Disaster Due Diligence January 15, 2010
Communicable illness
HEADLINE: U.S. 5 infectious diseases that have the potential to re-emerge
SUMMARY: Some experts are concerned that diseases once thought eradicated such as tuberculosis, mumps, whooping cough, smallpox and scarlet fever have the potential to re-emerge. Factors cited for this possibility include increased world travel, immigration and homelessness, fear of potential vaccination side effects and the threat of bioterrorism.
STORY LINK: http://www.pennlive.com/bodyandmind/index.ssf/2010/01/5_infectious_diseases_that_rem.html
ANALYSIS: Advances during the last century in immunization, antibiotics and public health practices produced significant results, including the virtual conquering of several diseases. Since 1900, the average life expectancy for Americans has increased by about 30 years. What these advances have not overcome, however, is biology, nature’s amazing resiliency and malfeasance on the part of some humans.
Tuberculosis offers a prime example, one that is tracked globally by health officials. Once a widespread scourge, it was known as consumption because it seemed to consume its victims from within. The development of treatment regimens using four first-line drugs offered an effective counter to this ancient disease. Through a combination of misuse of the drugs and not completing the entire regimen, some TB has mutated to be resistant to several of these medicines, drug- and multidrug-resistant tuberculosis (MDR-TB). MDR-TB requires more lengthy treatment using more costly second-line drugs. Some TB has further evolved, becoming extensively drug resistant (XDR-TB), unable to be treated by even some second-line drugs. Most distressing but still rare, has been the emergence of extremely drug resistant tuberculosis (XXDR-TB) which is resistant to all current drug treatments and nearly always fatal.
Of the other diseases cited, only smallpox is known to have been eliminated in nature. It is here that the human threat emerges. There are two known samples of the smallpox virus in existence, both held in government laboratories, one in Russia and one in the United States. The potential for compromise of the security of one of these samples or that the virus could be replicated using genetic engineering was a rationale behind the unsuccessful smallpox vaccination program in 2004. While many would dismiss this as a viable threat, it is instructive to note that anthrax sickness has been long considered improbable in developed nations, yet the 2001 bioterrorism attacks, a late-2009 gastrointestinal case in New Hampshire, and current sickness and deaths among heroin users in Europe all resulted from anthrax.
The lesson here is that while preventive measures are largely successful, it is impossible to prevent against every threat. Understanding vulnerabilities and developing measures to address any communicable disease – whether H1N1 influenza or whooping cough – at home or in the workplace can be the difference between overcoming adversity and becoming a statistic.
HEADLINE: Why seniors really should fear Swine Flu
SUMMARY: Contrary to the initial information disseminated by health officials, new analysis by the Centers for Disease Control and Prevention shows that H1N1 is more than twice as deadly to seniors as children. As a result, "many older adults undoubtedly underestimate their own risk and the importance of getting vaccinated," says Peter Sandman, a longtime scholar of risk communication. "Older adults have been told they don't have to worry, and that's not true. If the virus comes back, people will die."
STORY LINK: http://www.newsweek.com/id/229947
ANALYSIS: As a novel (i.e. new) disease, H1N1 needed to develop a “track record” before its full impact could be understood. While initial guidance was -- in retrospect -- under-informed, it was also just guidance presented relative to the bigger picture. Even if you are at a lesser risk for a particular disease, you are still at risk. In the case of H1N1, there is an effective and widely proven vaccine; declining protection simply creates an easily avoidable risk.
HEADLINE: Tuberculosis patient flies despite being on banned list
SUMMARY: Despite being on a federal health “do-not-fly’’ list, a person with an active case of tuberculosis was allowed aboard a US Airways flight from Philadelphia to San Francisco last week. Because the flight was less than eight hours, officials do not believe other passengers are at risk, but "we don't think anyone with active tuberculosis should get on a plane," Dr. Martin Cetron, CDC's director for global migration and quarantine, told CNN.
STORY LINK: http://www.cnn.com/2010/HEALTH/01/12/tuberculosis.flight/index.html
ANALYSIS: One of the characteristics of an open society is freedom of movement. While public health and other travel-related laws and regulations are largely successful in protecting the population, this event reinforces that no safety system is perfect. In this particular case, the passenger in question had knowledge of the disease. This is not always the case, as was witnessed with the initial spread of SARS.
The philosophical question must be posed: should infection by a communicable illness prevent all public travel? What if that travel is essential to livelihood? There is a degree of individual responsibility inherent in this incident. If you know that you are ill with a communicable disease – whether TB or H1N1 influenza – you hold an inherent responsibility not to spread it to others. Conversely, had this individual boarded the aircraft wearing a surgical mask, would fellow passengers have reacted in a calm and measured manner? Public use of medical masks is common practice in Eastern society. Acceptance of that practice has yet to take hold outside of the clinical setting in the United States. As individuals and as a society, this is something to consider.
Not knowing who is on a plane next to you, or your employees, is why you need a travel policy as part of a corporate communicable illness plan.
National security
HEADLINE: U.S. to further raise airline security, official says
SUMMARY: In response to the information collected from the terrorist responsible for the attempted bombing of an airplane on Christmas and other intelligence gathered from our security agencies, the TSA is increasing airline security. The new regulations are expected to include further in-flight restrictions in passengers’ movement, more random pre-flight screening of passengers and an increase in the number of federal air marshals on flights.
STORY LINK: http://www.msnbc.msn.com/id/34864969/ns/us_news-airliner_security/
ANALYSIS: These additional measures are designed to better control and observe passengers during flight. As with this recent attempt and the attempt that Richard Reid made, observant fellow passengers were able to thwart these attempts. Good fortune was also a major factor in preventing an in-flight bombing.
As travelers endure more delays, more evasive screening and restricted movement while in flight, it is important to realize that terrorism is a very real and growing threat. Few people realize that the chemical being widely used for explosive devices, called PETN, is widely used in medicine. Lentonitrat, which is used for the treatment of heart disease, is almost pure PETN. Less than three ounces of this chemical was sewn into the undergarments of the failed Christmas Day bomber. This chemical is odorless and is almost impossible to detect with the equipment currently employed at the airport screening areas.
Fortunately, PETN requires a lot of heat to explode and usually the detonation device or the ignition process is identified or fails before the explosion takes place. We may not always be so lucky, as the terrorists keep trying and improving their methods. The TSA did not help matters when they released their Security Procedures by mistake a couple of months ago, which I previously commented on in this forum.
Travelers and individuals in general need to be vigilant to prevent future terrorist attacks. Some tips to help you safeguard yourself, community and fellow travelers:
-
Look for individuals who exhibit apprehension or nervousness as they approach security, or may be wearing too many clothes or not dressed appropriately for the conditions.
-
Report any odd, unexplained odors, which could be a chemical-based explosive or detonation device, or any liquids leaking from containers or unusual stains on packages and luggage.
-
Report anyone in possession of too many batteries, “unique’’ batteries, unexplainable wires or too many matches.
-
Watch for bags that appear too heavy for their size when being handled.
If you see any of these characteristics, contact the authorities. Remember, that in 2009, the U.S. arrested 15 people for serious terrorist activities and almost all of them were U.S. citizens. The game is changing every day and the stakes are getting much higher.
Data security
HEADLINE: Beware who fixes that broken laptop
SUMMARY: According to a study by the privacy group the Ponemon Institute, data-recovery services are responsible for about 20 percent of breaches in which companies lose control of personal data pertaining to employees or customers. The study classified “loss’’ as any situation in which personal data leaves a company's control, such as the movement of hard drives containing sensitive information like social security numbers or credit card data to unaffiliated third parties.
STORY LINK: http://www.forbes.com/2010/01/05/data-recovery-privacy-technology-cio-network-breaches.html
ANALYSIS: Disaster Due Diligence is needed before a disaster, not afterward. Knowing who you are giving access -- whether physically or digitally -- is critical. Most employees have low technology skills and understanding. The results can be devastating if someone obtains access.
When conducting a “hot wash” after a loss of data, human error is identified in most cases. Most have access to critical information or even store the information on laptops. If (when) technology problems occur, having prequalified vetted resources is essential to protect data security. We have worked with companies who have found out after the fact that their employee was not who they thought they were. False identities, multiple Social Security numbers, hidden assets, and different agendas are too common.
Have you conducted background checks on vendors and employees? Is someone with a questionable past accessing your data every day or in a crisis?
HEADLINE: Heartland, Visa announce $60 million settlement
SUMMARY: Heartland Payment Systems reached a settlement to pay Visa-branded credit and debit card issuers up to $60 million to cover losses incurred from a massive data breach. Industry analysts termed the deal as “fair and reasonable’’ for Heartland, which had an estimated 130 million credit and debit card numbers stolen from its system.
STORY LINK: http://www.bankinfosecurity.com/articles.php?art_id=2054
ANALYSIS: Alice in Wonderland would find the world of identity protection, theft, liabilities and regulations upside down. It is amazing that the firms involved found that paying only $60 million was good. In my world that represents significant impact.
While these firms may view this dollar amount as low, it does establish teeth in the liability world for violation of Red Flags violations. Has your firm identified identity and critical information both in hard copy and digitally? Do you have a plan? The regulations require training, a compliance officer, and a mitigation plan. Failure to address these could be considered negligence or gross negligence.
The first step is a Benchmark/Gap Analysis to identify the applicable Red Flags and essential data. How do you know that your sensitive information is safe? Do your employees know what to do?
Preparedness groups
Join Firestorm’s LinkedIn groups and help build a Culture of Preparedness for your family and organization:
DISASTER READY PEOPLE: http://www.linkedin.com/groups?gid=1914314&trk=myg_ugrp_ovr
WORKPLACE VIOLENCE: http://www.linkedin.com/groups?gid=1898572&trk=myg_ugrp_ovr
COMMUNICABLE ILLNESS: http://www.linkedin.com/groups?gid=1899278&trk=myg_ugrp_ovr
SWINE FLU: http://www.linkedin.com/groups?gid=1921222&trk=myg_ugrp_ovr
|