Menu
Log in


INTERNATIONAL FOUNDATION FOR
CULTURAL PROPERTY PROTECTION

Log in

News


  • March 26, 2020 4:02 PM | Anonymous

    Reposted from CNN

    A new internet icon has emerged and his name is Tim.

    As the head of security at the National Cowboy & Western Heritage Museum in Oklahoma City, Tim takes his responsibility of protecting the museum and its collection seriously.

    But with the museum closed to the public and other employees working from home to prevent the spread of the coronavirus, Tim was given an additional duty of managing the museum's social media accounts.

    "I'm new to social media but excited to share what I am told is called 'content' on all of The Cowboy's what I am told are 'platforms' including the Twitter, the Facebook, and the Instagram," Tim wrote in his first post.

    In Tim's "content" that he posts daily, he takes followers on a tour through the empty museum, showing off cool artifacts like the hat and eye patch John Wayne wore in "True Grit," the 1969 film in which Wayne won his only Academy Award for his portrayal of US Marshal Rooster Cogburn.

    While definitely interesting, his followers seem to be getting a kick out of his posts for a completely different reason -- his dad jokes and wholesome attempts at figuring out social media.

    From writing out "hashtag" to ending each post with "Thanks, Tim," he isn't what you'd call social media savvy, but that's why people are loving him.

    "Tim has turned this twitter into a wholesome beacon in frightening times," one Twitter user commented.

    "I love this man omg thank you for this wholesome content I'm staying inside for people like you #HashtagThanksTim," another commented.

    Putting Tim in charge of the museum's social media was simply just a way to keep the public engaged while the museum was closed, said Seth Spillman, the museum's chief marketing and communications director.

    Spillman said he never expected each post would be garnering thousands of likes from people around the world.

      "What we found was an authentic voice for the Museum," Spillman said in a statement to CNN. "What we didn't anticipate was how much that voice would resonate with people during this difficult time. It's wonderful."

      Let's just hope that once the coronavirus crisis ends, the museum will let Tim keep tweeting.

      See Original Post

    • March 23, 2020 12:48 PM | Anonymous

      Reposted from FEMA

      Up to date as of 3/22/20

      Myth: There is a national lockdown and the entire country will be quarantined for two weeks.

      Fact: There is no national lockdown.  As with all information online or shared via social media, it is important to verify the source of the information.  You can find the latest information as well as links to additional resources at www.coronavirus.gov.

      Myth: FEMA has deployed military assets.

      Fact: No, FEMA does not have military assets. Like all emergencies, response is most successful when it is locally executed, state managed and federally supported.  Each state’s governor is responsible for response activities in their state, to include establishing curfews, deploying the National Guard if needed and any other restrictions or safety measures they deem necessary for the health and welfare of their citizens.

      Myth: I need to stockpile as many groceries and supplies as I can.

      Fact: Please only buy what your family needs for a week.  It is important to remember that many families may be unable to buy a supply of food and water for weeks in advance. Consumer demand has recently been exceptionally high – especially for grocery, household cleaning, and some healthcare products. Freight flows are not disrupted, but stores need time to restock.

      Myth: I heard that the government is sending $1,000 checks. How do I sign up?

      Fact: The U.S. Government is not mailing checks in response to COVID-19 at this time. Anyone who tells you they can get you the money now is a scammer. It’s important that you only trust information coming from official sources. The Federal Trade Commission recently provided more information about this scam and other common COVID-19 related scams on their website.

      Myth: Only those over 60 years of age and those with existing health problems are at risk from the Coronavirus.

      Fact: It is an unfortunate rumor that only people over 60 years of age are at risk of getting this disease. According to the Centers for Disease Control (CDC), those at higher risk include older adults and people with serious chronic medical conditions. However, symptoms can range from mild to severe with and may have different complications for each individual. The CDC has a list of COVID-19 symptoms you may experience. Please continue to follow the official information from the CDC.

      Click here for the most up to date information from FEMA

    • March 18, 2020 9:33 AM | Anonymous

      Reposted from Fox News

      The thieves who broke into the Dresden Green Vault in Germany four months ago, making off with $1.1 billion in precious gems, may have had inside help.

      Four Dresden Green Vault security guards are under investigation in connection with the Nov. 25 overnight break-in, The Art Newspaper reported online Tuesday.

      Jürgen Schmidt, a spokesman for the Dresden prosecutor’s office, said that two of the four guards were under investigation because of “an action concerning the alarm system that may have benefited the thieves,” according to German media outlets.

      German press agency DPA reported that one of them was arrested in November on suspicion of passing documents about the Green Vault’s layout and security system to the thieves, only to be released after a house search turned up no relevant evidence, according to the newspaper.

      DPA reported that the other two guards were on duty when the break-in happened. They were accused in a complaint lodged by an individual of not taking quick action to prevent the theft, the Art Newspaper reported.

      “The suspects have behaved cooperatively and initially said they wanted to speak to investigators, but subsequently they reserved their right to silence,” Schmidt told the Bild newspaper, according to the Guardian.

      Last week German police reported that at least seven people took part in the heist.

      Prosecutors and police said they have determined that an Audi S6 used in the theft and later set alight in a Dresden garage was sold to an unidentified buyer in August. They said they believe a young man who picked up the car from the seller in Magdeburg, another eastern German city, was connected to the break-in and released a sketch of a slim dark-haired man believed to be about 25.

      A large diamond brooch, a diamond epaulet and other treasures were taken by the robbers.

      The Green Vault is one of the world’s oldest museums. It was established in 1723 and contains the treasury of Augustus the Strong of Saxony, comprising around 4,000 objects of gold, precious stones and other materials.

      See Original Post

    • March 16, 2020 10:06 AM | Anonymous

      Reposted from The Harvard Business Review

      We’ve all had that moment on an airplane where we experience turbulence. Maybe you are rudely awakened by a sudden jolt, or you stand up to use the restroom and have to hold onto the back of someone’s seat. Within a few seconds, the pilot’s voice comes over the intercom. What are you listening for? You are listening for reassurance through the uncertainty of turbulence.  

      With Covid-19 concerns around the globe, it’s not just the airline industry that is experiencing a sudden lurch on its normal journey. Many business leaders are asking how they can communicate uncertainty both internally to their teams and externally to their clients — whether it’s about participating in an upcoming conference or delivering on a signed proposal. Communicating in the face of uncertainty is a constant leadership challenge.

      In addition to working with the airline industry on this topic, my team and I have worked with Fortune 500 companies around the world who need to manage high-stakes communications to multiple audiences simultaneously. Here are five steps we have found to be incredibly effective: 

      1. Pause and breathe.

      Before you start communicating to others, take a minute to pause and breathe. When you are the most senior person in a room, your team takes its cues from you in terms of how to act and how to feel. Taking a minute to center yourself will ensure that you present a calm, rational force to your colleagues and clients. This applies over the phone or through email as well. When you feel anxiety, you transmit that to others. A study of empathetic stress found that observing others experiencing stress could cause observers to themselves to feel more stressed.

      2. Put yourself in your audience’s shoes.

      In public speaking, knowing your audience in advance is critical. In times of uncertainty, it’s paramount, regardless of the medium. Do a thorough strategic analysis of who you are communicating to. What are their concerns, questions, or interests? What do they need an immediate answer to? You might use language such as, “I know many of you may be thinking…” The quicker you can address what’s on their mind, the quicker you will be able to calm them down. If you are not addressing their most pressing interests, they might not even be listening to you.

      3. Do your research.

      In times of stress, misinformation can be especially destructive. Seek out credible sources of information, and read the information fully before distilling it into clear, concise language. Share those links with others, so that they too have a credible resource. As a faculty member at Harvard, I appreciate that the university created a separate webpage with credible sources for more information and that it sends frequent emails with updates.

      4. Speak clearly and confidently.

      You can speak with confidence even without 100% certainty. You can confidently express doubt or uncertainty, while still sounding like you are in control of the situation. You might say, “Reports are still coming in, but what we understand so far is this…” Communicate frequently with your audience, even without news to report, so that they know you are actively following the issue. Fellow communication expert Nancy Duarte wrote an insightful article on this topic several years ago and said, “People will be more willing to forgive your in-progress ideas if they feel like they’re part of the process.”

      5. Have specific next steps.

      In times of uncertainty, it’s helpful to provide your team with tangible action items. Discussing your own next steps or recommending next steps to your audience gives them a sense of control so they feel like they are contributing to stabilization. Use language such as, “Here are the steps we are taking” or “Here’s what you can do” to demonstrate action.

      Communicating through uncertainty is an essential leadership skill, regardless of whether or not you have a formal leadership role. In fact, the ability to communicate through uncertainty is part of what demonstrates to others your leadership readiness. Use the above steps to first find your own sense of focus and then allow yourself to transmit that reassurance to others.

      See Original Post

    • March 16, 2020 9:56 AM | Anonymous

      Reposted from The Harvard Business Review

      The coronavirus outbreak that originated in Wuhan, China has spread to at least 131 countries and has sickened more than 156,000 people, with more than 5,800 deaths (click here for the latest data). Governments have shut borders and imposed quarantines, and companies have imposed travel bans. The human and economic impacts on businesses have been stark.

      This epidemic is a wake-up call for companies to carefully review the strategies, policies, and procedures they have in place to protect employees, customers, and operations in this and future epidemics. Here are eight questions that companies should ask as they prepare for — and respond to — the spread of the virus.

      1. How can we best protect our employees from exposure in the workplace?

      The coronavirus that causes Covid-19 (as the disease is called) is thought to spread largely through respiratory droplets from coughing and sneezing, and it seems to spread easily. It may also be possible to become infected by touching a contaminated surface or object and then touching one’s nose or mouth. The Centers for Disease Control and Prevention advises that employees should:

      • Stay home if they have respiratory symptoms (coughing, sneezing, shortness of breath) and/or a temperature above 100.4 F.
      • Leave work if they develop these symptoms while at the workplace.
      • Shield coughs and sneezes with a tissue, elbow, or shoulder (not the bare hands).
      • Wash hands often with soap and water for at least 20 seconds or use an alcohol-based hand sanitizer.

      We would add that it’s sensible to avoid shaking hands entirely to reduce the risk of spreading infection. Though that might be awkward at times, it’s an increasingly common practice in hospitals and clinics.

      As hand washing is one of the most effective defenses, employers need to make sure that employees have ready access to washing facilities and that those are kept well stocked with soap and (ideally) paper towels; there is some evidence that paper towel drying is less likely to spread viruses than jet dryers. Alcohol-based hand sanitizers and sanitizing wipes should be distributed throughout the workplace, and all frequently touched surfaces such as workstations, countertops and doorknobs should be routinely cleaned. Increased cleaning of common areas using standard cleaning agents can also reduce risk of spread of respiratory disease. Unless they’re delivering health care, there’s no need for organizations to stockpile face masks, as these are in short supply and the CDC doesn’t recommend their use by healthy people to protect against infection.

      A just-completed Willis Towers Watson survey of 158 employers globally, over half of them multinational companies, found that most are implementing an array of actions to protect employees. As might be expected, China is out ahead on this. Nearly 90% of surveyed companies there have increased employee access to hand sanitizers, and more than 80% have ramped up public health communications (such as posters about preventing spread) and are directing employees to work from home if they can. In North America where Covid-19 is just starting to emerge, companies are being proactive: 70% have already or plan to increase communications, and more than half have or plan to increase access to hand sanitizers.

      2. When should we exclude workers or visitors from the workspace?

      As discussed, employees should stay home or go home if they have symptoms of coronavirus infection. But dedicated staff often resist taking sick days, instead dragging themselves into work where they may infect others. Given the threat this epidemic presents, managers shouldn’t hesitate to send employees who present with Covid-19 symptoms home. Likewise, employees or visitors who are symptomatic or at high risk for Covid-19 should be kept separate from staff and helped with arrangements to leave the workplace and obtain medical evaluation while minimizing their public exposure. For example, they should avoid public places and public transportation, and, ideally, should stay six feet away from others unless they are wearing a mask.

      If Covid-19 becomes widespread in the community, companies can check temperatures using hand-held thermal scanners and consider excluding staff or visitors with temperatures over 100.4 F. Temperature is not an exceptionally accurate way to assess risk, though, as some with the coronavirus will be contagious but have no fever, and others will have higher temperatures not related to this virus. Thus, an elevated temperature in combination with respiratory symptoms is the best indicator of possible infection.

      Public health organizations recommend that companies bar employees or visitors from coming to the workplace for a period 14 days after a “medium” or “high-risk” exposure to the virus — generally meaning having been in close contact with someone who is known to be infected, or having traveled from a high-risk region. (For more, see the CDC’s “Guidance for Risk Assessment.”) Forty-three percent of North American employers in our survey said they now bar employees or visitors who have recently traveled from China for a period of 14 days after return. Visits or return to the workplace can resume after 14 days if no symptoms emerge.

      3. Should we revise our benefits policies in cases where employees are barred from the worksite or we close it? 

      The likelihood that increasing numbers of employees will be unable to work either because they are sick or must care for others means that companies should review their paid time off and sick leave policies now. Policies that give employees confidence that they will not be penalized and can afford to take sick leave are an important tool in encouraging self-reporting and reducing potential exposure. Our employer survey found that nearly 40% of employers have or plan to clarify their pay policy if worksites are closed or employees are furloughed.

      While few companies outside of Asia have closed worksites yet because of the epidemic, about half of the Chinese companies we surveyed had shut down worksites at least temporarily. Such closures will likely become more common outside of Asia should the epidemic continue on its current course.

      Most firms will treat Covid-19 in their policies as they would any other illness, and sick leave or short-term disability insurance would be applicable.  However, exclusion from the workplace might not be covered by disability policies, and prolonged absence could last longer than available sick leave. Our survey found that more than 90% of employers in China paid their workers in full and maintained full benefits during furloughs. Companies should promulgate clear policies on this now and communicate about these with employees. Most will want to offer protections to their workforce to the extent this is financially feasible.

      4. Have we maximized employees’ ability to work remotely?

      While many jobs (retail, manufacturing, health care) require people to be physically present, work, including meetings, that can be done remotely should be encouraged if coming to work or traveling risks exposure to the virus. Videoconferencing, for instance, is a good alternative to risky face-to-face meetings. Nearly 60% of the employers we surveyed indicated that they have increased employees’ flexibility for remote work (46%) or plan to (13%).

      5. Do we have reliable systems for real-time public health communication with employees?

      Dangerous rumors and worker fears can spread as quickly as a virus. It is imperative for companies to be able to reach all workers, including those not at the worksite, with regular, internally coordinated, factual updates about infection control, symptoms, and company policy regarding remote work and circumstances in which employees might be excluded from or allowed to return to the workplace.  These communications should come from or be vetted by the emergency response team, and they should be carefully coordinated to avoid inconsistent policies being communicated by different managers or functions. Clearly this requires organizations to maintain current phone/text and email contact information for all employees and test organization-wide communication periodically. If you don’t have a current, universal contact capability already, now is a good time to create this.

      6. Should we revise our policies around international and domestic business travel?

      Sixty-five percent of companies surveyed are now restricting travel to and from Asia. It is prudent to limit employee business travel from areas where Covid-19 is most prevalent — both to prevent illness and to prevent loss of productivity due to quarantine or employee exclusion from the workplace after travel. Companies should track the CDC Travel Health Notices and the State Department Travel Advisories to determine what business travel should be canceled or postponed. The CDC currently recommends that travelers avoid all nonessential travel to China, South Korea, Europe and Iran.

      Employees should be especially careful not to travel if they feel unwell, as they might face quarantine on return if they have a fever even without significant risk of coronavirus infection.

      7. Should we postpone or cancel scheduled conferences or meetings?

      Yes. There is mounting evidence that social distancing can delay the epidemic and potentially save lives, so most meetings and conferences should be converted from in-person to virtual. Some states and localities are banning meetings of more than 250 people. If you have a meeting, limit the number of attendees and encourage those who are older or have chronic disease to attend virtually. Provide room to allow attendees to sit or stand at least six feet away from others. Discourage hand-shaking and assure that proper hand-washing facilities (and/or hand sanitizers) are easily available. If you have any questions about best practices, contact your local health department.

      8. Are supervisors adequately trained?

      Sixty-five percent of companies surveyed that have employees in China are training supervisors about implications of Covid-19, while 34% of those with employees in North America report they are actively training or planning to train their supervisors. Whatever form the training takes, supervisors should have ready access to appropriate information (such as on infection control and company policies) and should know who to contact within the firm to report exposures. Supervisors or other designated persons in the company should promptly notify local public health authorities about any suspected exposure. A web search for “local health department” and postal code or city or county name will generally yield accurate contact information. In the US, supervisors can also contact the CDC at 800-232-4636 with questions about coronavirus.

      Diligent planning for global health emergencies can help protect employees, customers, and the business.  But plans are only as good as their execution. Companies should use the current situation to optimize and battle-test their plans. Effective employer action in the face of the COVID-19 pandemic can save lives and help companies earn the long-term trust of their employees and customers.

      See Original Post

    • March 12, 2020 3:48 PM | Anonymous

      Reposted from Artnet News

      The Castello di Rivoli near Turin, like every other museum in Italy, has been forced to close amid the coronavirus epidemic.

      But its director, Carolyn Christov-Bakargiev, is working 18-hour days to fast-froward the museum’s digital initiatives to make its exhibitions and collections accessible online. 

      Taking a break, Christov-Bakargiev tells Artnet News that it’s the museum’s “public duty,” as 60 million Italians have been placed under lockdown.

      Virtual Tours

      To make it all possible, Christov-Bakargiev and her team have been scrambling to record and edit new virtual tours of the Modern and contemporary art museum, which had just opened three special exhibitions before the forced lockdown was put in place. They are posting them online in a new virtual venue called “Digital Cosmos.”

      The curator started by focusing on still lifes in the collection by artists including Giorgio Morandi. A spokesperson said the decision was made because the genre has often served as a way for artists to ruminate on nature and mortality.

      Among the first works in the Castello di Rivoli collection to be featured in the new series is Maurizio Cattelan’s embalmed horse, Novecento (1900) (1997), which hangs from the ceiling in a sling. Works by artists including Michael Rakowitz, Giuseppe Penone, Ed Atkins, James Richards, and Renato Leotta will also be included in the initiative.

      The museum is also creating online tours aimed at children and their parents who are stuck at home now that all schools are closed.

      “It is important for people’s state of mind,” Christov-Bakargiev tells Artnet News. She also hopes art will be a welcome alternative to the continual, and stressful, stream of public health warnings. 

      Italy Under Lockdown

      Two weeks ago, the Castello di Rivoli, along with other museums in Milan and Venice, were instructed to close. Last week, after they were briefly allowed to reopen, they were shut down again on Saturday. On Monday, the 14 quarantined “red zones” in Northern Italy were extended across the whole of the country. Large-scale gatherings, including sporting events, have been forbidden.

      That means that the Palazzo Strozzi’s sprawling Tomás Saraceno exhibition is now closed.

      “It is very sad to shut the doors,” says the museum’s director, Arturo Galansino. “[Saraceno’s] show speaks about how we are part of a net of connections, and how all our individual and collective actions count.”

      With most of his staff working at home, he hopes to announce a series of digital initiatives in the coming days.

      Meanwhile, the Uffizi is launching a social media campaign to keep people in touch with art. The museum’s Instagram and Twitter pages will be updated daily with photos, videos, and stories focused on the masterpieces in its collection. The gallery has also started a new dedicated Facebook page, and will be updating its YouTube account. 

      “Even though museums have had to close their doors, art doesn’t stop,” the director of the Uffizi Galleries, Eike Schmidt, said in a statement.

      The campaign has been named the #UffiziDecameron in a nod to Giovanni Boccaccio’s 14th-century novel, The Decameron, in which 10 young people take refuge in the hills above Florence to escape the plague, telling stories to combat boredom.

      “The Uffizi will be with you, in your homes, to overcome all together the current difficult moment,” the museum said in a statement. “Let us avoid any contagion, except that of beauty.” 

      The museum will also be hosting a series of virtual mini-tours in which museum assistants will share some of their favorite parts of the galleries on video.

      Finally, the galleries are producing content to mark the 500th anniversary of the death of Raphael. The initiative will go some way in offsetting the closure of a major Raphael exhibition in Rome, to which the Uffizi lent around 50 works. (But you can also see that show online.)

      See Original Post

    • March 03, 2020 3:35 PM | Anonymous

      Reposted from the Federal Trade Commission

      Scammers are taking advantage of fears surrounding the Coronavirus. They’re setting up websites to sell bogus products, and using fake emails, texts, and social media posts as a ruse to take your money and get your personal information.

      The emails and posts may be promoting awareness and prevention tips, and fake information about cases in your neighborhood. They also may be asking you to donate to victims, offering advice on unproven treatments, or contain malicious email attachments.

      Here are some tips to help you keep the scammers at bay:

      • Don’t click on links from sources you don’t know. It could download a virus onto your computer or device. Make sure the anti-malware and anti-virus software on your computer is up to date.
      • Watch for emails claiming to be from the Centers for Disease Control and Prevention (CDC) or experts saying that have information about the virus. For the most up-to-date information about the Coronavirus, visit the Centers for Disease Control and Prevention (CDC) and the World Health Organization (WHO).
      • Ignore online offers for vaccinations. If you see ads touting prevention, treatment, or cure claims for the Coronavirus, ask yourself: if there’s been a medical breakthrough, would you be hearing about it for the first time through an ad or sales pitch?
      • Do your homework when it comes to donations, whether through charities or crowdfunding sites. Don’t let anyone rush you into making a donation. If someone wants donations in cash, by gift card, or by wiring money, don’t do it.
      • Be alert to “investment opportunities.” The U.S. Securities and Exchange Commission (SEC) is warning people about online promotions, including on social media, claiming that the products or services of publicly-traded companies can prevent, detect, or cure coronavirus and that the stock of these companies will dramatically increase in value as a result.

      See Original Post

    • March 03, 2020 3:24 PM | Anonymous

      Reposted from Dark Reading

      Nearly 75% of government employees are concerned about the potential for ransomware attacks against cities across the United States, but only 38% of state and local government workers are trained in ransomware prevention, according to a new report.

      The "Public Sector Security Research" study, conducted by IBM and The Harris Poll, surveyed 690 people who work for state and local agencies in the US. One in six said their department was affected in a ransomware attack. Despite this, half didn't notice any change in preparedness among their employers. More than half (52%) of IT and security professionals polled said their budgets for handling cyberattacks have remained stagnant this year.

      Some sectors are top of mind for ransomware threats. The study found 63% of respondents are worried a cyberattack could disrupt the 2020 elections. Most government employees place their local Board of Elections among the three most vulnerable systems in their communities.

      Public education is another area of concern, ranking as the 7th most targeted industry, according to IBM's X-Force Threat Intelligence Index, up from 9th the year before. Ransomware affected school districts in New York, Massachusetts, New Jersey, Louisiana, and other states in 2019. Forty-four percent of respondents from the public education sector said they didn't have basic cybersecurity training; 70% hadn't received sufficient training on how to respond to an attack. 

      See Original Post

    • March 03, 2020 3:20 PM | Anonymous

      Reposted from EdTech

      Since the early 1990s, IT security professionals from schools in the Big Ten Academic Alliance have been meeting to share ideas. Early discussions around securing mainframes have evolved into quarterly meetings exploring cybersecurity policies, processes, tools and incidents.

      “We had those relationships established, but we didn’t have anything operationally focused across the institutions,” says Tom Davis, founding executive director and CISO at OmniSOC, a security operations center housed at Indiana University. “We’re all doing similar things, maybe in slightly different ways using slightly different tools, but we’re facing the same kinds of threats.”

      OmniSOC, launched in 2017 by five of the Big Ten members — IU, Rutgers University, Purdue University, Northwestern University and the University of Nebraska–Lincoln — is designed to fill that operational gap. Today, it conducts constant network security monitoring and defense across all five campuses.

      As security threats continue to be ­pervasive, more institutions are taking advantage of SOCs — both SOC as a Service offerings and homegrown ­partnerships — dedicated to monitoring network traffic for anomalies and mitigating threats.

      “That shared model is becoming more common because building, staffing, maintaining, training — all of the things that go into having a functional SOC — are expensive and time-consuming,” says Brian Kelly, director of EDUCAUSE’s cybersecurity program. “But not having a SOC or a SOC-like service on campus is just not a workable strategy anymore.”

      Shared Resources Amplify Higher Ed Security

      On average, attackers are able to spend six to eight months inside a network before anyone discovers the breach. SOCs are likely to spot that malicious activity sooner, says Kelly. “They provide the ability to detect that earlier in the cyber kill chain lifecycle.”

      The infrastructure behind a SOC can be costly, but that’s just the beginning, Kelly adds. Institutions need large-conduit network activity to gather the data to be analyzed, storage to house the logs generated by the ever-increasing number of devices on campus networks and skilled analysts who can detect the different types of attacks and know how to respond to them. Plus, they need the compute power to handle all of that.

      “We used to talk about looking for a needle in a haystack,” Kelly says. “Now you’re looking for a needle in a stack of needles.”

      To power that search, OmniSOC uses Elastic security information and event management, which has some machine learning capabilities, for a back-end security analysis engine.

      “As you can imagine, with the quantity of data that we’re receiving, it’s difficult for a team of five security professionals to analyze all of that. So, we’re going to have to look at machine learning and figure out how we can help it at least identify some anomalies that we can use our security engineering talent to dig a little deeper into,” David says.

      The University of Texas at Austin operates a successful SOC as a Service, CyberPosse, that serves campuses in the UT system as well as 950 international clients (including other colleges and state and local government agencies).

      The State University of New York SOC, open to the 64 campuses in its system, provides software, tools and threat and log monitoring through a third-party vendor, along with services such as anti-phishing campaigns and vulnerability assessments.

      Yet the value of shared SOCs extends beyond services, says Bill Lansbury, associate vice president of IT and enterprise infrastructure at Rutgers. OmniSOC members, for instance, have access to partners’ security tools and expertise. The ROI is greater than performing the same tasks in-house, he adds.

      “For us to do what we’re getting out of OmniSOC, we would need to have five to seven additional full-time staffers, not to mention the training and professional development,” says Rick Haugerud, assistant vice president for information security and CISO for the University of Nebraska-Lincoln. “We’re just not in an environment where we can get that.”

      SOCs Help Colleges Respond to Breaches

      It didn’t take long for OmniSOC to prove its worth. Within 24 hours of its launch, it identified a compromised host at one of its partner institutions.

      “It wasn’t a serious breach, but it could have posed a threat to other hosts on the network,” says Davis. IU became OmniSOC’s home institution because it was already home to the Global Research Network Operations Center, which manages networks around the world. GlobalNOC, which has locations on IU’s Bloomington and Indianapolis campuses, gives OmniSOC redundancy and access to round-the-clock services.

      Partner institutions were able to use the security infrastructure they already had in place, including firewalls and intrusion detection systems. They just added appliances (deployed and managed by OmniSOC) to send data securely to OmniSOC, which collects and normalizes that data using the Elastic SIEM system. The use of existing infrastructure can make SOCs feasible for institutions that aren’t interested in building out an entire new system.

      In addition to Davis, OmniSOC’s 16 employees are divided among three teams: security engineers who handle threat-hunting analysis, a dedicated security platform engineering team that gathers and normalizes data from partner institutions, and a six-person 24/7 service desk. The two latter teams are organizationally part of the GlobalNOC, but functionally they report to Davis.

      “There’s no way you could run a 24/7 operation just on six full-time employees,” says Davis. “We’ve been able to leverage the existing GlobalNOC service desk team to augment those needs after hours and on weekends.”

      Security as a Service Fuels Continuous Monitoring

      While all of the partner institutions had their own SOCs in place before forming OmniSOC, their staffs had competing demands.

      “It’s very common in higher ed for security teams to be overtasked,” says Davis. So, even if an institution has the best intrusion detection system, security personnel can’t spend all their time looking at the resulting data.

      That’s where Security as a Service can be useful. OmniSOC, for example, receives data from each partner institution to provide continuous monitoring. If an engineer spots an anomaly in traffic at one of the institutions, he or she flags it and escalates a ticket to that university.

      In one case, OmniSOC detected unusual activity on Rutgers’ network: an IP camera receiving exploit instructions from another country. Rutgers’ incident-response team contacted the camera’s owner, and a simple firmware update resolved the problem, says Scott Borbely, security operations manager at Rutgers. Those extra eyes can be most beneficial after hours, says Haugerud.

      “Alerts get that first level of ‘this is not normal’ from OmniSOC,” whereas before, alerts might have sat idle from 10 p.m. until 9 or 10 the next morning, he says. “It all ties back into that concept of improved detection: How do we identify and start to respond in hours versus days or weeks?”

      OmniSOC also has an advantage because it draws data from five institutions using different security tools. So, for instance, if one intrusion detection system finds suspicious behavior that the other four universities missed, the OmniSOC team notifies everyone of the potential threat.

      “It’s really an extension of our existing resources,” says Lansbury. “It’s one team working for all the members of OmniSOC. If something happens at Purdue, we immediately get made aware of it so we can protect against it. We don’t have to wait for it to get to us.”

      See Original Post

    • March 03, 2020 3:13 PM | Anonymous

      It is with great sorrow that the IFCPP family shares the news of our friend Steve Ramsay’s recent passing. Steve was a longtime IFCPP contributor and supporter, and cultural property protection community figure. Steve participated in numerous cultural property protection conferences, and co-hosted IFCPP’s Southeastern U.S. Regional Symposium in 2015. We’ll very much miss Steve’s comforting demeanor and quick wit. Our deepest condolences to Steve’s family and friends in Tulsa and beyond. Thank you, Steve, for honoring us with your friendship, professionalism, and kindness.

      Following is an excerpt from Steve’s obituary.

      Stephen Boyd Ramsay
      September 18, 1954 - February 23, 2020

      Stephen Boyd Ramsay was born September 18, 1954 and passed away on Sunday February 23, 2020 after a catastrophic stroke. He was born in Tulsa and graduated from Webster High School in 1972. He then received an Associate’s Degree in Criminal Justice. He traveled extensively in his younger days; always roughing it, mainly up in the Yukon. The outdoors meant everything to him; climbing, hiking, and mountain biking. Steve spent several summers guiding fishing trips in Alaska, occasionally falling out of the raft which earned him the nickname “Otter”.

      Steve retired from the Philbrook Museum of Art in January 2019 after 26 years where he was the Director of Safety and Security. He was insanely good at his job, working many long hours and all special events. Steve’s coworkers loved and admired him for his kindness, his humor, and his willingness to go above and beyond. Everyone who knew him has expressed their appreciation for his ability to help those in need and his contagious laugh.

      Steve loved his family with his heart and soul. He was a loving Husband, Father, and Grandfather. His sense of humor kept us going through good times and difficult times. His family thanks everyone for their outpouring of love during this very difficult time.

      A Celebration of Life will be held on April 4th at Baxter’s Interurban, 717 South Houston, from 4-9 pm. Donations can be made to the charity of your choice, preferably to outdoor organizations or the American Stroke Association.

      
     

    1305 Krameria, Unit H-129, Denver, CO  80220  Local: 303.322.9667
    Copyright © 2015 - 2018 International Foundation for Cultural Property Protection.  All Rights Reserved