Information Managers
  • Home
  • Services
    • All Services
  • Templates
  • Blog
  • Contact Us
  • Practice Management Success
  • Podcasts

7x Your Professional Education – for Members of Information Managers Network

Posted on April 7, 2016 by Jean Eaton in Practice Management Nugget Interview

In this FREE 30-minute Practice Management Nugget Webinar with Dustin Rivers you will get a behind-the-scenes peak at the upcoming 2016 Saskatchewan Connections conference.

The Connections events are each regionally based conferences designed for Access, Privacy, Security and Information / Records Management professionals working for public agencies.

Through a series of plenary, breakout and workshop sessions, delegates will gain a clearer understanding of access to information, protection of privacy, information security, and records management issues that arise in organizations subject to FOIP, LAFOIP, and HIPA. More importantly, discussion focuses on the connections between these disciplines.

25+ sessions and 35+ speakers over 2 days

Regina SK May 10-11, 2016

Learn how you can 7x your professional education starting with listening to this interview with Dustin Rivers, Executive Director, Verney Conference Management right now!

The 2016 Saskatchewan Connections: Access, Privacy, Security, Records Management & Health IM Conference, is also part of a series of regionally based conferences, all based on similar themes. They are the only multi-disciplinary, cross-jurisdictional, and community-based developed events for the greater public service across Canada. As a value-added bonus, participants of this event also receive access to the presentations from these Connections events in the same calendar year!

Verney Conference Management

Verney Conference Management

www.ontarioconnections.ca

www.manitobaconnections.ca

www.maritimeconnections.ca

www.nlconnections.ca

www.skconnections.ca

 

Whether you are a new attendee, have attended many times in the past, are new to the field or are a seasoned veteran…this event will offer something for everyone.

Recorded Thursday, April 7, 2016

7x Your Professional Education

This conference is for you if you are an

  • Access & Privacy Professional
  • Information Technology and Information Security Expert
  • Academic
  • Lawyer
  • Human Resources Professional
  • FOIP/LAFOIP Officer
  • Federal Public Servant
  • Communications Manager
  • Information / Records Manager
  • Municipal Employee
  • Service Delivery Personnel
  • Chief Privacy Officer
  • Chief Counsel
  • Security Officer

You should also attend if: 

  • You are a member of your organization's library community and are concerned with how information is categorized and retrieved
  • You are an archivist and are responsible for managing legal and historically significant information
  • You are a manager responsible for program and/or client records of all kinds, including personal, secure and classified information
  • You are a knowledge manager responsible for designing and leveraging the information management practices of your organization
  • You are interested in managing information for the purposes of:
    • Service Improvement
    • Service Transformation
    • Management Accountability Framework response
    • Departmental Audit
    • Program Management
    • Information Technology Deployment and Optimization

 

 

Dustin_Rivers_Verney

Dustin Rivers Executive Director Verney Conference Management

 Dustin Rivers

Dustin Rivers is the Executive Director of Verney Conference Management.

Since 2002, Dustin and Verney have been providing Conference Management Solutions across Canada.

hosted by Jean Eaton of Information Managers Ltd.

Your Practice Management Mentor and Practical Privacy Coach

 

Register for the 2016 Saskatchewan Connections event

 

access, access and privacy confernce, Health IM, privacy, Records Management, Regina, Saskatchewan, security, Verney Conference Management

7x Your Professional Education

Posted on April 5, 2016 by Jean Eaton in PMN Replay

In this FREE 30-minute Practice Management Nugget Webinar with Dustin Rivers you will get a behind-the-scenes peak at the upcoming 2016 Saskatchewan Connections conference.

The Connections events are each regionally based conferences designed for Access, Privacy, Security and Information / Records Management professionals working for public agencies.

Through a series of plenary, breakout and workshop sessions, delegates will gain a clearer understanding of access to information, protection of privacy, information security, and records management issues that arise in organizations subject to FOIP, LAFOIP, and HIPA. More importantly, discussion focuses on the connections between these disciplines.

25+ sessions and 35+ speakers over 2 days

Regina SK May 10-11, 2016

Learn how you can 7x your professional education starting with listening to this interview with Dustin Rivers, Executive Director, Verney Conference Management right now!

The 2016 Saskatchewan Connections: Access, Privacy, Security, Records Management & Health IM Conference, is also part of a series of regionally based conferences, all based on similar themes. They are the only multi-disciplinary, cross-jurisdictional, and community-based developed events for the greater public service across Canada. As a value-added bonus, participants of this event also receive access to the presentations from these Connections events in the same calendar year!

Verney Conference Management

Verney Conference Management

www.ontarioconnections.ca

www.manitobaconnections.ca

www.maritimeconnections.ca

www.nlconnections.ca

www.skconnections.ca

 

Whether you are a new attendee, have attended many times in the past, are new to the field or are a seasoned veteran…this event will offer something for everyone.

Thursday, April 7, 2016

(replay available for a limited time)

 Join us for Practice Management Nugget Webinar

7x Your Professional Education

This conference is for you if you are a an

  • Access & Privacy Professional
  • Information Technology and Information Security Expert
  • Academic
  • Lawyer
  • Human Resources Professional
  • FOIP/LAFOIP Officer
  • Federal Public Servant
  • Communications Manager
  • Information / Records Manager
  • Municipal Employee
  • Service Delivery Personnel
  • Chief Privacy Officer
  • Chief Counsel
  • Security Officer

You should also attend if: 

  • You are a member of your organization's library community and are concerned with how information is categorized and retrieved
  • You are an archivist and are responsible for managing legal and historically significant information
  • You are a manager responsible for program and/or client records of all kinds, including personal, secure and classified information
  • You are a knowledge manager responsible for designing and leveraging the information management practices of your organization
  • You are interested in managing information for the purposes of:
    • Service Improvement
    • Service Transformation
    • Management Accountability Framework response
    • Departmental Audit
    • Program Management
    • Information Technology Deployment and Optimization

 

 

Dustin_Rivers_Verney

Dustin Rivers Executive Director Verney Conference Management

 Dustin Rivers

Dustin Rivers is the Executive Director of Verney Conference Management.

Since 2002, Dustin and Verney have been providing Conference Management Solutions across Canada.

hosted by Jean Eaton of Information Managers Ltd.

Your Practice Management Mentor and Practical Privacy Coach

 

Register for the 2016 Saskatchewan Connections event

 

access, access and privacy confernce, Health IM, privacy, Records Management, Regina, Saskatchewan, security, Verney Conference Management

2016 Saskatchewan Connections Conference

Posted on March 2, 2016 by Jean Eaton in Blog

Hosted by the Saskatchewan Ministry of Justice, Access and Privacy Branch (click here to learn more about the hosts), the 2016 Saskatchewan Connections Conference – Access, Privacy, Security, Records Management and Health IM is a regionally based conference intended to assist public bodies in developing connections between these disciplines and address the associated challenges.

Access, Privacy, Security and Information / Records Management challenges are intertwined with almost everything  public bodies do. Through a series of plenary, breakout and workshop sessions, delegates will gain a clearer understanding of access to information, protection of privacy, information security, and records management issues that arise in organizations subject to FOIP, LAFOIP, and HIPA. More importantly it focuses on the connections between these disciplines.

Click here to learn more about this event!

May 10-11, 2016

Regina, SK

Topics include:

  1. Information and Privacy Commissioner of Ontario
  2. Data Management/Governance – Director Enterprise Architecture, University of Waterloo
  3. Joint Study with Forrester Research and ARMA International – Forrester Research
  4. Establishing a Social Media Policy that Works for YOUR Organization – Executive Director, Tourism Saskatchewan
  5. BIG DATA and Open Government – Cisco Systems Research Chair in Big Data and Open Government and Assistant Professor, Johnson-Shoyama Graduate School of Public Policy, University of Regina
  6. And more!

Pre-conference workshops include “4 Step Response to a Privacy Breach” with Jean L. Eaton, Your Practical Privacy Coach with Information Managers Ltd.

Hosted by the Ministry of Justice
and
brought to you by Verney Conference Management

@SK_Connections, access, privacy, Records Management, Saskatachewan Connections, Verney Conference Management

The Email You NEVER Want to Get: I Have Received a Complaint From a Patient

Posted on February 22, 2016 by Jean Eaton in Blog

“Alice, I have received a complaint from a patient that you may have committed a privacy breach,” said the clinic manager.

You told me what happened. You did not follow our clinic policies and procedures properly when you left messages for the patient about her follow-up healthcare appointments.

I want to work with you to review and improve our office procedures and training so that this does not happen again.

I also want you to take our privacy awareness training. We provide this training for all new employees during orientation. Sometimes we each need a refresher to remind us how we can maintain privacy, confidentiality, and security of our patients’ information each day.

Alice, you are a good employee I believe that you want to do your job better. Privacy of our patients' information is very important. Our policies and procedures help us to ensure that we are doing our jobs well. This is your warning; if this type of error happens again, I will need to take additional disciplinary steps.

If you have any questions, please talk to me, your supervisor or our Privacy Officer.”

 

Privacy breaches happen.

Healthcare providers are responsible to ensure that employees understand their roles and responsibilities. When a breach happens, we need to contain the breach, correct the problem, and prevent it from happening again.

[clickToTweet tweet=”Do you have an office policy about when and how you should leave telephone messages for patients?” quote=”Privacy awareness training will prevent breaches and may be used as part of the strategy to prevent recurrence.”]

 

Privacy awareness training happens throughout the year. Informal training that is timely – say, the news item of the latest privacy breach – are great opportunities to reinforce key messages. Use ‘what if that happened to us, what would we do?’ to discuss lessons learned and improve your current practices, if necessary.

Review near-miss privacy and security incidents in your practice. This is the ideal time to discuss and fix potential problems before they become breaches.

The Privacy Officer may create and deliver the training and will monitor, supervise, and support the training.

Use a variety of written and multi-media content like

  • posters,

  • newsletters,

  • videos,

  • infographics, and

  • lunch ‘n learn discussions

to reinforce key messages. People love games, challenges, and cyber competitions, too, as a way to create variety and interest in privacy and security.

Privacy awareness training alone won’t guarantee that mistakes or errors in judgement won’t happen, but the healthcare provider and employer are legally responsible to take reasonable steps prevent privacy and security breaches.

Do you have a privacy awareness training program for your healthcare practice?

Let us help you with privacy awareness training on-line and in-person.

discipline, health care, healthcare, healthcare provider, primary healthcare, privacy, privacy awareness, privacy breach, privacy breach sanctions, training

Is a Hosted Email Solution For You?

Posted on January 29, 2016 by Jean Eaton in Blog

Is your email secure? Backed up? If you suddenly lose your email, calendar, or contact list, this could either be a speed bump in your busy day, or a nightmare that may take days or weeks and a lot of money to recover.

If you use email as temporary communications or your primary method of business, it needs to be managed securely. When you or your staff use email from multiple devices – such as your desktop computer, smart phone, or website – you have additional privacy and security requirements.

Many small businesses have purchased an email software system like Outlook as part of their desktop software. Unfortunately, recent software updates from Microsoft do not include Outlook; you are encouraged instead to purchase MS Office 365 software where all of your email is stored on the MS Cloud.

Some businesses use free email accounts – like gmail or yahoo – where emails, calendars, and contact information is on the public cloud. It is accessible from any internet connection but is difficult to back up to a local device that you can control.
If you use email to transact business – employee records, business contacts, company newsletters, subscriptions, financial or consumer purchases, or personally identifying messaging – you need to meet privacy and security requirements.

Previous versions of Windows Server Small Business Server (SBS) edition included Microsoft Exchange so small businesses could create their own in-house email server. This is not included in Windows Server 2012 Essential (SBS replacement). But small businesses still have a few options:

  • Buy the Microsoft Exchange Server full licenses, although it can be quite expensive
  • Sign up to Office 365 which is a hosted / cloud based Microsoft Exchange service from Microsoft with email hosted in the USA. Offices will need to determine their level of risk using personally identifiable information in emails – including sensitive information like credit card, payroll, health information, and other sensitive content – which will be stored out of Canada and subject to US legislation and uses.
  • Contract with a Canadian hosted Microsoft Exchange service with a Canadian based cloud service provider. This might be a cost effective solution and permit full access to email in an environment which is backed up and more easily accessible.

Features offered with a hosted email service

There are many features offered with a hosted email service:

  • Collaboration is easy as you have access to group calendaring and scheduling, shared contacts, folders and calendars, tasks and task delegation, as well as public email folders.
  • Fully functional email software.
  • Sync capabilities to your smart phone without worrying about viruses, spam, or malware, and mail archiving is automatic. Store as much or as little email as you need and do so without dealing with annoying ads.
  • Anti-phishing, anti-virus, and malware software are attached to each email connection.
  • No data ‘left behind' on the device – all data is securely maintained in the hosted email. If a mobile device is lost or stolen, business email is not compromised.
  • You can apply business rules – for example, emails can be prevented from being forwarded to an employee's home gmail account. Employees can securely work from home.
  • All business data is maintained by the business. So if your employee wins the lottery and doesn't come back to work, all business emails have been maintained in the hosted email and not on an employee's home computer.
  • Data is encrypted during the internet transmission.

To get a Hosted Email, you will need internet access with a data plan. You can continue to use your desktop computer and its cable internet access. When you use mobile devices, you can use your mobile provider data plan (Rogers, Bell, Telus, etc), or connect to a trusted WiFi connection.

You are still responsible for good security practices at your location including:

  • Unique user ID and password on your computer network – including mobile devices – and
  • Good password management – complex passwords that are changed regularly
  • Physical safeguards to ensure that your work locations – including mobile locations – are secure from theft
  • Common sense awareness – don't open suspicious phishing or spam emails

Business-class Microsoft Exchange email hosting services mean you're always in touch and up-to-date, in the office or on the road accessing your mobile email.

3 Things to look for in a hosted email solution vendor

  • Canadian provider with data centres only in Canada (Alberta preferable)
  • Reputable company with proven track record
  • Contract including:
    Termination clause – when the contract terminates, the vendor will:
    Notify you in advance of termination
    Allow local back up of your data or data transfer
    Validate that your data has been completely and securely deleted from the data centre
    Encrypted at the data centre – no one at the data centre can read your information and it is secure from someone else hacking into the data centre to steal your data

Confirm your backup plan for your email accounts.  If you don't have one, create a plan.

business associate, BYOD, good security practices, hosted email service, mobile devices, MS Cloud, privacy, SBS, security, Windows Server 2012 Essential

How to Protect Your Privacy at Home and at Work

Posted on January 11, 2016 by Jean Eaton in Blog

60% of small and medium business owners go out of business within 6 months after a privacy and security breach. (Experian)

81% of hospitals and health insurance companies have suffered a data breach (KPMG)

125% increase in data breaches caused by criminals (now outnumber accidental breaches!) (Ponemon)

Free! Data Privacy Day E-course

There are a lot of statics about the cost of a privacy breach. Anyway that you look at it, preventing a privacy breach is your best investment.

Privacy awareness training for your staff is an effective way to prevent privacy breach.

  • Need easy-to-implement privacy awareness training for your office?
  • No cost, on-line privacy awareness training?
  • Need short, simple training messages on your schedule?

Here is your opportunity to receive useful privacy and security tips, tools and templates that you can use right away.

Did you know that Data Privacy Day is on January 28th, 2016?

Data Privacy Day highlights the impact that technology is having on our privacy rights and underlines the importance of valuing and protecting personal information.

As a Data Privacy Day Champion, Information Managers Ltd. recognizes and supports the principle that organizations, businesses and government all share the responsibility of being conscientious stewards of personal information by respecting privacy, safeguarding data and enabling trust.

To celebrate Data Privacy Day, Information Managers is offering a free Data Privacy Day Privacy Awareness E-Course.

When you register, you will receive one email a day from January 21 – 29 with a privacy tip, easy to follow instructions, and links to additional resources that can be applied at home or in the office.

You can share this information with your friends, family, and co-workers.

Data Privacy Day E-course might qualify for CPE credits, too!

Use this Data Privacy Day E-course as part of your privacy awareness training program.

Tweet This!

Tweet This!

Celebrate Data Privacy Day with Information Managers Ltd!

What to do next: Sign up for the Data Privacy Day E-Course!

Register Here – Don't miss out on this free E-course!

E-course ends Jan 29.

* indicates required


Email Format

 

#PrivacyAware, Data Privacy Day, Data Privacy Day Edmonton, Practical Privacy Coach, privacy, privacy awareness, security

National Cyber Security Awareness Month Champions

Posted on October 1, 2015 by Jean Eaton in Archive

We are proud to become a Champion of National Cyber Security Awareness Month (NCSAM) 2015, joining a growing global effort among colleges and universities, businesses, government agencies, associations and non-profit organizations to promote online safety awareness.

Celebrated every October, National Cyber Security Awareness Month was created as a collaborative effort between government and industry to ensure everyone has the resources needed to stay safer and more secure online. As an official Champion, Information Managers recognizes its commitment to cybersecurity and online safety.

Register for the 15 Day Privacy Challenge

Information Mangers is hosting a fun, no-cost privacy awareness event that starts October 15. Participants receive a daily privacy challenge to help them review their existing policies, create new polices, and improve privacy and security best practices. The challenges require ‘entry-level’ skills and are applicable to both office and personal use.

Register for the 15 Day Privacy Challenge

Do you Twitter chat?

The first Twitter chat of National #Cyber #Security Awareness Month (#NCSAM) is Thursday Oct 1!

STOP. THINK. CONNECT., the global cybersecurity awareness campaign, is hosting Twitter chats each Thursday in October at 3 p.m. ET/12 p.m. PT.

Use #ChatSTC to join the conversation, focusing on how to build a safer, more secure and more trusted #Internet.

The schedule and more information are available at National Cyber Security Awareness Month (NCSAM) website.

cyber security, National Cyber Security Awareness Month, Practical Privacy Coach, privacy, security

15 Day Privacy Challenge October 2015

Posted on September 10, 2015 by Jean Eaton in Blog

October is Cyber Security Awareness Month!

Information Managers is proud to host the 15 Day Privacy Challenge  – a fun, no cost educational opportunity on privacy and security. A privacy awareness training program for work and home.

How it Works:
Each day, for fifteen days, participants receive an e-mail with a privacy challenge. The task is a privacy or security best practice that can be used in home or business. Each email includes a short description about why this is a good practice, how to start it, and links to additional resources. Each challenge will take about 15 minutes to complete.

 

Register me for the Free 15 Day Privacy Challenge

We invite you to share this great opportunity with your colleagues.

Help your clients with useful tips, tricks and resources to make their jobs easier.

The 15 Day Privacy Challenge begins October 15, 2015.

Email me my Privacy Challenge!

Use the 15 Day Privacy Challenge as part of your privacy awareness training for your organization.  Send us an email to request promotional materials.

Want to know more?  Listen to the interview with Jean.

Practical Privacy Coach, Practice Management Mentor, privacy, privacy awareness, privacy officer, security, security awareness, training

Signs, signs, everywhere signs

Posted on September 1, 2015 by Jean Eaton in Blog

Do you need medical signs for your clinic?

Every office has signs – signs to remind people to take off their shoes, ring the bell, present their identity card and even to sign in!

I have been in hundreds of healthcare offices and have seen some really great signs. We have selected over 20 signs needed in your clinic. Print and use these signs in your practice!

Download_PowerPoint_Here

 

 

What do you think makes a good sign?

  • Easy to read – simple words, clear print, big enough
  • Pictures sometimes help
  • One message per sign
  • Polite
  • Correct spelling
  • Humour (use carefully!)

What kind of signs do you use?  

Send us a picture and tell us what makes the sign good (or bad).  We'll share it on our site to come up with the Great Big Sample Book of Signs.

Tag us on Twitter and share your sign.

Here are some pictures of signs that we have received:

Great Big Book of Signs - Privacy  Great Big Book of Signs - Receptionist

Great Big Book of Signs - Appointment  Great Big Book of Signs - Walk in0

Great Big Book of Signs - Garbage Only  Great Big Book of Signs - Respectful Workplace

 

This sign was in a cafeteria run by volunteers.  I like it because it is positive, polite, and a pinch of humour.

Kindess

 

 

 

door signs for clinics, Great Big Book of Signs, healthcare, medical signs for clinics, practice management, privacy, templates

Do you need a password for your car?

Posted on July 23, 2015 by Jean Eaton in Blog

Here's one more item for your risk management check list –

Internet based software in cars is a vulnerable opening to malicious hackers through the car's WiFi system.

Ask your dealer – is the dealer the going to manage updates, upgrades, and patches to the car's computer software system? How will you be informed?

#carhacker

See the Video on CTV News

#carhacker, passwords, privacy, security car hacking
«‹34567›»

Search the site

What is the elephant in the room?

The Elephant in the Room Find out here...

Privacy Policy

“This was my first ever time I had to work on a PIA and I was a little nervous about doing it efficiently - but you really made it as simple and straight forward as possible. Thank you for being available for my questions when I had them. I would easily recommend Privacy Impact Assessments to Protect Your Practice course for anyone to do their own PIA's! Thank you so much!”

- Karen Sarabura, Clinic Manager and Privacy Officer, CGA Medical Imaging, Alberta

Register for Free On-line Privacy Breach Awareness Training!

Privacy Policy

Copyright 2022 Information Managers Ltd.