, prior to this pandemic, we had no work-from-home policy. As a matter of fact, generally, the approach in the firm was you are not permitted to work from home. We did have people that occasionally work remotely, but probably nothing more than somebody taking a laptop home to kind of catch up on, you know, a Word document or something like that. The general consensus was no work-from-home policy. We began planning for this on 9 March 2020. Now, the benefit that we had, at least as an organization, we're going to call it a benefit as an organization out of Florida, is that this would not, was not our first experience with a disaster type event, but this was very different because unlike the disasters that we typically deal with where you go hunker down for a couple of days and then the hurricane comes and it may or may not hit you, and if it does, it probably isn't going to hit all of your offices and all of your service area, you can get right back to work. This one was one that was going to affect the entire service area, and there was really no reason anticipated at that point that we should have to stop working just that we weren't necessarily going to be allowed to work out of the office. So we started this planning effort on March 9th with an anticipated moving to a work-from-home somewhere around the 23rd of March to Monday. And as things progressed within the state, paying attention to the governor's orders and directives, we moved up that starting to move people home to 18 March. So really in about nine days, we went from planning to having people home and it took us just about two full days to kind of get the entire force from home. We were fortunate enough and we're claiming this is success that we have in just those two days by 20 March, had 100 percent of our staff, which is about 110. That includes about 20 or so part-time employees, as well as front desk staff, and all of the staff, administrative staff, finance staff, all of the different staff sections, fully functioning working from home by that 20 March date and had really no interruption of service. A couple of things that we've had minor issues as it relates to somebody didn't have a printer that they could use or somebody didn't have a fully functioning scanner that could handle the volume that they normally would use. And so we've had to provide some kind of in stride improvements in terms of purchasing having a drop ship to people's homes, but absent that there was really no interruption to service or the business operation. And we are currently right now in the process of assessing lessons that we've learned, as well as looking forward to what is it going to be like to go back to the offices and what precautions are we going to have to take from there and then how do we codify all this so that five, 10 years from now, if we run into this type of thing again, there will be some historical document within the firm that they can refer back to. So some things that we did that were initial consideration that I think allowed us to be successful. First of all, when we went through the planning effort, we focused on what tools, training resources, and space do people need in order to first and foremost be able to do their job. And we looked at this really as kind of a building block type thing. So as a lot of the conversation just prior to this was around cybersecurity, cybersecurity to us is something that's very important. But I feel and I think the firm's approach has kind of been that sometimes that term can give it a bad rap. It's not just cyber, it's not just your computer, but it's all things security. And cybersecurity just as a discipline just happens to kind of work its way into all the other pieces. So whether it be somebody working at their home on a case file that's left open on a table that other family members can come by and read, or it's somebody from the accounting staff having a box of checks, those types of things. We're really looking at all of those different areas from a security standpoint to include what one would normally consider a cyber security piece. So the building block approach here is basically first and foremost, what do they need, what do they need to have, and what do we not have yet as a firm that people need to be able to do to operate just as efficiently as they do when they're at the office. And then from there, starting to assess risks and creating a list of things that we know, things that we think we know in terms of what the future will look like, and the requirements that we have got to ensure that we meet. Whether those be grant requirements, ways that our systems work, or levels of security for certain systems. And we really classify those into two areas. What can we do right now as we're preparing to get out the door? And then what can we improve over time? And so what that allowed us to do really is to prioritize the things that we could handle and with the limited time that we had. And then kind of make a list of the things that as soon as we got home, and we knew that we were what I would call initially operationally capable, then when we go start going into improving our position or improving our circumstances, we can move into those things and not waste the front end time with that. One of those things that we had to do right now is test. So I think within two days of starting the initial planning effort, as an example, we have a call center, as I'm sure a lot of legal aids do. It is fully attorney staffed. The attorneys will answer the phone and go right through a very quick intake process and immediately get to advice and brief services if possible on issues. That is a web and I'm probably not a great tech guy when it comes to this stuff, but it is one of those web hosted voice type of scenarios. So we knew that we didn't need to run any hard lines to be able to continue to operate the call center from home, but we had never tested it. So we immediately sent a couple agents home and had them work there for the day. Then we sent a couple different agents home on a separate day and had them work there for the day. That helped us identify a number of things that we would not have thought of towards the end of the planning effort or could have been catastrophic from a call center perspective at least had we not figured those things out early on. So we listed out of those items to our list of requirements and were able to move forward with that. We also tested and really this is kind of my last point on the slide is that you really got to look at all the different areas of business too. So not only did we test the call center which from an LSE type program does the bulk of the volume and is the bulk of the business, but we tested can the accounting staff do remote bill pay? Can the accounting staff do remote deposits? How are we going to ensure that mail is distributed across the firm when not everybody's in the office to receive it? So as we went through those and tested those things it helped us learn a lot about ourselves and the types of things that we needed to prioritize. And really the last thing that we did that I think was very helpful was in every single one of those areas whether it be building security, the call center, what does a front desk staff worker do when you're not having walk-ins and they're working from home to routine things like the mail. We ensured that there was somebody across the firm that was appointed to be in charge of ease and at least figure out a solution and then make sure that it got tested. And then just this is my last slide. I didn't have a lot of slides, but what helped us? So I think again one of the things that really helped us is that we've been looking at cybersecurity now for a couple of years and again I say cybersecurity, but I really mean security as a whole. And that started formally with an assessment that we had by cyber excellence in 2019 and I believe Dan McCarroll is on the phone. He works with cyber excellence and they were extremely helpful. They were helpful in helping us understand a little bit more about ourselves in terms of where we had risk. Up until that point I think we had a penetration test of some sort that had been orchestrated by I don't know if it was LSE or a combination of other LSE programs and we looked into it and the results that the IT director gave us at the time was we're impenetrable. Well if we're impenetrable then the DOD or the federal government should hire us to run their cybersecurity because they're not impenetrable. So initially looking at that realized that there are a lot of things that we may not realize that we don't know, things that we don't know that we don't know and they have been very helpful with that. They've also were helpful with helping us start to think about it in terms of what has been using as the acronym CIA, confidentiality, integrity, and accessibility. Every system, every piece of data that we have has to have some sort of balance between how confidential is it, how much do we preserve its integrity, and then and then how accessible is it. And so one of the things that we looked at is that in our firm we tended to err on the side of accessibility and not necessarily on the side of confidentiality and integrity. So what did that tell us that told us that there are oftentimes where we think we have data on information on things and that may not be the most trustworthy data because the number of people that had access to it and had the ability to influence it and change it caused those things in the question. And then really the last thing that they helped us with is understanding why it's important to the staff. So as the endpoint of that cybersecurity assessment we had a staff training and they were able to kind of get in front of my entire staff and let them know some of the things that they need to be concerned about what's their part of it, you know why cybersecurity isn't just the computer aspect of it but has to do with physical security and a number of other areas. And it really influences to go through the staff education process. So from that point in early 2019 we have been working with a company at a Tampa call, no before, and probably every two weeks to a monthly basis we've got these little short sometimes they're five minutes, sometimes they're 30 minute I guess column webinars or online trainings that we go through that just kind of provide constant reminders on what are potential threats, what are potential vulnerabilities. And really that's been the approach is looking at what's the risk and then when you get done with assessing and figuring out what those risks are, then looking to the improvement process and that improvement process is kind of a cost benefit analysis, what's the cost to correct it versus the cost to not correct it. So early on in 2020 we started conversation with emergency security because we knew we had a lot of work to do in terms of addressing a lot of the things that cyber excellence had identified. And Gorov is on the on the call as well somehow I'm logged in as him, but you know one of the things that they helped us out with that was one of the perspectives that Gorov and his team have is Gorov is actually a lawyer and has done a great deal of pro bono work in his 10 years a lawyer. So he was able to not only look at it obviously from his expertise on the security side but also through the eyes of the rest of most of my staff was looking through this. And so he was able to initially when we started had these conversations to help us kind of separate you know what is what is really truly important and what is going to cause some catastrophe and can really be fixed and addressed for a very low cost versus something that when you look at the risk either because it's not probable or if it does happen it's not going to be that big of a that big of a dealer that much damage, but the cost to improve it might be significantly greater than we want to spend. And so so that that was helpful going through that somewhere in the in the beginnings of talking about working through the assessment piece we quickly went into reaction mode and that's because that March 9th date hit and we shifted immersion securities focus from hey help us work through some of these issues and give us another assessment to hey help us get home and make sure that when we get home we're as secure as possible. So a lot of things that they were able to do for us not just additional IT support to a degree but I think the real important piece is identifying some of those that people use the phrase low hanging fruit that we could address and get after while we were either transitioning from home or as soon as we got got back to our homes. And again that that all followed that idea of the cost to correct and cost to improve. And then I think the last thing that's really been helpful for us is that the firm as a whole has embraced this culture of constant and consistent improvement and it's it has been through webinars like these the the know before stuff and then the conversations that myself and my leadership have with cyber excellence and emergency security and companies like that to kind of help us start to see things a little bit differently and really I think that allowed us to get home quickly and allowed us to be secure but really just to share with the question that I had a board member asked me at a meeting right before this you know what are you going to do if this happens again how are you going to be able to do this again and the answer really needs to be it's going to be better than we did it last time. And so we've already started that process of trying to record that information identify and assess the things that we didn't work so well maybe even look at changing some of our policies because it relates to other disasters you know in the in the past for hurricanes we used to take our laps up home and cover up our screens now we might consider taking everything home that we need to work from home just in case we have to work from home so with an organization like many of you with that idea of first take care of your people and then immediately transition to taking care of the population you know there's been a lot that we've learned out of this. So it's kind of my last comment before I'll take any questions I cannot emphasize this enough and I've heard it on ABA webinars I heard it I heard it earlier from Clio and I have told everybody that I can at least in the state of Florida and now to the greater legal services community get an assessment. Assessments can cost as much as $60,000 and they can be as low cost as finding an organization that knows what to look for and giving you a checklist and looking for it yourself but when you look at not getting an assessment is like not analyzing the facts in somebody's case before you get ready to walk into court. You really don't know what you don't know and that's where you have the biggest risk and so you know I would I would strongly recommend everybody who's thinking about this and thinks that they've done it well or thinks they haven't done it so well to go get an assessment because some of the things that you think might not have been so great might actually have been better than you realize and some of the things that you may not have even thought of really can become an issue so that really concludes my my part of the presentation. I'm open to questions. Thank you so much. We've got links to Novi4 and Ningio in the questions box so that people can definitely check those out. What was the most surprising thing that came out of your assessment that you didn't expect? Out of the assessment I think the most surprising thing that came out of the assessment was we didn't realize when we're talking cybersecurity how how much it it isn't necessarily about computers and one of the things that we're getting ready to work through right now that really has got a huge vulnerability to the company and does a lot to address that that CIA that confidentiality integrity accessibility balance is the creation of a governance committee. You know we'll take members from all across the staff and look at okay who needs access to what why do they need access and if it's outside the norm based off of business practices what additional controls are we going to put into place because it's you know it's pretty standard practice in a lot of offices where somebody writes down the password and puts it underneath their mouse pad or or we just say hey why why shouldn't everybody have access everybody needs access and instead of looking at individual controls for example a legal server on what can you access a legal server yes everybody needs access to legal server they don't need access to everything and doing that hard work and really trying to make those tough decisions it's very easy especially when the IT department or other departments aren't talking about it together to default to one of the other and it leaves the firm open to risk and there's there's you know nobody's even identified it to have somebody make the decision so I'd say that that's what how I'd answer that Excellent. Another question that came up here which is are there antivirus malware projects that products that either you guys would recommend and what is there any difference between that and kind of hitting on bloatware or other things so what what are you guys using and are there things you would recommend there so we we use and again prior to a lot of this experience we just use Windows Defender right and so that's one of those things it's like low hanging fruit is is you know can we can we add antivirus software and with work from home you know what is it going to cost us to get a VPN license for every for every laptop we use silence it's a artificially intelligence space so it's a it's a little bit more adaptive and from a price standpoint for a legal aid organization and you know I don't see it as being ridiculously expensive I think it's reasonable for sure it was pretty easy to deploy and as a matter of fact we upgraded and we did that starting the day that everybody was working from home and we're able to do that remotely by promoting into people's computer and dropping it in there so you know and that was something again that that if you have a good cybersecurity company that's helping you out they may have some resources to help you do that if you don't know how to do that yourself it's also got some incident response capabilities as well so you know we talked earlier a little bit about insurance and one of the big risks is it's not so much the legal aids data because you probably get a lot of that public record it's the client's data we got to worry about that that's really what we're going to have to be the most vulnerable and so you know there's all kinds of federal and state laws that get triggered when you start letting other people's confidential information out and and and I think they've got a lot of additional assistance on top of the insurance piece that that would help with that with that product so there was another question from the community here has it even be used coronet for monitoring data flow of organization files such as client files or other similar monitoring software to try to see if there is data leakage or if information is getting out we have not done that I know and I believe Dan and Gaurav are both on I don't know if either one of them are available and they want to answer that question from their standpoint because they get to see kind of other other companies I do know sorry if it's okay I know we've been taught you and I've been talking about really looking at this ever security piece and the assessment piece and what that entails and trying to put together something for a few weeks from now so some of those questions I would say potentially stay tuned if LSE approves approves us to go through and do another one in June. Yeah there's definitely a lot of interest in the assessment portion that both yourself and Joshua mentioned because a lot of organizations just are not aware of what they may be missing in these areas and I think your analogy with the get the facts before you jump into the case is very very relevant there I'm going to turn it over to Alex Clark I'm here we're running a little bit behind because of the technical issues but I'm are there some major tips that you would like to add to this Alex I'm going to attempt to make you presenter but even if presenter doesn't work let's go and let us know what kind of your major tips would be Alex. All right I lost my internet connection like five or six times over the course of this last hour so I'm sorry about that I'm going to go ahead and just real briefly what I do I used to be IT director at Legal Aid of Nebraska and then I was IT director at Catholic Charities of Omaha and since and also had some time at a Fortune 500 construction firm on a cybersecurity project in in the fall last year I've been doing consulting work full time since then so the the division of my business that is the information security consulting business is perimeter and I I was going to go in depth into the first few critical information security controls from the Sands Institute's top 20 I think in the interest of time what I'm going to do is I'm going to skip those and I'm going to mention that if you want to do something like a self-assessment a great place to start would be those Sands top 20 and the the first few they call them like the top five those are sort of the and these are the first two anyway that you'll see those are those are seen as the I think most critical foundation information security controls that that you should really attack before even you know worrying about more more advanced stuff like like pen tests or things like that and I think it's it's important to start with like the Sands Institute's framework does lay out with inventories before anything else because essentially if you don't have a rigorous policies and approach to inventory of a loud hardware and software assets everything else you do is going to be really built on a rotten foundation because you are going to be dealing with issues like uncontrolled bring your own device where where you are dealing with issues like employees using personal devices for work purposes and on those personal devices you can't really secure any of you know ensure security of any of the data on there you're going to be dealing with shadow IT and rogue use of cloud services so until you until you have inventory systems covering basically all allowed hardware all allowed software and policies about what data can exist where you really can't manage IT and you really can't hear it so the top threats I see I think as Josh mentioned like the top threats are really not like hackers like from outside so much as like practices of your own employees in the terms of like I don't really consider phishing and business email compromise to be like hacking in the traditional sense it's really just scamming and tricking people right so the biggest the biggest threats I think and these are actually when I've talked to professional pen testers you know where they get the best bang for their buck it is the same place that I think I think cyber criminals do too is starting out with phishing attacks password reuse attacks business email compromise social engineering if you have employees that use the same password for everything in personal and at work or you have users who you know the way that they comply with your password rotation and expiration policies is just to put a new number at the end of their previous password these are the things that are tend to be the most dangerous as well as I think the other presenter mentioned you know the the principle of least privilege and you know being rigorous about that and implementing it in your case management system like yes everybody does need access to legal server but they only need so much access so these are some of the top threats some of the top mitigation projects that I would I would look to implement in 2020 would be multi-factor authentication for all critical systems containing client data training education on password hygiene mandatory usage of of password managers and issuance of licenses to something like last pass enterprise to your employees is a very good idea if you do that you can head off the issue of people storing passwords in spreadsheets or storing and exchanging passwords in email it's much better for sensitive information like credentials when they have to be stored somewhere to be stored in a secure system training for staff on business email compromise business email compromise as well as spoof or look like emails what what those types of attacks are related to is the you know the fake email or perhaps even even real email if if an email account is compromised from from an executive saying hey I need you to buy um 10 10 gift cards and send me the numbers on the back or the email that looks legitimate that goes to the finance department and says hey you need to pay this invoice wire this money or send this check to this address um written policies on privileged account issuance and use um and after after you've done kind of all of the above you have um gone through and maybe looked at the stands institutes top 20 which again that's a free framework um you can consider engaging with a consultant um like me or and there's also many others for something like a social engineering attack or a weak password audit or attack or a fish test so um tried to keep this brief since I know that we're already over time and I skipped quite a bit but if you have any questions for me you want to talk um my contact information is there feel free to connect with me on linkedin as well um lsn tap email list um it is linked at lsntap.org join the community that email list has over a thousand legal services uh individuals and it is the best place to ask questions of the community and get help related to any of these things if we end up doing other things we will post those out to the list serve and also do a follow-up email to anybody that's out there that attended this or attended the others looks like that covers all of our questions thank you so much to our presenters we greatly appreciate it take care stay safe and we will be there on the community list to help you out and answer your questions


Gabrielle with Oxmore Auto Group here in Oxmore Toyota today with Chuck Schumann. We are going to go over a 2017 Sequoia Platinum couple features we're gonna go over with you guys is the space the comfort and the suspension So I'm gonna have Chuck over all of that with you guys. So Chuck take it away. Thank you Gabby Kenny the Sequoia is our full-size SUV. It's built up on the tundra frame. It's got this real big I can find it. There we go 5.7 liter V8 engine this thing is not lacking for power. This thing's fun to drive a lot of power. It's a real good space You see that engine there. It's beautiful Nice and clean warm our hands up on it this morning And if you want to go back here Kenny, I'll show you on the inside We've got a suspensions Unique on the s on the Sequoia you can actually change the height of the car so for ground clearance you can raise the vehicle for Loading you can lower the height of the vehicle you can change the suspension to sport mode regular and comfort mode So it actually changes the way the vehicle drives. It's tuned to you. This car is comfortable. It's fun to drive It's got a lot of different, you know safety things sonar for parking This is a big vehicle and you'll see all the space that's available in it because we got a just a ton of space back here But I want to show you this backseat Kenny Now these things are great for hauling family across country to Florida Even across town this thing it's built on the tundra frame like I said before which is one of the best turning radius is in a full-size SUV But you've got a ton of space these seats here in the center lean back You've got a blu-ray DVD player right here entertainment center and then you've got these great Third row one of the biggest third rows in its class with automatic power seats So your guests are always going to be comfortable whether you have the suspension in sport mode comfort mode normal driving mode This thing is a beast and fun to drive. So we got a bunch of them in stock right now We actually have a really good inventory Sequoia. So come here to ox more and see us All right, thanks Chuck. So you guys we have six of these in stock two of which are the platinum trim levels Just like this one a couple of the colors that we do have in stock is the blizzard pearl We have black and then the magnetic gray price point. It's going to be right around 48,000 goes up to about 67,000 so you guys have any questions regarding this vehicle Please feel free to give us a call our phone number is<PHONE_NUMBER> You can also visit our website at ox more Toyota comm and I'll have a link to this specific vehicle below in the comments So if you have any questions, just let us know. Thanks you guys. Bye


Hi, I'm Gail Pellerin. I'm the Santa Cruz County Clerk Registrar of Voters. One of the key responsibilities of my department is the administration of elections. My staff and I are passionate about voting and we believe that voting is the foundation of democracy. Certainly Election Day could not happen without our invaluable poll workers. You have a very important job from proper setup of the polling place to making sure it's accessible, enforcing election laws and meeting the needs of all of our voters. This video is going to focus on serving voters with specific needs. We want to make sure that you have the tools and important information to make sure that everybody has a positive voting experience and you have a rewarding day. Thanks so much for serving in the polls in Santa Cruz County. Now let's get started. Hi, I'm Jessica Vo. The County Clerk just spoke about Santa Cruz County's goal of 100% accessibility and 100% participation in elections. During the rest of this video, we are going to look at how you, as poll workers, can help facilitate a smooth process for all voters and appropriately assist voters with specific needs. Communication is a key factor in ensuring a positive experience at the polls. All voters should be treated with dignity, respect and courtesy. This means that what you say to voters and how you interact with them is very important. Let's talk about some key points when communicating with voters. First of all, look at the voter when you're communicating with them. If the voter has someone assisting them, be sure to look at the voter, not the assistant. Secondly, if at any point in the process a voter indicates that they need assistance, tell them what you can do and how you can assist them or have a co-worker assist them accordingly. Do not put the voter aside or in the corner while you help other voters until you have time to assist them. This sends a bad message. This brings us to the third key point in communicating with voters. If you are speaking and referring to an individual with the specific need or disability, refer to them as an individual person, not their disability or need. For example, if an individual who is visually impaired needs assistance, you can say, Would you like me to help you walk over to the touchscreen machine? It would be inappropriate to say, can you please assist this blind voter with the touchscreen for an audio ballot? If you must refer to an individual's need, then do it after you've identified them as an individual. Most of the time, you will find there is no need to identify an individual's disability. Respecting each voter's personal space is the fourth key factor in communicating with voters. Voters who utilize mobility equipment, such as walkers, canes or wheelchairs, view their equipment as part of their personal space. Just as you should never touch or grab a voter, do not touch or grab a voter's mobility device. It is inappropriate and can be dangerous for the voter. Fifth, service animals. When a voter has a service animal, do not attempt to touch or pet the animal without permission. The animals are working and should not be distracted. And finally, choices. No matter who you are speaking with, ask every voter if they want to vote paper or touchscreen. You should never assume you know how someone will want to vote, nor try to influence how they should vote. Everyone gets the same choice, paper or touchscreen. To highlight the importance of communication, let's talk to some local voters with specific needs about their experiences at the polls. I'm Veronica Elsie and I've been a resident of Santa Cruz since 1980, which is of course when I started voting. I haven't missed an election since I turned 21 way too long ago. And I see that you brought a companion with you. Could you please introduce us to your companion? This is my guide dog and his name is Ty and he was of great assistance getting me here to this county building. It's not an easy place to come. Can you please tell me what you expect when you go to vote? Well, when I go to vote, of course I expect to be able to cast my ballot. And I expect to not feel like I'm an inconvenience to the poll worker. I think really those are the two main things. Well, and I hope that I don't spend all day there because of a problem with the machine or something. But really it's very simple. Great. And what can a poll worker do to provide you with a good experience when you're voting? I think the most important thing that the poll worker can do is to first off realize that we understand the poll workers are our friends and our neighbors and our buddies and our volunteers. We do not expect poll workers to be disability experts.  Some people are sharp and know exactly. They just walk in and say, here's what I need you to do. And some people, wait, what did you say? You know, and we're just the same. And so I think the most important thing that a poll worker can do is not panic, slow down, tell me what they need, what they what's going to happen, what I need to do. Don't stand in front of me and talk to somebody else about me. Oh, no, she has to sign. What do I do? What do I do? No, just say, okay, you need to sign in. How can I help you do it? What a poll worker says and does can make a difference for a voter at the polls. It is not difficult to make voting a positive experience for people with specific needs. Just treat them as you would all voters with dignity, respect and courtesy. Now let's look at some examples of poll workers assisting voters with the specific needs on Election Day. Welcome. Can I get your name, please? And can you please tell me your address? Thank you. And would you please sign the register here on line 7? A voter using a wheelchair, a cane or walker may have a physical impairment. Just as you would any voter, ask the voter if they would like to use paper or touchscreen. And would you like to vote paper or touchscreen? You may also inform the voter there is a chair available to use with either option. Please take this, take it over to the person at the touchscreen machine. Hello, how are you doing today? Great, you? Good, thanks. Can I get your name, please? Phillip Doran. Okay. Alright, Mr. Doran and your address? Okay, great. And Mr. Doran, if you can please just sign right there on line 17. Okay. And would you like to vote with paper or touchscreen today? Paper, please. Okay, so here's your ballot. Okay. And to mark it, you're just going to connect the tail and the head of the arrow. Okay. Alright, thank you. Thank you. As you can see, the voter was given options and was able to vote seamlessly. The poll workers were supportive, courteous and prepared. You may have noticed the poll workers did not get in the way of the voters either. When assisting voters using wheelchairs, canes or walkers, never grab, push or touch their mobility devices or the voter themselves. Just as you would never want to be grabbed by someone. It is okay, however, to ask if the voter would like assistance. Some voters you serve on election day may have visual disabilities. As with all voters, a voter with a visual disability should be given the option to vote using paper or touchscreen. If the voter chooses touchscreen, you may want to ask him or her if they would like the audio component set up so they can listen to the ballot contest. Do not assume you know how a voter will want to vote. Give them options and let them tell you what they want and what they need. Let's look at an example of poll workers assisting voters who are blind on election day. Welcome. Hello. Can I get your name, please? Find the counter. Good boy. I'm Veronica Elsie, L-S-E-A. Thank you. Veronica, could you tell me your address, please? Three, two, one, my way. Thank you. Veronica, I have to have you sign the register. Could I assist you in any way? Okay, sure. Why don't you show me where? Here's the pen. Okay, now plop my hand right where I start. Right there. Perfect. All right. Veronica, I have to ask you to sign this register. May I assist you in some way? Sure. Let me get a guide. And I think, yeah, this will work, is put this down here so that I write right above it. All right. Right there. Here's the pen. Thank you. And so I start right here. Yes. Veronica, would you like to use paper or a touchscreen today? Touchscreen audio ballot. Okay. Please get the audio ready, Tom. Okay. As you can see, the voter was given options and was able to vote seamlessly. I'm going to hand you this ticket here. Oh, okay. There you go. Thank you. Would you like me to walk with you to the touchscreen machine? Sure. The poll workers were supportive, courteous and prepared. Welcome. Could I have your name, please? Hi. My name is Claire Johnson. Claire, just a second. Claire, what's your address? Claire, I need you to sign the register here. Could I assist you in some way? Yeah, if you could put my hand over where you need me to sign. Right there. Thank you. And here's the pen. Great. Thank you. Claire, would you like to use paper or touchscreen? I'll be using paper and could I have some assistance with that? Oh, sure. No problem. Service animals. When a voter has a service animal, do not attempt to touch or pet the animal without permission. The animals are working and should not be distracted. An individual may have a physical condition that makes it hard to stand for long periods or someone may have a heightened sensitivity to chemical sense. You may also encounter an individual who has difficulty speaking or is deaf. Welcome. Could I get your name, please? Can you hear me all right? Could I get you to write your name and address on this pad of paper, please? While working at the polls, you may also encounter some voters who have hidden disabilities. As a poll worker, you want to be conscious of the public you are helping to serve. And would you please sign the register here on line 7? Margaret, would you like to vote paper or touchscreen today? By listening, being courteous and respectful to voters, you can make Election Day a good experience for everyone. Here you are. And to indicate your vote, you're going to connect the head of the arrow to the tail of the arrow like this. Did you see that? Awesome. And when you're done, you're going to return your ballot to the scanner right here. Thank you. No matter who you are speaking with, ask every voter if they want to vote paper or touchscreen. You should never assume you know how someone will want to vote, nor try to influence how they should vote. Everyone gets the same choice, paper or touchscreen. If there are assisting me and marking a ballot for me, don't ever, ever comment on my choices. And that has happened. No, no, no, honey, you don't want to vote for him. He's already, be quiet, just mark my ballot. That's the biggie. What a poll worker says and does can make a difference for a voter at the polls. It is not difficult to make voting a positive experience for people with specific needs. Just treat them as you would all voters with dignity, respect and courtesy. For people who want to vote using the touchscreen, the screen position can be adjusted for easier viewing. Let's see a couple examples of poll workers assist some local voters. Hi, may I have your ticket please? Thank you. Okay.  Press the green button when you're all done. Would you like to have a seat while you're voted? No thanks. Okay. Some voters you serve on election day may have visual disabilities. As with all voters, a voter with a visual disability should be given the option to vote using paper or touchscreen. If the voter chooses touchscreen, you may want to ask him or her if they would like the audio components set up so they can listen to the ballot contests. You're going to be voting by audio. Would you like to be seated while I set it up? Oh, I sure would. Okay. Take a step forward. And the chair is right here by your side. Find the seat. Good boy. You need to come over here. Down. Veronica, here's your controller. Thank you. Okay. Here's your headset. And you may hear a loud beep when I press the button. Okay.  As you can see, the voter was able to vote seamlessly. It is okay, however, to ask if the voter would like assistance. There are a couple of extra things to remember when assisting a voter who is blind. You may want to offer him or her your arm so you can walk them to the voting booth or touchscreen machine. Verbally communicate with him or her what you are doing. Now that we're done filling out your ballot, you want me to deposit or should you? If you could show me where to deposit it, that'd be great. All right. It's right there. Okay. Once the voter has cast their ballot, you may want to offer to walk him or her to the exit, just as you walk them to the voting machine. Let's watch a couple more examples. And Teresa, would you like to vote with paper or touchscreen today? No. I don't understand. Do you speak Spanish? Yes. Do you prefer to vote with paper or with a touch screen? Do you have a ballot in Spanish? Well, the voting machine with a touch screen has the ballot in English and in Spanish. The paper ballot is only in English. Do you prefer to vote with paper? Okay. Here's the ballot. And when you vote, you're going to connect the tail with the head. Okay. Let's go. On election day, you may also encounter voters who prefer a language other than English or who have varying degrees of literacy. For voters who are more comfortable with Spanish, the touch screen machine has features that allow the voter to view the ballot in English or Spanish or to listen to the ballot in English or Spanish. Also, all voters always have the option of receiving assistance while they vote. Anyone can assist a voter except for the voter's employer, an agent of the employer, or an officer or agent of the voter's union. As a poll worker, you can also assist a voter. If you do so, you must not influence the voter's vote. By giving your opinion or personal interpretation of the ballot choices, you may inadvertently influence the voter. You must remain completely impartial. If you are translating the ballot for someone, you may only translate the choices, not the implication of the choices. Once you have assisted a voter, you must not speak with anyone about the voter's choices. You are responsible for maintaining the secrecy of the vote. Never assume you know how a voter will want to vote and never suggest they choose one option over another. The method a voter votes is just as much the individual's voter's decision as the vote itself. We want all people who vote at the polls to feel welcome and to have a positive experience. By treating all voters with dignity, respect, and courtesy, you, our poll workers, create an inclusive, positive atmosphere for voters and help to ensure a successful election. Let's review some of those key points for assisting voters with specific needs. First, look at the voter, not their assistant or their interpreter. When a voter asks for assistance, help them. Do not put them aside until you have time to help them. Use individual first-based language. If you must identify an individual's disability, only do so once you've identified the person and an individual. Respect each voter's personal space. Do not grab a voter nor a voter's wheelchair, cane, or other mobility device. Do not touch or play with service animals. Offer every voter the option to vote using paper or touchscreen. Here are a couple other hints to help with a smooth election day.  For example, if no one at your polling place has set up the audio pack to use with a touchscreen, or if a voter has a sip-and-puff device that can be hooked up to the touchscreen, call the hotline. On election day, please look at the language guide on disability included with your polling place materials. Before the election, you can see the guide and other resources on our website, votescount.com. We want all people who vote at the polls to feel welcome and to have a positive experience. Well, I used to vote in person because I thought it was important that individuals saw persons with disabilities out there. Too often, especially nowadays, a lot of people complain, but nobody goes to the polling booths. Being disabled, I use a lot of public services. Those are usually one of the first things that are cut in elections or budget years. It's important to go out and be seen. I can also do some education to the public and say, hey, I'm speaking up for my rights and encourage them and make them feel good about themselves voting and also myself is joining with the communities. I've been really lucky. I think that people here in Santa Cruz know the importance of voting and respect that, so no matter who you are, it's been a very positive experience, which I'm happy to say. Finally, as poll workers, you are integral components to making the voting process as seamless as possible for all eligible voters. The County Clerk Elections Office is here to support you in that effort.  Thank you very much for your time and your service. See you on Election Day.