zilongwang/ReadingBank huggingface dataset:
Neonatal Complex & Palliative Care Services & resources to enhance support for families & professionals All neonatal, maternity and paediatric staff WELCOME Chelsea & Westminster-West Middx Neonatal Unit Thursday 9th February 2017 0830-1300hrs Venue: Neonatal Seminar Room , 3rd Floor , C&W 0900 - 0945 Practical guidance for the management of palliative care on neonatal units Neonatal Donation 0945 – 1030 Antenatal & Neonatal support Palliative Care Team at Louis Dundas Centre/GOS 1030 – 1115 Referral and Resources Shooting Star Children’s Hospice Kaleidoscope Nursing Team 1115 – 1130 Coffee 1130 – 1215 Support for families and creating memories Remember My Baby Rainbow Trust Children’s Charity 1215 – 1300 Workshop
MONDAY TUESDAY WEDNESDAY THURSDAY FRIDAY Materials LIBRARY DAY ELA Binder/ Computer Claim, Cite, Clarify PowerPoint ELA Binder ELA Binder WIN PowerPoint ELA Binder Do Now (Motivate/ Hook) Activity DGP/Theme Activity DGP/Theme Activity DGP Essential Learning (Objective) SW analyze what a text says explicitly and draw logical inferences; cite textual evidence to support conclusions. SW analyze what a text says explicitly and draw logical inferences; cite textural evidence to support conclusions. SW identify central idea in an informational text. SW take a test over The Cay (1-10) and vocabulary lesson 3. Engage/ Excite (Strategies for Involvement) SW review Claim, Cite, Clarify and read The Cay. SW be given a series of several writing prompts for the students will develop their claims. SW will review Claim, Cite, Clarify. SW review the WIN model. SW take a test over The Cay (1-10) and vocabulary lesson 3. Practice to Product TW model how to formulate a constructed response utilizing Claim, Cite, Clarify. SW read the Scope article “Can the Desert Tortoise be Saved?” SW read the Scope article “Our World Turn to Water.” SW take a test over The Cay (1-10) and vocabulary lesson 3. Evaluate (Mastery/ Reteach/ Enrichment) SW answer two writing prompts addressing the Cay using Claim, Cite, Clarify. SW answer the following question using Claim, Cite, Clarify: How can technology help endangered animals? SW identify the central idea of the article and support their claims with evidence. SW take a test over The Cay (1-10) and vocabulary lesson 3. Reflect Now (Exit/ Connections) Exit Ticket: Students will share their answers via Padlet. Exit Ticket: Students will answer their answers via Padlet. Exit Ticket: Students will answer the following question via Padlet: What is the difference between the theme and the central idea of a text? SW practice using an online interactive site to practice theme and central idea
Homework Study Vocab 3 Own the Word Read The Cay. Vocab 3 Own the Word Read The Cay Vocab 3 Own The Word “PLAN TO TEACH; TEACH TO PLAN.” Teacher/ Subject: Byrd 6th ELA Week of: September 18- 22, 2017 Guiding Question: How is the central idea of a text determined?
Results focused and ensures that commitments are delivered on time, complete and accurate High attention to detail Resilient and adaptable to circumstances and capable of working under pressure without highlighting stress to other individuals Excellent influencing skills with all levels of the business General intelligence: experience & knowledge capabilities Strong track record in a fast & complex business environment Proven ability to work on assigned tasks independently and provide regular progress reports Previous experience in delivering process improvements within a professional environment, including the successful delivery of measures Be literate in MS office applications and have expertise in the use of excel spreadsheets and databases Change management experience Transport sector experience Personal circumstances/wellbeing requirements: e.g. travel, flexibility, health Requirement to work shifts determined by the operational needs of the business (fitting around a Monday to Sunday working week, 7am-10pm) Shows flexibility in when to take annual leave and is willing to work some irregular hours when necessary Requirement to travel to support dual site operational needs Able to cope with peak workloads and deadlines. Is optimistic and robust by nature Job Holders Comments Line Managers Comments
Unlisted Preventive Service Initial Preventive Physical Exam G0402 Annual Wellness Visit G0438, G0439 Vaccine Administration Immunization Administration 90460, 90461, Flu Vaccine Administration G0008 Pneumonia Vaccine Administration G0009 Care Management Transitional Care Management 99495, 99496 CCM Codes Chronic Care Management 99487, 99489, G0506 OB/GYN Routine Obstetric Care 59400, 59510, 59610, 59618 Evaluation & Management Services 99460 – 99465 Nursing Facility Nursing Facility Care 99304 – 99310, 99315 – 99316, 99318 Home Services New/Established Patient Care 99341 – 99350 Domiciliary/ Rest Home/ Custodial Care New/Established Patient Care 99324 – 99328, 99334 – 99337 Denominator: Total ACO expenditures by payer. Section 2. Non-Claims-Based Spending Numerator: payments to primary care providers and practices within the ACO, by payer, including: Capitation payments Payments for PCMH recognition (ex. percent of extended Blueprint funding to PCMH practices) Payments to reward achievement of quality or cost-savings goals (ex. percent of VBIF allocated to primary care) Payments aimed at developing capacity to improve care for a defined population of patients, such as patients with chronic conditions (ex: pilot program for comprehensive payment to primary care practices) Payments to help providers adopt HIT Payments or expenses for supplemental or activities, such as practice coaches, patient educators, patient navigators or nurse care managers (ex. percent of Care Coordination Model) Complex Care Coordination Program Payments for CHT Process improvement/other quality management activities
date at the top of the form to the current date. Re-upload the documents to Black Cat. Special attention should be paid to #3—List of investigations, complaints and lawsuits. Open the document and update so that it shows information for Years 2014, 2015 and 2016 year to date. Special attention should also be paid to #6—Non-elected decision chart. If there has been any turnover in an advisory committee or board of a non-profit the form must be recalculated to show the new membership. Complete the form documenting staff training in Title VI Civil Rights/Diversity issues within the last year (7/1/15 to present). The individual documentation which you will retain for inspection upon request, consists of staff meeting agendas showing topics to be discussed and any Title VI training materials you may have distributed. Bundle these in one packet, date the submission and upload. If you have not already done so, you must also submit a resolution from the governing body approving your VI program. Click on Coordination Activities. The information may not change much from year to year but does require an annual review. Select each activity that you submitted last year to determine if it is still applicable. If it is not, delete. Modify activities as appropriate and add new ones. Save and Click on the Applications Tab Most of the screens will require little more than a review and update. Even if nothing has changed, view the form from the prior year application, download to your local drive and update as required. The CY2017 documents must indicate in the “Last Reviewed/Updated” date. Upload your revised documents to your CY2017 application. Driver Selection and Training Policies The purpose of the document is to describe driver hiring and training requirements in conformance with Minnesota Rules. The training and retention of other safety sensitive personnel is also addressed. Fare Structure
AUGUST Confirmation Class starts 30 Confirmation Class Only SEPTEMBER 6 Confirmation Only 13 FAMILY NIGHT / CYA STARTS 17 BUILT ON A ROCK CONCERT in DULUTH 20 CLASS 27 CLASS OCTOBER 4 CLASS 11 CLASS 18 NO CYA: MEA Weekend 25 CLASS NOVEMBER 1 All SAINTS DAY Mass - CYA students will help at Mass 8 CLASS 15 CLASS 22 NO CYA: Thanksgiving Break 29 CLASS DECEMBER 6 CLASS 13 20 CLASS 27 NO CYA: Christmas JANUARY 3 CLASS 10 CLASS 12th-14th TOBIT RETREAT 9th thru 12th Diocesan Event at Big Sandy 17 CLASS 24 CLASS 31 CLASS FEBRUARY 7 FAN INTO FLAME 14 ASH WEDNESDAY - Morning Mass 7am 21 CLASS 23rd/24th Confirmation Retreat Hibbing 28 CLASS MARCH 7 CLASS 14 21 CLASS 26 CHRISM MASS - DULUTH 28 CLASS – CONFIRMATION ONLY
PEEK powder < 200 m Goodfellow, UK PEEK monofilament 200 m diameter Goodfellow, UK PEEK fibre 34 m fibre diameter, 30 filaments per tow Goodfellow, UK PEEK woven-mat 300 m monofilament diameter, twill weave Zyek, UK PTFE powder 6 - 9 m Goodfellow, UK Silicon dioxide, SiO2 ~ 20 nm Nanopowder Inc., USA Titania, TiO2 ~ 20 nm Nanopowder Inc., USA Wollastonite 10 m diameter, 50 m long Microfine Minerals, UK Yttrium oxide, Y2O3 ~ 20 nm Nanopowder Inc., USA Table 2: Values of Gc (at 21ºC) and Tg for the simple BADCy polymer and the co-reacted phenol-BADCy polymers. Fracture Energy, Glass Transition % Co-reacted Phenol Gc, J/m2 Temperature, Tg, °C [10] 0 150 310 5 135 260 10 220 228 15 320 201 Table 3: Predicted and experimental relative fracture energies for the simple BADCy polymer modified with the hollow glass spheres. Relative Fracture Energy Prediction Experimental Weight Fraction Volume Fraction Uniform Spacing Distributed Spacing -55ºC 21ºC 150ºC 0.1 0.11 1.27 1.48 1.22 1.25 1.81 0.2 0.23 1.32 1.63 - 1.33 -
Figure 4: Fracture surface of unmodified simple BADCy polymer, tested at 21C. (a) Mean particle size 10 m. (b) Mean particle size 40 m. (c) Mean particle size 80 m. Figure 5: Mica types used in the present work: (a) mica (SX400) of mean particle size 10 m, (a) mica (P66) of mean particle size 40 m, (c) mica (R120) of mean particle size 80 m. (a) Mean particle size 10 m. (b) Mean particle size 40 m.
Bidders will submit their proposal to: Brenda Deering, Division Administrator Division of Environmental Health Vermont Department of Health The closing date for the receipt of proposals is 4:00 PM Eastern Time on 5/10/18. Bid must be delivered to Brenda Deering at the address listed above prior to that time. Proposals or unsolicited amendments submitted after that time will not be accepted and will be returned to the bidder. There are no exceptions to the closing date conditions. Delivery Methods: U.S. : Bidders are cautioned that it is their responsibility to originate the mailing of bids in sufficient time to insure receipt by the State prior to the time of the bid opening. EXPRESS DELIVERY: If bids are being sent via an express delivery service, be certain that the RFP designation is clearly on the outside of the delivery envelope or box. HAND DELIVERY: Hand carried bids must be delivered to a representative of the Division of Environmental Health if Brenda Deering is unavailable prior to the bid opening. Electronic bids will be accepted. Email to Brenda.deering@vermont.gov FAXED : Faxed bids will not be accepted. 5.7 Proposal Format Proposals must be no longer than 10 pages, excluding staff résumés, the cost proposal (budget pages) and references. The format of the vendor’s proposal must include, at a minimum the following chapters, numbered as follows: 5.8 Response Section I: Cover Letter, Tax Certificate and Insurance Certificate The cover letter must be signed and dated by a person authorized to legally bind the vendor to a contractual relationship, e.g., the President or Executive Director if a corporation, the managing partner if a partnership, or the proprietor if a sole proprietorship. This must be completed and submitted as part of the response for the proposal to be considered valid. See Attachment C.
Nonpoint Sources Nonpoint Sources of Nutrients Bureau of Land Management, the United States Department of Agriculture’s Forest Service, irrigated agricultural dischargers, and Lake County; 85,000 kg TMDL discharge limit Clear Lake Nutrient TMDL (2006) High Climate and Weather Conditions Ambient temperature Fº, May-September Range: high average 92º, low average 45º NOAA National Weather Service High Drought Risk U.S. Drought Monitor Medium
Appendix B Contacts and Stakeholder Information Agency/Company Contact Name Contact Phone Contact Local/State Organizations Lake County Public Health Officer Karen Tait, M.D. Central Valley Water Board Holly Grover Mendocino District Office, State Drinking Water Field Office Branch, SWRCB District Engineer Sheri Miller, P.E. City of Clearlake Foreman Chuck Davis City of Clearlake Public Works Director Douglas Herren Medical Facilities Dialysis Center Jim Nalor Medical Facilities Clearlake St. Helena Hospital Medical Facilities Meadowood Nursing Center Hospitals St. Helena Hospitals Veterinarians Clearlake Veterinary Clinic Veterinarians Doc Jerri’s Animal Hospital of Lake County Tribal Communication Elem Indian Colony Director Karola Kennedy Big Valley Rancheria Band of Pomo Indians Ryan Neighboring Public Water Systems Konocti County Water District Costner Golden Water Company Keith Ahart
Reference: DoDI 8520.2, ENCL 3, PAR 3.C; SECNAV 5211.5E, PAR 7.H; ECSM 011, PAR 5.3 Subsection 6 – INCIDENT RESPONSE/VULNERABILITY MANAGEMENT 0601 Does a local incident response plan exist in writing that defines reportable incidents, establishes an incident response team, outlines local incident response operating procedures and provides user training? Reference: CJCSM 6510.01B, Encl E, PAR 2.D; SECNAV 3501.1C, PAR 6.C. 0602 Does the command have a spillage policy containing responsibilities and reporting requirements, and is this policy part of the unit training? Reference: CJCSI 6510.01F Encl. C PAR 29; CNSSP 18, SECT IV; SECNAV 5239.3C, Encl 2; ECSM 001, Section 4; ECSM 010, PAR 3.3.b 0603 Does the command adhere to and maintain accountability of computer network Directives (OpDirs, CTO’s, FragO’s, etc…) to ensure compliance of system vulnerabilities? This includes documenting and maintaining plan of action and milestones for non-compliant directives. Reference: SECNAV 5239.3C, Encl 2; MCO 5239.2B, PAR 3.(J&K); ECSM 020, PAR 2.4. 0604 Does the command have established compliance procedures to ensure computing hosts/devices are not connected to the local garrison and tactical networks until the command ISSM/ISSO, or equivalent authority, has verified and approved the security compliance of those assets? Reference: DOD 8510.01, Encl 6, PAR 2; ECSM 018, Section 2.6; ESCM 020, PAR 4.2.3 Subsection 7 – CONTINGENCY PLANNING AND CONTINUITY OF OPERATIONS 0701 Has the command identified mission/business essential records and mission essential functions (e.g., computer-based services, data and
Canadian Forces Communications and Electronics Association PO Box 17000 Station Forces Kingston, ON K7K 7B4 Association des communications et de l’electronique des forces canadiennes PO Box 17000 Station Forces Kingston, ON K7K 7B4 Communications and Electronics Association Cyber Symposium Cyber – Delivering Operational Effects Kingston Ontario – 31 October 2018 Time Presentation 0715-0800 Registration 0800-0810 Welcome C&E Association 0815-0845 Cyber – A National Security Challenge Mr. Jim Balsillie – Chair - Council of Canadian Innovators 0850-0920 - The Operational Mandate MGen Bill Seymour – Deputy Commander Canadian Operations Command 0925-1000 Health Break 1005-1145 Panel 1: - Cyber – Employing the Capability - An International Challenge Moderator – BGen (Retired) Rob Mazzolin Panel Members: Canada – Col Dave Yarker – Commander CFIOG UK – Capt (N) Andy Parsons, future CO of Joint Cyber Unit (Cheltenham) Estonia – Ms. Eneken Tikk - Institute of Strategic Studies Israel – LTC Moran Mayorchik – Head of Planning IDF/Joint Cyber Defence Division US – Gus Hunt - Accenture – Managing Director Federal Services (former CTO – CIA)
restricted to a limited number of authorised individuals? No 20 Are special access privileges documented and reviewed regularly (e.g. quarterly)? Yes No 21 Are all administrative accounts only permitted to perform administrator activity, with no Internet or external email permissions? Yes No 22 Does your password policy enforce changing administrator passwords at least every 60 days to a complex password? Yes No Please provide any additional evidence to support your assertions above: Malware Protection Question Answer Comment 23 Please confirm that malware protection software has been installed on at least all computers with an ability to connect outside of the network in Scope Always Mostly Sometimes Rarely Never 24 Does corporate policy require all malware protection software to have all engine updates applied, and is this applied rigorously? Yes No 25 Have all anti malware signature files been kept up to date (through automatic updates or through centrally managed deployment)? Yes No 26 Has malware protection software been configured for on-access scanning, and does this include downloading or opening files, opening folders on removable or remote storage, and web page scanning? Yes No 27 Has malware protection software been configured to run regular (at least daily) scans? Yes No 28 Are users prevented from running executable code or programs form any Always
are assigned to authorised individuals only. provide access to only applications, computers and networks actually required for the user to perform their role. Requirements Evidence/Narrative 5.1 It is a requirement that you have identified all locations sensitive and businesses critical information is stored digitally. (email, web and application servers, data shares, end user devices etc) Has this been done? For the locations identified above answer the following questions 5.2 Does the organisation have a user account creation and approval process? Answer not required 5.3 Does the organisation authenticate users before granting access in compliance with the defined password policy? Answer not required 5.4 Has the organisation removed or disabled user accounts when no longer required? Answer not required 5.5 Where available, has the organisation implemented two factor authentication? 5.6 Are administrative accounts used to perform administrative activities ONLY? (no emailing, web browsing or other standard user activities that may expose administrative privileges to avoidable risks). 5.7 Does the organisation remove or disable special access privileges when no longer required? Answer not required Please provide any additional evidence to support your assertions above: Malware Protection Objective
Commissioners Craig P. Tanio, MD, MBA, Chair Frances B. Phillips, RN, MHA, Vice Chair Health Care Consultant John E. Fleig, Jr. Operating Officer UnitedHealthcare MidAtlantic Health Plan Elizabeth A. Hafey, Esq. Associate Miles & Stockbridge P.C. Jeffrey Metz, MBA, LNHA President and Administrator Egle Nursing and Rehab Center Robert Emmet Moffit, PhD Senior Fellow Health Policy Studies Heritage Foundation Gerard S. O’Connor, MD General Surgeon in Private Practice Michael J. O’Grady, PhD Principal, Health Policy LLC, and Senior Fellow, National Opinion Research Center (NORC) at the University of Chicago Andrew N. Pollak, MD Professor and Chair Department of Orthopaedics University of Maryland School of Medicine Chief of Orthopaedics University of Maryland Medical System Randolph S. Sergent, Esq. Vice President and Deputy General Counsel CareFirst BlueCross BlueShield Diane Stollenwerk, MPP President StollenWerks, Inc. Stephen B. Thomas, PhD Professor of Health Services Administration School of Public Health Director, Maryland Center for Health Equity University of Maryland, College Park Cassandra Tomarchio Business Operations Manager Enterprise Information Systems Directorate US Army Communications Electronics Command Adam J. Weinstein, MD Medical Director Nephrology and Transplant Services Shore Health System Maureen Carr-York, Esq. Public Health Nurse and Health Care Attorney Anne Arundel County CEO and Founder, Rezilir Healh
The NIST CSF “Recover” function aims to support a provider in rapidly recovering and mitigating the long term impact of a cybersecurity event. This function supports providers in assessing the processes to maintain resiliency plans and support restoration of services impacted during an event. The organizational safeguards assessed include recovery planning, improvements, and communications. Recovery Planning (RC.RP): Assesses the organizational ability to execute and maintain recovery processes and procedures to ensure timely response to detected cybersecurity events. RC.RP Appropriate processes to: Readiness Informal Developing Established N/A 1 Execute a recovery plan during or after an event Improvements (RC.IM): Assesses the organization’s processes to improve recovery plans by incorporating lessons learned. RC.IM Recovery Plans: Readiness Informal Developing Established N/A 1 Incorporate lessons learned 2 Are updated regularly to meet the needs of a changing cyber landscape Communications (RC.CO): Assesses the organizations processes to coordinate restoration activities with internal and external parties, including coordinating centers, Internet Service Providers, cyber-attack victims, and vendors. RC.CO Appropriate processes to: Readiness Informal Developing Established N/A 1 Manage public relations 2 Repair reputation 3 Internally communicate recovery activities Please see “Scoring” on page 23 to calculate your score for “Protect.”
The cost to business of £21bn is more than the Home Office's annual budget and, according to Mr Sutherland, is "twice as big as the cost to business of traditional physical attack". He said "the days of walking into bank with a stocking over your head and a sawn-off shotgun are over" and criminals were increasingly operating online where the chance of being detected were much smaller. "Industrial espionage' He added: "As crime's gone digital, this report estimates for the first time the real cost of cyber crime to the UK. "By understanding that business bears the burden of over three quarters of the £27bn cost of cyber crime we are better placed to defend and protect assets crucial to every business sector in today's interconnected market place. "The next step is to formulate a more targeted response to IP theft and industrial espionage in particular". Nearly half of the £21bn cost to business is made up of intellectual property theft - which included illegal downloading and file sharing. But industrial espionage, such as the theft of designs and commercial secrets, was also a significant problem. Intellectual property theft cost £9.2bn, industrial espionage £7.6bn, this was followed by extortion, which cost £2.2bn, and direct online theft, which cost business £1.3bn. Some £1bn was lost through theft of customer data. The hardest-hit sectors were pharmaceuticals, biotech, electronics, IT and chemicals. More on This Story Related Stories 03 FEBRUARY 2011, POLITICS 16 FEBRUARY 2011, POLITICS 16 FEBRUARY 2011, TECHNOLOGY 04 FEBRUARY 2011, UK 20 JANUARY 2011, BUSINESS 16 DECEMBER 2010, POLITICS Related Internet links The BBC is not responsible for the content of external Internet Share this page
1. i) Does the Applicant maintain any Confidential Information under their care, custody, and control or with an Information Holder? Yes No If ‘Yes’, please identify the forms of Confidential Information maintained in either digital or hard copy: Forms of Confidential information Maintained Maintained by Applicant Maintained by Information Holder Estimated Number of Records Personal Identifiable Information (PII) 0-25K 25K–100K 100K–1M 1M–3M 3M–5M Over 5M Protected Health Information (PHI) 0-25K 25K–100K 100K–1M 1M–3M 3M–5M Over 5M Financial Account Information 0-25K 25K–100K 100K–1M 1M–3M 3M–5M Over 5M Intellectual Property/Trade Secrets Other: ii) If maintained by Applicant, please check all controls in place to manage access to Confidential Information: An information handling and labeling policy dictating what information may be collected and how information should be stored A data retention policy outlining when data may be disposed of appropriately A policy of least privilege defining who may be granted access to information A process for reviewing user access privileges on a regular basis, including when a user changes positions internally A process for removing access privileges upon termination before the user leaves the premises 2. i) Does the Applicant outsource any part of their information handling, network, computer system, or information security function? Yes No If “Yes”, indicate the name of the vendor providing the service: Data Center Hosting: Managed Security: Data Processing: Log Monitoring: Application Service Provider: Intrusion Detection: ii) Please check all due diligence that applies before engaging with a new vendor: Formal assessment of the security associated with the vendor A means to assess the vendors’ security posture such as SAS70, CICA Section 5970, BITS or otherwise Contractual provision to indemnify the organization in the event of a security failure or loss on confidential information iii) Does the Applicant have a formal process in place to verify that the services are being performed as dictated by the contract? Yes No 3. Check each of the following that apply to the Applicant’s information security program: A formal risk assessment methodology which includes at least an annual review of organizational risks
Please state all IT / Data services that are outsourced to third parties, including cloud providers (please use a separate sheet if required): Service Vendor Name: On demand service (including Infrastructure, Platform or Software as a Service models) Yes No Yes No Yes No Yes No Yes No Yes No Yes No Yes No What due diligence is undertaken before engaging with a new outsourced service provider (OSP)? Do you have a process for regular security audits on OSPs? Yes No data is processed or stored by 3rd party providers, how do you assess and manage the risks posed by shared infrastructure such as clouds or shared servers? For all on-demand services, is data stored in a private cloud? Yes No If ‘No’, to what extent are public clouds used and how is access to data controlled? If a data breach occurs, which party incurs the costs of notification and what is the OSP’s obligation in this situation? If an OSP system or service is unavailable, what is the likely impact on you? What contractual indemnities are in place in the event of a data breach or network unavailability caused/suffered by the OSP or cloud provider? How do your business continuity and/or disaster recovery plans address an OSP or cloud failure? E. Data Security
Training Plan and is it implemented? 2. Does the training plan state specialized training necessary (i.e. HBSS for privileged access users performing CS functions)? Official Site Training Plan 3. How many of with privileged access responsibilities have received the required training. CSWF Members 4. What is the timeline for training the remaining individuals identified with significant security responsibilities to receive specialized training? Local CS Training or Implementation Plan 5. What are the reasons for all identified personnel not having yet received specialized training (i.e. insufficient funding, insufficient time, courses unavailable, personnel are not registered)? Commanding Officer, CSWF-PM, CSWF 6. Are detailed training records maintained for all CS personnel? (records that indicate the exact training for each member)? Local Training Records; 7. Does the site have on the job training (OJT) for newly assigned ISSMs and personnel with privileged access? Local CSWFQP Implementation Plan 8. Is an oversight structure in that manages the CS training program? Commanding Officer; Local CSWFQP 9. Is there documentation of CS training oversight structure to include Training Officers and supervisors of personnel with privileged access, and all CS professionals? Implementation Plan/Training Plan 10. # and % of personnel with privileged access who has documented completion of the OJT requirement. Official Records; Training Officer 11. Are plans for continued learning a CSWFQP Plan Electronic support
part of the training plan? 12. #/% of personnel with privileged Access completing continuing training requirements. Training Database; Training Records; CSWF 13. Have all assigned AOs completed the DoD AO training within 60 days of assignment (or the NDU/IRMC No. 4012 course/certificate) or equivalent training? Local Training Records; Training Database 14. Are course completion certificates available for AO? Local Official Records C. Plans & Processes 1. Does the site have a plan that establishes timelines and procedures for all current and new CS personnel to be appropriately certified for their primary position? C.O.; Training Officer; Local CSWFQP Implementation Plan 2. What is the oversight process in place to ensure all site contracts include contractor compliance requirements? (DFARS 48 CFR Parts 239 and 252 RIN 0750-AF 52 DFARS: CS Contractor Training and Certification (DFARS Case C.O.; Acquisition and Budget Personnel; Electronic Databases; CSWF-PM, CSWF 3. Has the site identified appropriate “operating system certification” requirements and trained their workforce with privileged access? C.O.; Supervisors 4. Is an oversight process in that ensures all incumbents and new hires are trained, certified and recertified? C.O.; CSWF-PM, CSWF
MOBILE ……circle one Question What is minimum password length for TRU’s wireless network? a)6 b) 8 c) 10 ……………………………now flip ONLINE GAMING & ENTERTAINMENT ……circle one Question What are some of the malicious things that a Trojan horse can do? a) Delete your files. b) Watch you through your web cam. c) Log your keystrokes d) all of the ……………………………now flip
HAYES AND STEVENSON One to two 45 minute lessons per per year. FMS One to four 45 minute lessons per grade per year. Grade Lesson Grade Lesson Grade Lesson K-1 ABC Searching, My Creative Work 5 Picture Perfect, Selling Stereotypes 9 Copyrights and Wrongs, Building Community Online 2 Using Keywords, Sites I Like 6 Strategic Searching 10 Overexposed 3 Things for Sale 7 A Creator’s Rights, A Creator’s Responsibilities 11 Rights, Re-mixes, Respect, Becoming a Web Celeb 4 Private and Personal Information, Whose is it Anyway? 8 Gender Stereotypes Online, Identifying High Quality Sites, Rework, Reuse,Remix 12 RE-touching Reality, Collective Intelligence 4 How to Cite a Site
easier to draw people’s attention to the most important information,” says Deborah Palmer, Report Developer at CyberSavvy. “Traditionally users are given a summary grid view of the data and then they have to review the data carefully to determine where they need to dig deeper. With Reporting Services we have several options available to graphically draw the user’s attention to key data points in the metrics to guide them to the detailed information that is most critical. The result is that our customers don’t have to worry about how the reports work, they can instead focus on what the numbers mean to their operations.” Security Wanting to provide a highly secure environment for PostingPlace.com CyberSavvy deployed its solution using 2048 bit SSL certificates with enhanced verification. “All data transmission is encrypted with PostingPlace.com because we wanted our users to be able to post family photos, videos, and whatever messages they wanted without having to worry about losing their privacy on the Internet,” Hammond says. “While some sites use encryption for just credit card information, we use encryption for every communication with PostingPlace.com.” PostingPlace.com boards are protected from automated spam delivery mechanisms, sometimes referred to as bots, through use of the Microsoft Application Platform. Hammond notes: “The bots are out there, but they can’t successfully attack PostingPlace.com because we created it using Microsoft’s latest technologies, including Silverlight and authenticated WCF services.” Summary In summary, CyberSavvy was able to create an easy to use and scalable electronic version of the traditional cork bulletin board by building its solution using Microsoft development tools, technologies, and server products. Microsoft Visual Studio Microsoft Visual Studio is the world’s most popular development environment for designing, developing, and testing Windows-based solutions and web applications and services. By improving the development experience for Windows, the web, mobile devices, and Microsoft Office, Visual Studio helps organizations deliver a variety of solutions more productively than ever before. Visual Studio Team System expands the product line with new software tools that enable greater communication and collaboration throughout the development life cycle. With Visual Studio, businesses can deliver modern service-oriented solutions more efficiently. For more information Visual Studio, go to: msdn.microsoft.com/vstudio
Microsoft SQL Server 2008 R2 Customer Solution Case Study Software Firm Combines Geospatial Mapping, Analytics to Enhance Applications Overview Country or Region: United States Industry: Professional services─IT services Customer Profile Founded in 2002, CyberSavvy develops software-as-a-service solutions for a rapidly growing customer base. The company is based in Heron, Montana. Business Situation The company’s customers were asking for better business intelligence tools with advanced mapping capabilities and for easier data-reporting processes. Solution CyberSavvy implemented Microsoft SQL Server 2008 R2, includes new visualization tools in Microsoft SQL Server 2008 R2 Reporting Services. Benefits Transforms applications through powerful new BI capabilities customers understand data “beyond the charts” Speeds delivery of analytical reports by 53 percent Saves reporting time Reduces software costs “SQL Server 2008 R2 is a game-changer for us .... We can ‘wow’ our customers by giving them functionality that brings the ‘where’ to the ‘what’ for their applications.” Hammond, President, CyberSavvy Montana-based CyberSavvy is a growing software developer that creates data-driven software-as-a-service solutions for a diverse set of business applications. The company wanted to expand its customers’ analysis capabilities to incorporate geographic information and improve reporting processes. CyberSavvy implemented Microsoft SQL Server 2008 R2, which includes new geospatial mapping and report management features in Microsoft SQL Server 2008 R2 Reporting Services. As a result, the company can provide its customers with advanced data analysis and rich reporting capabilities. Also, its developers can meet customer demands faster and develop software features more easily than before. In addition, CyberSavvy has saved money by not having to invest in third-party report software; instead, it capitalizes on its existing development skills and SQL Server experience.
Submitted Cybersecurity Risk Acceptance Request Form 4 Risk Assessment Provide All Audit Scan (host based scans & application based testing) Completed Security Controls Checklist validated by scanning and manual review Develop and Execute Testing Plans (Artifacts not provided will be created by the Office of Cybersecurity) Step Three Deliverables Scanning tool (i.e., Qualys) generated Risk Assessment Report plus Analyst notes Executed CCI and NIST checklists Updated systems POAM Validated Step Three Artifacts Residual Risk Report 5 Authorize System Implement Residual Risk Report Step Four deliverables Chief Information Security Officer signed Risk Letter plus Risk Executive’s Endorsement/Approval to Operate Project Handoff to Operations 6 Mitigate and Monitor Operate Approved scanning tool Control Validation Plan Step Five deliverables Provide Monthly Risk Reports & POAM updates Security Control Validation Report
Gwinnett Technical College Program of Study: Cybersecurity Degree Courses lead towards the completion of the Cyber Crime Specialist Certificate Term, Days, Time GTC Course Code GTC Course Name (Credits) High School Equivalent Prerequisite Fall, MW, 7:00am – 8:20am ENGL 1101 Composition and Rhetoric (3) 23.03400 Advanced Composition None Fall, TR, 7:00am – 8:20am MATH 1111 College Algebra (3) Dual Enrollment Mathematics None Fall, MW 8:30am – 9:50am CIST 1001 Computer Concepts (4) 11.0A014 Dual Enrollment Computer None Fall, TR, 8:30am – 9:50am CIST 1122 Hardware Installation and Maintenance (4) Information Technology Essentials None Spring, MW, 7:00am – 8:20am ENGL 1102 Literature and Composition (3) 23.05200 British Literature/Composition ENGL 1101 Spring, TR, 7:00am – 8:20am ECON 2105 Principles of Macroeconomics (3) 45.06100 Economics None Spring, MW 8:30am – 9:50am CIST 1401 Computer Networking Fundamentals (3) 11.0A014 Dual Enrollment Computer Science CIST 1001 Spring, TR, 8:30am – 9:50am CRJU 1010 Intro to Criminal Justice (3) 43.45000 to Law Public Safety Corrections and Security None To complete the Cyber Crime Specialist Certificate, the following classes must be taken: CIST 2612 Computer Forensics (Prerequisites: CIST 1122 and CIST 1601) CIST 1601 Information Security Fundamentals (Prerequisite or corequisite: CIST 1401) CRJU 2050 Criminal Procedure (Prerequisite or corequisite: CRJU 1010)
Required resources Flip and Fix online Game from Cybersmart Access: Flip and Fix Cards: Attachment A Flip and Fix Cards: Worksheet 1: Attachment B Cyber Quest Game: Attachment C Cyber Quest Cyber Spots: Attachment D Video ‘George’ from Kids Helpline Erasing Cyberbullying: Computers with internet access Interactive whiteboard Important The videos used in this unit of work contain themes that may be disturbing or unsuitable for some students. Please review all resources before showing them to students. It may be necessary to seek the permission of a parent/ guardian before viewing them. Further information If students are worried or by something that has happened online they can contact Kids Helpline which provides free, confidential online counselling for children and young people, 24 hours a day, 7 days a week. For more information, contact: Office of the Children’s eSafety Commissioner Tel: 1800 880 176 Email: enquiries@esafety.gov.au Activity 1: If it too good to be true, it probably is! What you will need: Flip and Fix online Game from Cybersmart Access: Interactive whiteboard Computer and internet access for students. One computer per two to students. Warm up activity Ask students to raise their hand in response to the following: how many of you download free music from the Internet? who uses a file sharing program? who downloads games? what else do you download? Once you have an idea of what your students download, ask the following question:
Attachment B: Alison’s Story3 Alison the Internet. Every day, after school, she would go upstairs and surf the web. One of Alison's favourite sites was a chat room. She would log on and talk to other kids about her favourite boy bands and TV shows. 2. One day, Carl logged on. He said he was 12 and he liked the same bands as Alison. Alison thought Carl was cool. She even gave him her mobile number so he could text her at school. 3. One day, Carl sent Alison a text, asking if she wanted to meet him in the park after school. Alison said 'yes' straight away. She couldn't wait to see what Carl looked like. 4. When Alison got to the park, she couldn't see Carl - just a man sitting by the swings. Alison phoned Carl to find out he was. She got a fright when the man sitting by the swings answered the call. 5. Alison hung up. The man had been pretending to be Carl all along. Alison was in danger. Alison ran straight home and told her mum what had happened. Her mum called the police. Alison never heard from Carl again. 6. Alison didn't tell her parents that she was to meet someone she had met in a chat room. That was very dangerous. It was also a big mistake to give out her mobile number. Alison was lucky not to get hurt.
Medical information Y Y Y Y Y Y Y Y Y Y Y Telecommunications device Tax file number Y Y Y Y Passport Y Y Health insurance information Y Y Y Y Y Y Y Y Y Username/email address Y Y Y Y Y NAME IN COMBINATION WITH DATA TYPE Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Standards applied Encrypted data safe harbour Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y ‘Material risk of risk’ Y Y External determination ‘Reasonable likelihood of harm’ Y Y Y Y Y ‘Any breach’ provision Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Misused or likely to be misused Y Y Y Y Y Y Y Y Cases or is reasonably likely to cause loss or harm Procedure following breach/leak Notice to privacy commissioner (or equivalent) Y Y Y Data owner/ licenser notify individuals Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Data Maintainer to notify owner/licensee Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Data Maintainer to notify individuals YL Electronic notice allowed Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Y Substitute notice allowed YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL YL
someone. It is simple to create an account of Facebook, Twitter, or MySpace using false pictures and information. Cyberbullies can use this to their advantage, and post rude messages through photos, private messaging, and posts on walls, under a profile that no one may recognize. B. Cyber bullying awareness by parents and teachers 1.Teachers and parents can help protect their children and teach them how to protect themselves by teaching them about internet safety and the harmful things that can come from the internet. Then should monitor their children and make sure they don’t go on innapropriate sites, and protect them from anyone that would want to harm them. 2. Friends can help cyber bullying by fighting back. They can confront the bully and address the problem, then ask the bully to stop. If this doesn’t help, the bully can be blocked or reported to the cyber police. C. Seeing or expiriencing cyber bullying may make want someone to jump in and help, but most of the time, nobody knows what to do about it. 1. Friends and acquaintances should go against
Table of recent Acts & Policies of ICT in Ghana. Policy/Act Description Key Purpose(s) Security Implications Remarks Act 524 (repealed by Act 769, 2008) The National Authority (NCA) Act 1996 To establish the NCA a regulator Data transmission interception; electronic communications interference; data protection; safeguard the secrecy of communications; personal data protection. No stringent regulation on cross-border providers; no regulation on technology deployment L.I. 1719 Arrangement of NCA regulations, 2003 To provide universal access Privacy; secrecy of communications; Monitoring of operators Policy 2005 National Telecoms Policy To provide universal access to all citizens; to provide private licensed VSAT systems & International data networks; Customer information violations & misuse; incidents of outages; unwarranted use of customer information. Act 769 NCA Act 769, 2008 To establish the NCA as central regulator; To regulate the provision of communications services in Ghana. Act 771 National Information Technology Act 771, 2008 To regulate ICT provision; to ensure quality ICT provision; to promote standards of efficiency; to ensure high QoS. Periodic checks on operators to ascertain QoS Act 772 Electronics Transactions Act 772, 2008 To remove & prevent barriers to e-communications & transactions; to give legal backing to e-commerce; to promote e-gov’t services; to develop safe, secure & efficient environment. Interception; confidentiality, integrity & non-repudiation implied; availability (denial of service). Data protection Act is preparation; inclusion of issues on electronic signature, consumer protection, archival, etc. Act 775 Electronic Act 775, 2008 To establish GIFEC fund for provisioning of UA & US. Interceptions; confidentiality; Act 786 Electronic (Amendment) Act 786, 2009 Amendment to Act 775; to provide a minimum rate for International in-coming electronic communications traffic 3.3.3 Challenges of the regime Several key challenges in cyber-security markets and products in recent times have highlighted significant limitations in the existing regulatory system. It will suffice to mention just a few. The (Internet Compliant Center (IC3), 2009) 2008 Internet Crime report listed Ghana as amongst the top 10 perpetrator countries; ”Sakawa” menace (“sakawa” is a local term coined for Internet fraud where unsuspecting victims are lured into parting with monies.
COURSE TITLE: Advanced Computer Forensics and Cyber Crime CATALOG COURSE NUMBER: 2215 CATALOG PREFIX: CYBR SECTION: ___________ PREREQUISITE(S): CYBR 1115 – Introduction to Computer Forensics and Cyber Crime COURSE TIME/LOCATION: (Course Syllabus – Individual Instructor Specific) CREDIT HOURS: 4.0 LECTURE HOURS: 4 LABORATORY HOURS: OBSERVATION HOURS: FACULTY CONTACT INFORMATION: (Course Syllabus – Individual Instructor Specific) COURSE DESCRIPTION: This course is an introduction into the concepts, terminologies, and to skillfully complete a computer investigation from acquiring digital evidence to reporting findings. LEARNING OBJECTIVES: Chapter 1 – Students will demonstrate a systematic approach to preparing for a digital investigation. Chapter 2 – Students will explain how to set up a digital forensics lab. Chapter 3 – Students will prepare to use GUI acquisition tools and analyze remote acquisitions. Chapter 4 – Students will describe the definition of search warrants and how they assist in a typical digital forensics case. Chapter 5 – Students will be able to identify which files are altered during computer startup and how files systems deal with deleted and slack space. Chapter 5 – Students will show how to decrypt a and explain the purpose of virtual machines. Chapter 6 – Students will report on current digital forensics software and hardware tools. Chapter 7 – Students will illustrate an understanding of Linus Oss and Macintosh file systems. Chapter 8 – Students will explain how to recover graphics files. Chapter 9 – Students will collect data and analyze by writing an investigation plan.
Chapter 10 – Students will review network logs for evidence and use network monitoring tools to detect unauthorized use. Chapter 11 – Students will examine email crimes and violations. Chapter 12 – Students will identify storage and acquisition procedures on mobile devices. Chapter 13 – Students will summarize the legal and technical challenges in conducting cloud forensics. Chapter 14 – Students will generate report finds with forensic software tools. Chapter 15 – Students will prepare forensics evidence for a testimony. Chapter 16 – Students will examine codes of ethics for various companies. ADOPTED TEXT(S): Guide to Computer Forensics and Investigations, 6th Edition Cengage Learning Nelson/Phillips/Steuart Copyright 2019 ISBN: 978-1-337-56894-4 9a: SUPPLEMENTAL TEXTS OTHER REQUIRED MATERIALS: Web-Based Labs Printed Access Card for access to the web-based labs for students. GRADING SCALE: Grading will follow the policy in the catalog. The scale is as follows: A: 90 – 100 B: 80 – 89 C: 70 – 79 D: 60 – 69 F: 0 – 59 GRADING PROCEDURES OR ASSESSMENTS: (Course Syllabus – Individual Instructor Specific) Category EXAMPLE ONLY Total Points % of Grade Chapter Assignments (10x30) 300 30% Quizzes (10x20) 200 20%
Long Term Goal(3-5 Outcomes for this year: What am I going to do or learn to achieve my outcomes By when will I achieve my outcomes? What support / provision will help me achieve my outcomes? What difference will my outcomes make to me? Strategies / Key Approaches: Timetabled Sessions: Resources needed: (including staffing) Strategies / Key Approaches: Timetabled Sessions: Resources needed: (including staffing) Who will support me to achieve these outcomes and monitor my progress towards achieving them: Need 4: Long Term Goal(3-5 years): Outcomes for this year: What am I going to do or learn to achieve my outcomes By when will I achieve my outcomes? What support / provision will help me achieve my outcomes? What difference will my outcomes make to me? Strategies / Key Approaches: Timetabled Sessions: Resources needed: (including staffing) Strategies / Key Approaches: Timetabled Sessions: Resources needed: (including staffing) Who will support me to achieve these outcomes and monitor my progress towards achieving them: Add more outcomes as needed