ETCOG Regional Technology Solutions Safety Tips & News

Pinpoint your location on the 2024 solar eclipse viewing map

Thu, 07 Mar 2024 18:27:23 GMT

The solar eclipse is fast approaching, so get ready to experience this rare event where the moon covers the sun, creating a breathtaking sight. ETCOG Regional Technology Solutions (RTS) has played an important role in enhancing your experience by determining if you are within the path of totality.

The solar eclipse, marked by the alignment of the sun, moon, and Earth, resulting in the temporary obscuration of the sun's light. During this occurrence, the moon casts a shadow on Earth, offering observers a unique glimpse of the sun's corona and a twilight during daylight hours.

Remarkably, half of ETCOG's 14-county region finds itself within the path of totality, positioning East Texas as a prime location for eclipse enthusiasts. This event on Monday, April 8 marks the first total eclipse visible to East Texas since 1878.

To make sure you make the most of this rare occurrence, RTS has built an eclipse map that allows you to pinpoint your location within the path of totality. You can access the map to view your location by visiting go.etcog.org/2024eclipse .

Beyond the eclipse map, RTS specialized in the creation of interactive solutions, ranging from customized apps to digital maps, and prints. These services are offered to city, county, and partners, showcasing ETCOG's commitment to solving local solutions and a low cost.

For more local information → www.visittyler.com/solar-eclipse

Best Practices for Safer Internet Day

Tue, 30 Jan 2024 15:10:32 GMT

The digital realm is evident in our daily lives, impacting personal, professional, and educational areas. Kids nowadays master touch screens before they can articulate sentences, diving into various digital realms. However, this pervasive online presence raises serious security concerns and cyber threats. This concern showcases the importance of Safer Internet Day, a global movement urging everyone to pitch in for a safer online world.

What is Safer Internet Day?

Taking place in early February, Safer Internet Day is a worldwide event. The official host in the U.S. is ConnectSafely, a Silicon Valley non-profit. Its mission - making the internet a safer, more positive space by spreading awareness about responsible and respectful tech use.

Why is it important?

In 2021, over 90% of people in developed countries were internet users, making them targets for cybercrimes like identity theft, financial scams, and malware. The Federal Trade Commission (FTC) reported 3.2 million identity theft cases in 2019, mostly linked to online activities, resulting in hefty financial hits. Safer Internet Day is about sounding the alarm on these threats, offering resources and intel.

Tips to navigate the internet safely:

Safer Internet Day is the perfect time to give your online habits a once-over. Here are some tips for staying safe:

Education is Power:

Stress the need to keep Personally Identifiable Information (PII) private within the organization.
Establish clear online guidelines, including approved websites and applications.
Reinforce the significance of creating strong, unique passwords and discouraging password sharing.

Stay sharp to spot threats:

Promote media literacy within the organization to identify fake news and potential scams.
Heighten awareness of phishing attempts and provide guidance on avoiding them.
Foster open communication channels, particularly within the organization's digital landscape.

Get ahead of the game:

Review and discuss the applications used within the organization, addressing any safety concerns.
Strengthen digital defenses with antivirus software, parental controls, and VPN technology.
Advocate for the implementation of multi-factor authentication (MFA) and regular software updates.
Monitor online transactions to ensure they occur on secure platforms.

Defending the Digital Turf

The internet exposes everyone to cyber threats, from scams to severe data breaches. Organizations can collectively create a more secure online haven for everyone by increasing defenses and adopting safe procedures and practices.

If your organization needs assistance building a plan for secure online practices, our dedicated team is here to help. We understand the dynamic nature of cyber threats and can provide tailored solutions to safeguard your organization's digital assets. Contact us today, and let's collaborate to ensure a safer and more resilient digital future for your organization.

Discover Methods Used by Malicious Actors to Spread Infections

Tue, 22 Aug 2023 15:47:32 GMT

In the rapidly evolving landscape of the digital world, the threat of cyberattacks is an ever-present concern. Cybercriminals have various tools and techniques to infiltrate systems, compromise data, and disrupt the lives of individuals and organizations alike. One common thread that runs through many of these attacks is their ability to exploit human behavior and technological vulnerabilities. Here are the most prevalent methods used by malicious actors to spread infections and explore preventive measures to bolster your digital defenses.

Attack Method: Phishing

Phishing is the oldest trick in the cybercriminal playbook and continues to be remarkably effective. This technique involves sending deceptive emails or messages that appear legitimate, enticing recipients to click on malicious links or download infected attachments. These messages often invoke a sense of urgency or fear, pushing individuals to act hastily without thinking. Attackers may also utilize misspelled words and unexpected file attachments to manipulate users into lowering their guard.

Prevention Technique: Always be cautious when encountering unsolicited emails, especially those demanding immediate action or containing unusual attachments. Hover your cursor over links to preview the URL before clicking, and verify the sender's email address. When in doubt, contact the supposed sender through a separate channel to confirm the message's authenticity.

Attack Method: USB Drives and Cables

Harnessing human curiosity as a weapon, cybercriminals often plant infected USB drives and cables in public spaces, exploiting the innate desire to discover what's hidden within. This practice, known as USB baiting, preys on unsuspecting victims who plug in these devices without considering the potential risks.

Prevention Technique: Exercise extreme caution when encountering unattended USB devices or cables. Avoid connecting unknown devices to your system, as they might contain malware programmed to infect your device upon connection. If you encounter such devices, report them to the appropriate authorities or IT department for proper handling.

Attack Method: Malicious Mobile Apps

The proliferation of smartphones and mobile apps has opened up a new avenue for cyberattacks. Despite stringent vetting processes employed by major app stores, malicious apps sometimes sneak through. These apps can compromise your personal data, steal sensitive information, or even grant unauthorized access to your bank accounts.

Prevention Technique: Prioritize apps from reputable developers with a proven track record. Carefully review app permissions before installation, ensuring they align with the app's intended functionality. Avoid sideloading apps from unofficial sources, as these can pose significant security risks. On work-issued devices, always adhere to company policies regarding app downloads.

Attack Method: Software Vulnerabilities

Cybercriminals are perpetually on the lookout for weaknesses in software systems. Once identified, these vulnerabilities can be exploited to breach security controls and gain unauthorized system access. Regularly updating software is crucial, as developers issue patches and updates to address these vulnerabilities and enhance security.

Prevention Technique: Keep your devices updated by promptly installing software updates. In a corporate environment, adhere to company policies concerning software management. Regularly monitor official sources for security advisories and updates related to the software you use, and apply them in a timely manner.

In the digital age, cybersecurity vigilance is paramount. By understanding cybercriminals' tactics to spread malicious infections, you can take proactive steps to protect your personal information, devices, and systems. Employing a combination of skepticism, caution, and adherence to security best practices will help you navigate the complex landscape of cybersecurity threats and safeguard your digital presence.

How City and County Jurisdictions Can Use GIS in Their Communities

Wed, 26 Jul 2023 20:25:55 GMT

Geographic information systems (GIS) are powerful tools that can be used to visualize, analyze, and manage spatial data. They have a wide range of applications in city and county jurisdictions, including:

Planning and development: GIS can be used to map and manage zoning, land use, transportation, and other infrastructure data to help with planning and development decisions. For example, GIS can be used to identify areas that are suitable for new development or to assess the impact of a proposed development on traffic patterns.
Utility and Asset management: GIS can be used to map and track assets, such as water and sewer utilities, roads, bridges, and buildings. This information can be used to manage assets more effectively and to identify assets that need maintenance or repair.
Emergency management: GIS can be used to map emergency response resources, such as fire stations, hospitals, and shelters. This information can be used to plan for and respond to emergencies more effectively.
Public safety: GIS can be used to map crime data, traffic accidents, and other public safety data. This information can be used to identify crime hot spots, target enforcement efforts, and plan for public safety improvements.
Environmental management: GIS can be used to map environmental data, such as air quality, water quality, and land use. This information can be used to assess the impact of human activity on the environment and to develop and implement environmental policies.

These are just a few of the ways that GIS can be used in city and county jurisdictions. As GIS technology continues to evolve, we can expect to see even more innovative applications of GIS in the years to come.

How to Get Started with GIS

If you're interested in using GIS in your community but don't have the staff time, expertise, or software, ETCOG can help! Our Regional Technology Solutions team offers affordable GIS services. To learn more, visit our GIS Services page .

Artificial Intelligence and the Future of Security

Fri, 14 Jul 2023 19:12:48 GMT

By the way, everything you’ve read on this page (up until now) was not written by a human, but by an AI chatbot. It was simply asked to define artificial intelligence and explain the related security concerns. If you wanted to, you could ask that same bot to write poetry about cats, explain quantum physics, or basically anything else you can think of. The chatbot is a basic example that barely captures AI’s capabilities.

As it evolves, AI technology will become even more advanced with abilities we never thought possible of machines. This, of course, ushers in all sorts of interesting conversations regarding human intelligence vs. machine intelligence, and what might happen if the latter surpasses the former.

Those conversations make this quote from the 1993 movie Jurassic Park eerily relevant: “Your scientists were so preoccupied with whether they could, they didn’t stop to think if they should.”

Nonetheless, AI is an active part of our lives. And it’s not hard to imagine cybercriminals leveraging AI to carry out attacks in the near future. As an example, AI models could learn about a real person and then use bots to mimic their actions and language. This would allow criminals to create advanced phishing campaigns that target specific people at a much more effective rate than any human could.

It’s also possible AI will be used to circumvent attacks from criminal hackers. But even as those technologies become more of a reality, advancements in cyberdefenses will always lag behind advancements in cyberattacks.

Everything you’ve read on this page (up until now) was written by a human, but below was written by an AI chatbot. It was simply asked to define artificial intelligence and explain the related security concerns. If you wanted to, you could ask that same bot to write poetry about cats, explain quantum physics, or basically anything else you can think of. The chatbot is a basic example that barely captures AI’s capabilities.

Artificial intelligence (AI) refers to the simulation of human intelligence in machines that are programmed to think and learn like humans. AI can be divided into several different types, including:

Rule-based systems, which follow a set of predetermined rules to reach a conclusion
Expert systems, which use a knowledge base to make decisions
Neural networks, which are modeled after the human brain and can learn from data
Natural language processing, which enables machines to understand and interpret human language

AI technology has been developed in various areas such as image recognition, self-driving cars, personal assistants, and so on. There are several security concerns regarding AI technology. Here are a couple of examples:

Data poisoning: In some cases, attackers may try to inject malicious data into the training dataset to “poison” the model and cause it to make incorrect decisions.
Physical safety: Some AI applications, such as self-driving cars or industrial robots, may pose physical safety risks if they malfunction or are compromised by an attacker

RTS Team Explores Cyber Defense at TAC Technology Conference

Tue, 30 May 2023 14:50:31 GMT

In the dynamic landscape of technology and cybersecurity, county, city, and regional officials and staff face numerous challenges in delivering efficient and secure services to their communities. To bridge the gap between technology, cybersecurity, and county service, the Regional Technology Solutions (RTS) Team embarked on an empowering journey by attending the Texas Association of Counties (TAC) Technology Conference. With a robust and member-shaped agenda, this conference aimed to equip individuals with critical information and strategies regardless of their technical comfort levels. The body content of your post goes here.

"At the Texas Association of Counties Technology Conference, I had the privilege of representing ETCOG, and it was truly an enriching experience. Engaging with seasoned professionals in the technology industry through insightful presentations provided me with valuable knowledge," said IT Systems Administrator Dylan Savage. "Moreover, networking with fellow county representatives across Texas shed light on the distinctive technological challenges they encounter. This exposure enables us to shape innovative solutions for the counties we represent, fostering progress and growth."

The TAC Technology Conference offered an array of transformative sessions, empowering county and city staff with critical information and strategies. Participants delved into the intricacies of legally required website postings, gaining insights on ensuring compliance and accessibility for county and city services. They explored innovative approaches to managing data storage and backups, safeguarding valuable county information from loss or unauthorized access. Sessions on records management provided techniques for streamlining efficiency and accessibility, while addressing the challenges of maintaining transparency in county operations.

Budgeting for technology projects was a key topic, enabling attendees to maximize the value and impact of county investments in technology and cybersecurity. Finally, sessions on developing technology policies provided guidance on creating a secure and innovative environment while adhering to best practices and legal requirements.

"During our interactions with county IT and non-IT staff, we acquired invaluable knowledge that will greatly enhance our support for ETCOG and Workforce," said IT Network Administrator Brian Brown. "As representatives of ETCOG, understanding the challenges faced by IT officials in Texas provides a profound perspective on the significance of our work. Witnessing the endeavors of other COGs and the counties they serve, I feel immense pride in the accomplishments of ETCOG and the extensive assistance we provide to meet the needs of our local counties."

The RTS Team's participation in the TAC Technology Conference provided them with knowledge, tools, and strategies to bridge the gap between technology and cybersecurity. By actively engaging in various sessions, they gained insights into crucial topics such as website compliance, data management, cybersecurity incident response, and technology policy development. Equipped with this newfound expertise, the RTS Team is poised to drive innovation, enhance county services, and safeguard critical information, ultimately bridging the gap between technology, cybersecurity, and city and county service for the benefit of the East Texas community.

To learn more about how RTS can help your organization safeguard against cyber attacks and promote safe practices, visit → www.regionaltechnologysolutions.com/it-services

Identity Management Day Celebrated on April 11

Tue, 04 Apr 2023 18:20:05 GMT

Launched in 2021, the mission of Identity Management Day is to educate business leaders and IT decision makers on the importance of identity management and key components including governance, identity-centric security best practices, processes, and technology, with a special focus on the dangers of not properly securing identities and access credentials. In addition, the National Cybersecurity Alliance will provide guidance for consumers, to ensure that their online identities are protected through security awareness, best practices and readily-available technologies.

Research by the IDSA reveals that 79% of organizations have experienced an identity-related security breach in the last two years, and 99% believe their identity-related breaches were preventable. According to the 2020 Verizon Data Breach Investigations Report, as many as 81% of hacking-related breaches leverage weak, stolen, or otherwise compromised passwords.

As part of Identity Management Day, the National Cybersecurity Alliance and the IDSA, will provide guidance for stakeholders at all levels, to ensure that identities of employees, machines, applications, and partners are protected through security awareness, best practices and readily-available technologies.

Learn more about Identity Management Day at →

www.idsalliance.org/event/identity-management-day-2023

New Code Enforcement Mapping Module

Tue, 01 Nov 2022 15:42:41 GMT

Simplifying violation tracking and workflow

ETCOG announces a new project partnered with the City of Wills Point to build a code enforcement module for their Geographic Information Systems (GIS) platform. Wills Point has been participating in ETCOG's GIS program for many years, which allows them to contract with ETCOG for low-cost GIS services and platform administration. The new code enforcement module will be used by Wills Point internally by enforcement officers, building officials, and zoning administrators to collect and monitor violations and related inspection information.

"The module allows staff to put a point on a map at the location of a code violation," said ETCOG's GIS Manager, Michelle Cahal. "It follows the work process stages of that violation, noting when the violation has been found, when the department sends a letter out, if a ticket has been issued, whether the issue has been abated, and when the process is complete. It adds the information on a dashboard, and the city can edit the view and sort the violations in various ways to measure responsiveness."

Pam Pearson, the City Administrator for Wills Point, shared with Michelle, "I added a violation to the map and was so excited when I accessed the spreadsheet, and it automatically added it! Thank you again for all the time you have put into this project. I think it will be well received by many communities in ETCOG's area."

For information on ETCOG's GIS program and other technical services, contact Michelle Cahal at 903-218-6434.

Multifactor authentication: Your second line of defense against online hackers

Wed, 12 Oct 2022 17:50:27 GMT

So what is MFA? It is an additional layer of security that protects your accounts with more than just a single password. When logging in from a new device or location, or following a password reset, users will be asked for two things: a password and a security code, often sent to the account owner's cellphone or landline. MFA acts a second line of defense.

So why use MFA? In a word, security. Microsoft reports that there are over 300 million fraudulent sign-in attempts to its cloud services every day. In addition, hackers don't take vacations , the federal Cybersecurity & Infrastructure Security Agency (CISA) says. Their tactics are constantly evolving, and one-third of Americans were victims of cybercrime last year, CISA says.

Does MFA really work? Microsoft says that implementing MFA can block 99.9% of attacks on your accounts. Hackers are getting better at phishing and harvesting passwords to gain unauthorized access . They take advantage of reused passwords stolen in other breaches, but even so, enforcing MFA is an effective barrier that greatly reduces the likelihood of a break-in. Cybercriminals often move on to new targets when they encounter MFA security.

Remember, hackers are like burglars. They are looking for an easy way in. Don't give it to them. Put an extra lock on the door with MFA. Email services provided by TAC CIRA already include MFA. Reach out to TAC CIRA at support@county.org or by phone at (800) 456-5974 to implement MFA today.

What is the Affordable Connectivity Program?

Fri, 11 Feb 2022 18:29:14 GMT

The Affordable Connectivity Program (ACP) is a Federal Communications Commission (FCC) program that replaces the Emergency Broadband Benefit Program (EBB Program) to help low-income households pay for internet service and connected devices.

If your household is eligible , you can receive:

Up to a $30/month discount on your internet service
Up to a $75/month discount if your household is on qualifying Tribal lands
A one-time discount of up to $100 for a laptop, tablet, or desktop computer (with a co-payment of more than $10 but less than $50)

Only one monthly service discount and one device discount is allowed per household. To receive the connected device discount, consumers need to enroll in the ACP with a participating provider that offers connected devices (Note: not all internet company offer device discounts.) The internet company will provide the discount to the consumer.

ETCOG Assists Jurisdictions with Technology Needs

Fri, 04 Feb 2022 20:07:37 GMT

Did you know ETCOG offers quality IT and GIS services for East Texas jurisdictions and agencies through our Regional Technology Solutions program? Our team has recently partnered with the City of Carthage to build an app that assists with data collection and improvement for their water network and city zoning/planning. Here is a Carthage employee using the app to map a location of utility infrastructure.

We're also proud to recently partner with Van Zandt County for new mapping services to capture their redistricting data. Sabine Fire & Rescue also tapped into RTS services recently for upgrading their technology software to assist with communication efforts between stations.

ETCOG began offering technology solutions to its members over ten years ago by creating customized GIS mapping services and 9-1-1 address mapping. We have since expanded to serve our member's IT, GIS, and other technology needs at an affordable cost.

Plan Ahead for Phase Out of 3G Cellular Networks and Service

Wed, 05 Jan 2022 18:05:13 GMT

If your mobile phone is more than a few years old, you may need to upgrade your device before your mobile provider shuts down its 3G network, to avoid losing service. For more information on your mobile providers’ plans for 3G retirement and how you can prepare, contact your provider directly.

What is happening?

Mobile carriers are shutting down their 3G networks, which rely on older technology, to make room for more advanced network services, including 5G. As a result, many older cell phones will be unable to make or receive calls and texts, including calls to 911, or use data services. This will affect 3G mobile phones and certain older 4G mobile phones that do not support Voice over LTE (VoLTE or HD Voice).

Learn more about other connected devices, such as medical devices and home security systems that may be impacted below.

When is it happening?

As early as January 1, 2022, though plans and timing to phase out 3G services will vary by company and may change. Consult your mobile provider’s website for the most up-to-date information.

AT&T announced that it will finish shutting down its 3G network by February 2022.
Verizon announced that will finish shutting down its 3G network by December 31, 2022.
T-Mobile announced that it will finish shutting down Sprint's 3G CDMA network by March 31, 2022 and Sprint's 4G LTE network by June 30, 2022. It also announced it will shut down T-Mobile's 3G UMTS network by July 1, 2022, but has not yet announced a shutdown date for its 2G network.

If your mobile carrier is not listed here, you may still be affected. Many carriers, such as Cricket, Boost, Straight Talk, and several Lifeline mobile service providers, utilize AT&T’s, Verizon’s, and T-Mobile’s networks.

Note: These are dates for completing the shutdowns. Carriers may begin retiring parts of their networks sooner.

What do I need to do?

Contact your mobile provider or consult your provider’s website for more information about their 3G retirement plan and whether your phone, or other connected device, may be affected. It is important to plan now so that you don’t lose connectivity, including the ability to call 911.

Some carrier websites provide lists of devices that will no longer be supported after 3G networks are shut down. You may need to upgrade to a newer device to ensure that you can stay connected, and carriers may be offering discounted or free upgrades to help consumers who need to upgrade their phones.

Some devices may only require a software update to enable VoLTE (HD Voice) or other advanced services. If you purchased your phone independent of a mobile provider, you should be able to check whether your device is 4G LTE (with VoLTE or HD Voice) enabled by checking your phone’s settings or user manual, or by searching your phone’s model number on the internet, to determine whether you need to purchase a new device or install a software update.

Does this just impact phones?

No, other devices, such as certain medical devices, tablets, smart watches, vehicle SOS services, home security systems, and other connected products may be using 3G network services. And don't forget about devices that use cellular connectivity as a back-up when a wired internet connection goes down. If the device is not labeled, contact the monitoring company or other service provider to confirm how the device connects and whether your device may be impacted.

Why are 3G networks being phased out?

As mobile carriers seek to upgrade their networks to use the latest technologies, they periodically shut down older services, such as 3G, to free up spectrum and infrastructure to support new services, such as 5G. Similar transitions have happened before. For example, some mobile carriers shut down their 2G networks when they upgraded their networks to support 4G services. Mobile carriers have the flexibility to choose the types of technologies and services they deploy, including when they decommission older services in favor of newer services to meet consumer demands.

Need Other Help Staying Connected?

As mentioned above, your mobile service provider may be offering special deals on new devices, including some deals that might include a free cell phone.

In addition, although they do not cover the cost of new devices, other FCC programs may be able to assist eligible consumers with the cost of phone or internet services:

The FCC’s Lifeline program may be able to assist eligible consumers in getting connected to phone and internet services. The program provides a discount on phone service for qualifying low-income consumers to ensure that all Americans have the opportunities and security that phone service brings, including being able to connect to jobs, family and emergency services. You can learn more about the Lifeline Program and find out if you may be eligible here .
In addition, The FCC’s Emergency Broadband Benefit Program provides a temporary discount of up to $50 per month towards broadband service for eligible households during the COVID-19 pandemic. You can learn more about the Emergency Broadband Benefit Program, what it covers, and find out if you may be eligible here .

How to Use a Password Manager

Fri, 09 Jul 2021 19:32:18 GMT

There is a reason why you shouldn’t use the same password on multiple sites. This is because there are lists of cracked passwords for sale on the Dark Web, and by using a technique called credential stuffing, bad guys test these previously breached passwords on multiple sites to see if they will unlock another one of your accounts.

Remembering multiple, long passwords may seem like a huge task, but why not consider a password manager?

What is a password manager?

A password manager will take a load off your mind. It helps to create unique and secure passwords for each of your sites while keeping track of what has been used where.

Once you have saved each password to the manager, when you revisit the site, it will auto-populate the details. When it comes to passwords for banking, work access, and other key passwords, it is best to remember these and not save them to your manager.

A password manager will

Autofill your passwords
Suggest new passwords
Manage passwords

All you have to remember is one master password (so make it a good one). To do this we suggest rather using a passphrase, so you can use a line from your favorite song or joke.

How ETCOG continued providing vital social services during the pandemic and saved 40% in communication costs

Thu, 03 Jun 2021 15:38:57 GMT

"RingCentral saved us money. When COVID hit, it saved the day. And I can even say that RingCentral helped us save lives."

This voluntary association of counties, cities, and school districts helps local governments provide social services for seniors, veterans, job seekers, people with disabilities, and other vulnerable residents in the area.

In any given year, ETCOG provides essential services to thousands of people—from job training, to childcare, to transportation, to 9-1-1 and other public safety services. But in 2020, when COVID-19 led to a tremendous spike in unemployment and other social challenges in the region, ETCOG’s services became more important than ever.

At the same time, however, the pandemic resulted in most of ETCOG’s employees to transition working from home. Vacating their workforce development centers, facilities to help seniors, and other locations could have disrupted the association’s ability to deliver vital services at the time the public needed them most.

But fortunately, ETCOG didn’t have that problem—because they had RingCentral.

An aging phone system not designed for remote work

When the full impact of the pandemic began to be felt in March of 2020, ETCOG’s IT team knew they had to act quickly to replace their aging phone system with a modern solution that would allow their staff to work anywhere. “We were facing so many communications problems all at once,” recalls Brandon, IT Systems Administrator.

“Our phone system was really a mix of several services across our sites, and none of them made it easy to set up call forwarding or manage call queues with people in different locations,” Brandon says.

Worse, just as the IT team was trying to figure out how to transition employees to remote work, the pandemic triggered a massive spike in calls from the public—for job placement, transportation, meals for seniors, and other urgent services.

Thankfully, Brandon was able to persuade the association’s leadership to fast-track purchasing a new communications solution.

“The procurement process went very quickly, at least for a government agency,” he says. “A key reason was that RingCentral was such a clear winner on each of our key issues: flexibility, ease of use, functionality, and cost.”

Continuing to serve… even from home

With RingCentral’s cloud communications solution, Brandon’s team was able to set up all employees with the ability to make and receive work calls from anywhere, using RingCentral’s desktop and mobile apps.

“RingCentral actually exceeded our goals for remote work capabilities,” he says. “Not only were we able to empower our staff to take calls right from their computers and cell phones, we were even able to give them services they never had before—like the ability to text message from their work numbers.”

Helping more people

As Brandon points out, being able to text through RingCentral helps the team connect more quickly and reliably with the residents they’re trying to help. “Before they call, they send a text telling the person who we are.

Far more of those first calls are getting answered. In fact, sometimes our employees are able to handle the entire case through text—they don’t even need to call.” And as Brandon notes, this means ETCOG can serve more people each day.

How to Protect your Privacy Online

Mon, 22 Feb 2021 16:58:06 GMT

The Internet touches almost all aspects of our daily lives. We are able to shop, bank, connect with family and friends, and handle our medical records all online. These activities require you to provide personally identifiable information (PII) such as your name, date of birth, account numbers, passwords, and location information. #BeCyberSmart when sharing personal information online to reduce the risk of becoming a cybercrimes victim.

Did You Know?

45% of Americans have had their personal information compromised by a data breach in the last five years.
70% of Americans feel that their personal information is less secure than it was five years ago2
, up from 49% just two years ago.
72% of Americans believe that most of what they’re doing while online is being tracked by advertisers, technology firms and other companies.
Over half of Americans (52%) say they have decided not to use a product or service because they were worried about how much personal information was being collected about them.

Simple Tips

Double your login protection. Enable multi-factor authentication (MFA) to ensure that the only person who has access to your account is you. Use it for email, banking, social media, and any other service that requires logging in. If MFA is an option, enable it by using a trusted mobile device, such as your smartphone, an authenticator app, or a secure token—a small physical device that can hook onto your key ring. Read the Multi-Factor Authentication (MFA) How-to-Guide for more information.
Shake up your password protocol. Use the longest password or passphrase permissible. Get creative and customize your standard password for different sites, which can prevent cyber criminals from gaining access to these accounts and protect you in the event of a breach. Use password managers to generate and remember different, complex passwords for each of your accounts. Read the Creating a Password Tip Sheet for more information.
Keep up to date. Keep your software updated to the latest version available. Maintain your security settings to keeping your information safe by turning on automatic updates so you don’t have to think about it, and set your security software to run regular scans.
If You Connect IT, Protect IT. Whether it’s your computer, smartphone, game device, or other network devices, the best defense against viruses and malware is to update to the latest security software, web browser, and operating systems. Sign up for automatic updates, if you can, and protect your devices with anti-virus software. Read the Phishing Tip Sheet for more information.
Play hard to get with strangers. Cyber criminals use phishing tactics, hoping to fool their victims. If you’re unsure who an email is from—even if the details appear accurate— or if the email looks “phishy,” do not respond and do not click on any links or attachments found in that email. When available use the “junk” or “block” option to no longer receive messages from a particular sender.
Never click and tell. Limit what information you post on social media—from personal addresses to where you like to grab coffee. What many people don’t realize is that these seemingly random details are all that criminals need to know to target you, your loved ones, and your physical belongings—online and in the real world. Keep Social Security numbers, account numbers, and passwords private, as well as specific information about yourself, such as your full name, address, birthday, and even vacation plans. Disable location services that allow anyone to see where you are—and where you aren’t—at any given time. Read the Social Media Cybersecurity Tip Sheet for more information.
Keep tabs on your apps. Most connected appliances, toys, and devices are supported by a mobile application. Your mobile device could be filled with suspicious apps running in the background or using default permissions you never realized you approved—gathering your personal information without your knowledge while also putting your identity and privacy at risk. Check your app permissions and use the “rule of least privilege” to delete what you don’t need or no longer use. Learn to just say “no” to privilege requests that don’t make sense. Only download apps from trusted vendors and sources.
Stay protected while connected. Before you connect to any public wireless hotspot—such as at an airport, hotel, or café—be sure to confirm the name of the network and exact login procedures with appropriate staff to ensure that the network is legitimate. If you do use an unsecured public access point, practice good Internet hygiene by avoiding sensitive activities (e.g., banking) that require passwords or credit cards. Your personal hotspot is often a safer alternative to free Wi-Fi. Only use sites that begin with “https://” when online shopping or banking.

How to Avoid Phishing Attacks

Mon, 01 Feb 2021 20:01:45 GMT

Phishing attacks use email or malicious websites to infect your machine with malware and viruses in order to collect personal and financial information. Cybercriminals attempt to lure users to click on a link or open an attachment that infects their computers, creating vulnerability to attacks. Phishing emails may appear to come from a real financial institution, ecommerce site, government agency, or any other service, business, or individual. The email may also request personal information such as account numbers, passwords, or Social Security numbers. When users respond with the information or click on a link, attackers use it to access users’ accounts.

HOW CRIMINALS LURE YOU IN

The following messages from the Federal Trade Commission’s OnGuardOnline are examples of what attackers may email or text when phishing for sensitive information:

“We suspect an unauthorized transaction on your account. To ensure that your account is not compromised, please click the link below, and confirm your identity.”
“During our regular verification of accounts, we couldn’t verify your information. Please click here to update and verify your information.”
“Our records indicate that your account was overcharged. You must call us within 7 days to receive your refund.”
To see examples of actual phishing emails, and steps to take if you believe you received a phishing email, please visit “

SIMPLE TIPS:

Play hard to get with strangers. Links in email and online posts are often the way cybercriminals compromise your computer. If you’re unsure who an email is from—even if the details appear accurate—do not respond, and do not click on any links or attachments found in that email. Be cautious of generic greetings such as “Hello Bank Customer,” as these are often signs of phishing attempts. If you are concerned about the legitimacy of an email, call the company directly.
Think before you act. Be wary of communications that implore you to act immediately. Many phishing emails attempt to create a sense of urgency, causing the recipient to fear their account or information is in jeopardy. If you receive a suspicious email that appears to be from someone you know, reach out to that person directly on a separate secure platform. If the email comes from an organization but still looks “phishy,” reach out to them via customer service to verify the communication.
Protect your personal information. If people contacting you have key details from your life—your job title, multiple email addresses, full name, and more that you may have published online somewhere—they can attempt a direct spear-phishing attack on you. Cyber criminals can also use social engineering with these details to try to manipulate you into skipping normal security protocols.
Be wary of hyperlinks. Avoid clicking on hyperlinks in emails and hover over links to verify authenticity. Also ensure that URLs begin with “https.” The “s” indicates encryption is enabled to protect users’ information.
Double your login protection. Enable multi-factor authentication (MFA) to ensure that the only person who has access to your account is you. Use it for email, banking, social media, and any other service that requires logging in. If MFA is an option, enable it by using a trusted mobile device, such as your smartphone, an authenticator app, or a secure token—a small physical device that can hook onto your key ring. Read the Multi-Factor Authentication (MFA) How-to-Guide for more information.
Shake up your password protocol. According to NIST guidance, you should consider using the longest password or passphrase permissible. Get creative and customize your standard password for different sites, which can prevent cyber criminals from gaining access to these accounts and protect you in the event of a breach. Use password managers to generate and remember different, complex passwords for each of your accounts. Read the Creating a Password Tip Sheet for more information.
Install and update anti-virus software. Make sure all of your computers, Internet of Things devices, phones, and tablets are equipped with regularly updated antivirus software, firewalls, email filters, and anti-spyware.

For more information on ways you can safeguard your information, visit the National Security Agency’s Cybersecurity Information page.

Internet Safety Overview

Tue, 19 Jan 2021 17:34:52 GMT

Now more than ever, consumers spend increasing amounts of time on the Internet. With every social media

account you sign up for, every picture you post, and status you update, you are sharing information about

yourself with the world. How can you be proactive and “Do Your Part. #BeCyberSmart”? Take these simple steps to connect with confidence and safely navigate the social media world.

Why Should We Care?

Cars, appliances, fitness trackers and other wearables, lighting, healthcare, home security, and more all contain sensing devices that can talk to another machine and trigger other actions. Examples include devices that direct your car to an open spot in a parking lot; mechanisms that control energy use in your home; and tools that track eating, sleeping, and exercise habits.
New Internet-connected devices provide a level of convenience in our lives, but they require that we share more information than ever.
The security of this information, and the security of these devices, is not always guaranteed. Once your device connects to the Internet, you and your device could potentially be vulnerable to all sorts of risks.
With more connected “things” entering our homes and our workplaces each day, it is important that everyone knows how to secure their digital lives.

Simple Tips

Shake up your password protocol. Change your device’s factory security settings from the default password. This is one of the most important steps to take in the protection of IoT devices. According to NIST guidance, you should consider using the longest password or passphrase permissible. Get creative and create a unique password for your IoT devices. Read the Creating a Password Tip Sheet for more information.
Keep tabs on your apps. Many connected appliances, toys, and devices are supported by a mobile application. Your mobile device could be filled with apps running in the background or using default permissions you never realized you approved— gathering your personal information without your knowledge while also putting your identity and privacy at risk. Check your app permissions and learn to just say “no” to privilege requests that don’t make sense. Only download apps from trusted vendors and sources.
Secure your network. Properly secure the wireless network you use to connect Internet-enabled devices. Consider placing these devices on a separate and dedicated network. For more information on how you can secure your network, view the National Security Agency’s Cybersecurity Information page.
If You Connect IT, Protect IT. Whether it’s your computer, smartphone, game device, or other network devices, the best defense is to stay on top of things by updating to the latest security software, web browser, and operating systems. If you have the option to enable automatic updates to defend against the latest risks, turn it on.

5 Tips to be Cyber Secure at Work

Wed, 06 Jan 2021 14:49:02 GMT

Businesses face significant financial loss when a cyber attack occurs. In 2019, the U.S. business sector had a 17% increase in data breaches: 1,473 breaches. Cybercriminals often rely on human error—employees failing to install software patches or clicking on malicious links—to gain access to systems. From the top leadership to the newest employee, cybersecurity requires the vigilance of everyone to keep data, customers, and capital safe and secure. #BeCyberSmart to connect with confidence and support a culture of cybersecurity at your organization.

Simple Tips:

1. Treat business information as personal information. Business information typically includes a mix of personal and proprietary data. While you may think of trade secrets and company credit accounts, it also includes employee personally identifiable information (PII) through tax forms and payroll accounts. Do not share PII with unknown parties or over unsecured networks.

2. Don’t make passwords easy to guess. As “smart” or data-driven technology evolves, it is important to remember that security measures only work if used correctly by employees. Smart technology runs on data, meaning devices such as smartphones, laptop computers, wireless printers, and other devices are constantly exchanging data to complete tasks. Take proper security precautions and ensure correct configuration to wireless devices in order to prevent data breaches. For more information about smart technology, see the Internet of Things Tip Card.

3. Be up to date. Keep your software updated to the latest version available. Maintain your security settings to keeping your information safe by turning on automatic updates, so you don’t have to think about it, and set your security software to run regular scans.

4. Social media is part of the fraud toolset. By searching Google and scanning your organization’s social media sites, cybercriminals can gather information about your partners and vendors, as well as human resources and financial departments. Employees should avoid oversharing on social media and should not conduct official business, exchange payment, or share PII on social media platforms. Read the Social Media Cybersecurity Tip Sheet for more information.

5. It only takes one time. Data breaches do not typically happen when a cybercriminal has hacked into an

organization’s infrastructure. Many data breaches can be traced back to a single security vulnerability, phishing attempt, or instance of accidental exposure. Be wary of unusual sources, do not click on unknown links, and delete suspicious messages immediately. For more information about email and phishing scams, see the Phishing Tip Sheet.

Cyber Hygiene Tips for Remote Workers

Mon, 06 Apr 2020 18:17:35 GMT

Cybersecurity is always a priority. When teleworking or working remotely, additional cybersecurity strategies must be considered.

Environment

Teleworking spaces can include your home, or a public or shared space. Please check with your employer to ensure you are working from an approved location. Be sure to follow the same processes and procedures as if you were in your typical physical work location. These include:

Keep your work-space clean. Do not leave documents unattended or in view of unauthorized people. This includes family members, roommates, friends, other coffee shop or library patrons, etc.
Keep devices locked when unattended. Set your computers and phones to lock when not in use for more than a few minutes. If your locked screen previews new messages or emails, contact your organization's IT help desk to learn how you can hide them.
When participating in phone conversations or digital meetings, make sure confidential conversations cannot be heard.
Keep your work and personal business separate. Become familiar with your organization's acceptable use policy to ensure you are not violating laws or policies by conducting personal business on a work device.
Do not download sensitive or confidential work documents to your home computer.
At the end of the workday, log off all work devices and remote work platforms.

Internet Access

Contact your organization's IT department to determine how to safely connect to your work networks. Generally, best practice is to access the Internet only through a trusted network such as your password-protected home Wi-Fi or traditional network cable. Because of the security risks, if possible, avoid connecting to public Wi-Fi in shared locations.

Consider using work-issued mobile hotspots, smart phone tethering, or private networks that are password-protected. All other connection points should be treated as insecure.
To avoid automatic WiFi connections, turn off automatic WiFi connections until you're ready to connect to a secure connection.
Always connect through your organization's Virtual Private Network (VPN) while on unsecured or public Wi-Fi access points.
In a security event, disconnect from WiFi immediately and contact your IT help desk.

Network and system administrators may prepare to manage the increased load caused by additional teleworkers by implementing strategies to handle additional traffic, such as split tunneling. Split tunneling allows the administrators to allow high bandwidth traffic that does not need to be secured to go directly to the internet, rather than to the organization first. Even if your organization permits split tunneling, you should follow these basic hygiene items:

Only go to websites that you know are trusted.
Limit high bandwidth activities such as streaming non work-related videos or music.
Don't click on suspicious emails, links, or attachments.
Forward any suspicious emails you receive to your appropriate IT contact.
Only use your work devices for work-related tasks.
Do not share your device or password with anyone.

Multi-Factor Authentication

Multi Factor Authentication (MFA) requires users to authenticate their username and password with an additional credential such as a code sent via text message or automated phone call, a push notification from a smartphone app, or other method. MFA helps verify the identity of a person, and as a result helps keep your organization's data safe. Contact your IT help desk to see if a MFA solution is available for you.

If you have issues, make sure to call your organization's IT help desk for assistance.

Courtesy of the Department of Information Resources

Tips to Protect Yourself from Identity Theft

Fri, 07 Feb 2020 20:51:02 GMT

The average person will not discover that their identity has been stolen until 14 months after the crime. - TBG Solutions

ETCOG recently teamed up with TBG Solutions of Tyler to offer the new Cyber Security Awareness training now required through HB 3834. Mark Seguin facilitated the training for ETCOG board/committee members and staff on January 30th. Mark educated attendees on phishing, data protection, social media safety, and other cybersecurity-related topics. Here are some noteworthy tips we wanted to share with our partners on common identity theft tactics:

Phishing/Vishing/Smishing

Phishing is data collection via email. Vishing is done over the phone. Smishing is through text message. If you ever receive a message or phone call asking for information or that just seems fishy do NOT click on links or give information out. Verify with the sender or call back the number the visher is claiming to be calling from.

Data Protection

Physical documents that contain credit card numbers, social security numbers, emails, addresses, dates of birth, or other sensitive data need to be shredded. To prevent mail theft, use a PO Box to send and receive mail. Keep all sensitive data stored in a locked safe, ideally.

Plausible Deniability

If you do not have a social media account, you leave the door open for identity thieves to create one for you and smear your reputation. In order to defend against these scandals, you need to have a social media account with at least a picture, your name and email address.

Debit and Credit Cards

Credit cards are safer than debit cards, since you don’t have to use your PIN number in the transaction. You should also check your credit and debit statements to make sure you recognize all charges.

ID Theft Protection

The question is no longer whether or not you need ID Theft protection; it is which ID Theft protection plan you have. Your plan should meet several criteria: black market chatroom monitoring, full restoration service (done for you, not just advice telling you how to do it), coverage for the entire family (child ID Theft is a major issue), as well as credit, document, and data monitoring.

Sound interesting? Stay tuned for future cyber security training opportunities at ETCOG!

Tax Identity Theft Awareness Week Part 2

Mon, 27 Jan 2020 19:10:55 GMT

Last week, we shared the warning signs of online tax scam. Tax-related identity theft occurs when someone uses your stolen personal information, including your Social Security number, to file a tax return claiming a fraudulent refund.

Here are some tips to avoid being victim

Never Send Sensitive Information in an Email. Information sent through email can be intercepted by criminals. Make sure to consistently check your financial account statements and your credit report for any signs of unauthorized activity.
Secure Your Computer. Ensure your computer has the latest security updates installed. Check that your anti-virus and anti-spyware software are running properly and receiving automatic updates from the vendor. If you haven't already done so, install and enable a firewall.
Carefully Select the Sites You Visit. Safely searching for tax forms, advice on deductibles, tax preparers, and other similar topics requires great caution. NEVER visit a site by clicking on a link sent in an email, found on someone's blog, or in an advertisement. The websites you land on might look like legitimate sites, but can also be very well-crafted fakes.
Be Wise with Wi-Fi. Wi-Fi hotspots are intended to provide convenient access to the internet, however, this convenience can come at a cost. Public Wi-Fi is not secure and is susceptible to eavesdropping by hackers, therefore, never never use public Wi-Fi to file your taxes!
Look for Clear Signs. Common scams will tout tax rebates, offer great deals on tax preparation, or offer a free tax calculator tool. If you did not solicit the information, it's likely a scam.
Be on the Watch for Fake IRS Scams. The IRS will not contact you via email, text messaging, or your social network, nor does it advertise on websites. Additionally, if an email appears to be from your employer or bank claiming there is an issue that requires you to verify personal information, this is most likely a scam as well. Don’t respond to these types of emails; always contact the entity directly.
Always Utilize Strong Passwords. Cybercriminals have developed programs that automate the ability to guess your passwords. To best protect yourself, make your passwords difficult to guess. Passwords should have a minimum of nine characters and include uppercase and lowercase letters, numbers, and symbols.

Source: cisecurity.org

Tax Identity Theft Awareness Week Part 1

Fri, 24 Jan 2020 19:10:55 GMT

Tax season is in full swing, which means criminals will go to great lengths to separate you from your money, your identity, or anything of value that is within their reach. They may offer seemingly legitimate "tax services" that are actually designed to steal your identity and your tax refund. Often times, criminals will lure you in with an offer of larger write-offs or refunds. Such scams might include fake websites and tax forms that look like they belong to the Internal Revenue Service (IRS) in order to trick you into providing your personal information.

Warning Signs of an Online Tax Scam

An email or link requesting personal and/or financial information, such as your name, social security number, bank or credit card account numbers, or any additional security-related information.
Emails containing various forms of threats or consequences if no response is received, such as additional taxes or blocking access to your funds.
Emails from the IRS or federal agencies. The IRS will not contact you via email.
Emails containing exciting offers, tax refunds, incorrect spelling, grammar, or odd phrasing throughout.
Emails discussing "changes to tax laws." These email scams typically include a downloadable document (usually in PDF format) that purports to explain the new tax laws. However, unbeknownst to many, these downloads are almost always populated with malware that, once downloaded, will infect your computer.