Issue 151 - September 2024
NEWS: WORTHY
Kathy Espinoza to Deliver Closing Keynote at Risk Management Educational Forum
The California JPIA is pleased to announce that Kathy Espinoza will be the closing keynote speaker at the 29th Annual Risk Management Educational Forum. Espinoza has spent 20 years presenting at state and national conferences on human resources management, risk management, and safety.
With more than 35 years of experience, Espinoza has an MBA and a master’s degree in work science/physiology. She consults with hospitals, schools, and county organizations.
Espinoza’s session, “The Big Heat: Dealing with Burnout in the Workforce,” will show attendees how to find a balance point at the end of each workday so they can fully focus on life after work—no more “Candy Crush orphans” and neglected spouses. This session will provide practical tips to help attendees become well-rounded leaders, balancing career and family while staying motivated for the long term.
This year’s Forum, titled Risk Management Confidential, will be held at the Hyatt in Indian Wells from October 9 to 11, 2024. For questions about the Forum, please send us an email.
Print Article
Upcoming Webinars – Abuse Prevention and AB 506, the Anatomy of a Police Officer Complaint, and Treatment of PTSD
During October and November, the Authority is offering several webinars, all available at no cost to members:
Navigating AB 506 Requirements and Preventing Sexual Abuse in Your Programs
Join Praesidium on Tuesday, October 22, 2024, at 11:00 a.m. for an overview of the Authority-funded resources available to your program to help you prevent sexual abuse of youth and vulnerable adults. The webinar will include a discussion on how Praesidium resources can help your team navigate the expectations of AB 506.
Learn more about Praesidium. Register for the members-only webinar here.
The Anatomy of a Police Officer Complaint: Best Practices for Responding to Complaints and Complying with New Legal Obligations
On Wednesday, November 6, 2024, at 10:00 a.m., Algeria Ford and Monica Sanchez McQueen, partners at Burke, Williams, and Sorensen, will provide an overview of the anatomy of a police officer complaint. They will discuss the challenges of responding to police misconduct complaints due to new obligations in the handling process for Human Resources and Police Management. Please be prepared for discussion during this highly interactive training.
Learn more about the members-only webinar here.
Workers’ Compensation Webinar about Post-Traumatic Stress Disorder Treatments
The California JPIA will host its next Workers’ Compensation Webinar on Thursday, November 14, at 10:00 a.m. David Vittoria, a trauma-trained mental health expert, will draw on his 25 years of expertise to engage attendees in an enlightened discussion. Topics covered will include the human stress responses, facts about post-traumatic stress disorder (PTSD) and its prevalence, and the symptoms, risk factors, and evidence-based treatment interventions indicated for PTSD.
Learn more about the members-only webinar here.
A Workers’ Compensation Webinar recording will be available on the Authority’s website for those who cannot attend the live webinar. For questions, please contact Jeff Rush, workers’ compensation program manager.
Print Article
Strengthening Our Cybersecurity Posture: Why Reporting to IC3 Matters
By John Caruthers, Executive Vice President / Chief Information Security Officer, Triden GroupAs cybersecurity threats continue to evolve, local government staff must stay informed and proactive as stewards of our communities’ digital infrastructure. Cybercriminals constantly adapt their tactics, and our defense strategies must evolve accordingly. One of the key resources in this ongoing battle is the FBI’s Internet Crime Complaint Center (IC3), which plays a pivotal role in tracking and combating cybercrime.
Understanding IC3 and Its Impact
IC3 is the primary platform for reporting cybercrime. Operated by the FBI, it is instrumental in collecting data on cyber incidents, which enables law enforcement agencies to pursue investigations, identify emerging threats, and develop countermeasures. For those in local government, reporting incidents to IC3 is not just a responsibility; it’s a vital part of cybersecurity strategy. Consider it your digital police report, ensuring each incident is documented and actionable.
Key Insights from the 2023 IC3 Report
The most recent IC3 report provides critical insights into the current cyber threat landscape, highlighting trends to be aware of:
- Investment Fraud: This type of fraud saw a staggering 38 percent increase from 2022 to 2023. Cybercriminals target individuals and entities through sophisticated schemes, often leveraging social engineering techniques. It is essential to remain vigilant and educated on recognizing these threats.
- Business Email Compromise (BEC): BEC continues to be a significant concern, with $2.9 billion in reported losses. These attacks can severely impact operations by compromising official communications and redirecting funds. Robust email security protocols and continuous awareness training are crucial in mitigating this risk.
- Ransomware: Ransomware complaints rose 18 percent in the past year, underscoring the need for robust incident response plans. For small government agencies, a ransomware attack can disrupt critical services, making it imperative to have effective backups and response strategies in place.
Define Your Security North Star
John Caruthers is a retired FBI Special Agent and current EVP/CISO at Triden Group. He has encountered many successes and defeats throughout the industry. As a result, he advises having a clear “North Star” to guide your agency’s strategy. This guiding principle ensures that security efforts are aligned with your organization’s overall mission and are moving in the right direction. Reporting cyber incidents to IC3 is one of the many steps to take to stay on course.
Looking Ahead: Planning Your Strategy
If you have questions about integrating IC3 into your cybersecurity strategy or need assistance with your overall security posture, Triden Group is an Authority partner available to provide the support you need to protect your organization and community.
The California JPIA partners with Triden Group to provide fully funded cybersecurity assessments to members. The Authority has also negotiated preferred pricing and executed a Master Services Agreement (MSA) with Triden. Members can leverage the MSA (at their own cost) to engage Triden to perform cybersecurity services. Typical services include penetration testing, training, incident response tabletop exercises, implementation of cybersecurity improvements, and repeat cyber assessments.
If you have questions or would like more information about any of these services, please contact your assigned risk manager
Print Article
POST Certified Team Management Course for Law Enforcement
The California JPIA is pleased to announce a new team management course that improves the skills needed for law enforcement professionals to manage and lead a team effectively. The course is intended for current supervisors, managers, and those preparing for a supervisory role. Developed by Al Cobos, it provides 24 POST credits and has been taught to public sector employees for over a decade.
The interactive course consists of three consecutive 8-hour days, and members can register one or multiple staff members to attend. It is lecture-based, with group activities that enhance class effectiveness by incorporating diverse perspectives and experiences from Authority membership staff. The course culminates in a multi-faceted “real-world” team management problem. Students apply course concepts and skills to workplace challenges, enhancing their team management strategies and addressing the issues presented.
The program benefits all levels of expertise and covers the following topics:
- Stages of Team Development
- Group Influences on the Individual (and Vice Versa)
- Team Characteristics & Team-Based Decision-Making
- Team Learning & Communication Strategies
- Generational Issues in the Workplace (Baby Boomers to Generation Z)
- Emotional Intelligence
- The Social Psychology of Team Dynamics
- Team Learning, Goal Setting, and Maintaining a High Performing Team
- Motivational Conversation
- Practical Strategies to Effectively Manage Teams
The team management course is scheduled on the following dates and venues:
- December 9-11, 2024, LA HIDTA Training Center, Commerce
- April 28-30, 2025, LA HIDTA Training Center, Commerce
- August 18-20, 2025, LA HIDTA Training Center, Commerce
- December 8-10, 2025, LA HIDTA Training Center, Commerce
For more information and to register for the course, visit the Dychelon website.
An Authority-only session is scheduled for June 2025. More information on registration for the June session will be released in early 2025, and registration will be available via myJPIA.
Print Article
Liability Defense Panel Attorney Summit Held in August
By Paul Zeglovitch, Claims and Insurance DirectorThe California JPIA held its annual Liability Attorney Summit on August 20, 2024, at the Authority campus in La Palma. The event offered the Authority defense counsel an opportunity to come together to learn and collaborate, with more than 65 participants this year. Dr. Bill Kanasky of Courtroom Sciences Inc. (CSI), an industry leader in the study of litigation psychology, witness testimony, jury selection and behavior, and case themes, presented the day’s curriculum.
He began by discussing the psychology of witnesses during depositions and trials. His lecture focused on techniques used by plaintiff attorneys to force witnesses to make admissions and lock themselves into positions that can then be criticized. Proper preparation helps witnesses rehearse their responses to avoid such traps.
The discussion progressed to highlight the importance of focus groups in high-exposure cases and the insights they can bring by providing counsel with feedback on defense and plaintiff presentations and evidence. The critical feedback helps build a theme for the defense case by emphasizing what resonates, making the focus group a valuable “test run.”
Dr. Kanasky discussed the frequent use of reptile tactics by plaintiff attorneys throughout litigation and at trial. The plaintiffs’ bar has spent considerable time and effort educating each other and adopting similar strategies to change the litigation playing field. Over the last decade, there have been more unreasonable demands, alleged Traumatic Brain Injuries (TBIs), and resistance to negotiations on cases that provide for the recovery of plaintiffs’ attorneys’ fees and more.
To succeed against this concerted effort by the plaintiffs’ bar to reshape litigation, the defense must proactively involve experts like Dr. Kanasky and CSI. California JPIA defense counsel has full authorization to use CSI on high-exposure cases, and we are excited about this new partnership.
Attorneys in attendance provided positive feedback regarding the strategies and psychology Dr. Kanasky shared, leaving the panel with renewed optimism about having a valuable ally moving forward. The California JPIA will host future training events with Dr. Kanasky in the coming years. If you have any questions, please contact Claims and Insurance Director Paul Zeglovitch.
Print ArticleRE: MEMBERS
City of Morro Bay Celebrates 60th Anniversary
The California JPIA recognizes the City of Morro Bay, which celebrates its 60th Anniversary this year.
The Central Coast community was established in 1870 as a port for agricultural exports. During World War II, a U.S. Naval base was established near Morro Rock to train sailors on landing craft, and a breakwater was built in 1944 to protect the harbor. Also, Morro Bay’s fishing industry began with abalone hauls in the 1940s.
Today, paddleboarders appreciate the bay’s calm waters, surfers enjoy the waves along Morro Rock, and the city’s fishing industry continues with species like halibut, rockfish, and albacore caught by commercial and sport vessels.
The city, with a population of 10,000 residents, was officially incorporated in 1964 following the construction of the Morro Bay power plant, which brought jobs and increased the city’s tax base. Since its incorporation, the city has grown from a quiet fishing village into a destination known for its natural beauty, vibrant local culture, and strong sense of community.
At the heart of the city’s identity are two features: the iconic Morro Rock, which has stood as a sentinel over the bay for millions of years, and three 450-foot concrete smokestacks. Locals know them as “three stacks and a rock,” together, they symbolize the city’s fishing and industrial heritage.
“The city has been a wonderful partner of ours for many years. The unique and relaxed vibe makes it a perfect location to visit along the Central Coast,” said Senior Risk Manager Tim Karcz.
To commemorate this milestone, the City of Morro Bay planned three days of festivities, including a concert in the park, an art exhibition, and a Founder’s Day parade along Morro Bay Boulevard to the Embarcadero. A Family Picnic and Fun Day at Tidelands Park followed the parade to round out the festivities.
“As we celebrate the 60th anniversary of Morro Bay’s incorporation, we honor our rich history and the vibrant community that has shaped our beloved city,” said Mayor Carla Wixom. “Morro Bay has grown into a place where natural beauty meets a spirit of resilience. Together we will continue to value our coastal treasures, nurture our diverse culture, and build a bright future for generations to come.”
Congratulations to the City of Morro Bay for successfully serving its residents for 60 years!
Print ArticleLEGAL MATTERS
Public Law Update – New Law Allows Legislative Bodies to Meet in Closed Session on Cybersecurity Threats
By Charles H. Abbott, Partner; Burke, Williams & Sorensen, LLP
Originally published on September 17, 2024. Reprinted with permission from Burke, Williams & Sorensen, LLP
On September 14, 2024, Governor Newsom signed AB 2715, which amends the Ralph M. Brown Act (‘Brown Act”) and allows legislative bodies to hold a closed session about threats relating to cybersecurity. This new law takes effect on January 1, 2025.
The Brown Act generally requires legislative bodies to hold open meetings, ensuring transparency in their decision-making process. Under limited circumstances, however, the Brown Act allows closed sessions, which are private sessions excluding the public and press. Government Code Section 54957 permits a closed session to discuss threats to security of public buildings, essential public services, or the public’s right to access these buildings or services.
AB 2715 adds language to Section 54957 to clarify that a public entity may hold a closed session to discuss threats “to critical infrastructure controls or critical infrastructure information relating to cybersecurity.” Subsection (a)(2)(A) defines “critical infrastructure control” to include the computer networks and systems so critical that their incapacity or destruction would have a “debilitating impact on public health, safety, economic security, or a combination thereof.” And Section (a)(2)(B) defines the “critical infrastructure information” to mean any actual, potential, or threatened interference with or incapacitation of the critical infrastructure through a physical or computer-based attack.
AB 2715 explicitly permits a public entity to have private conversations with technological and security experts before a cyberattack occurs. Specifically, the public entity can keep private the hardware and software it employs to prevent an attack. The new law also allows a public entity to work with those experts in private on a strategy to restore critical infrastructure after a ransomware attack. A private session permits a public entity to discuss openly the infrastructure impacted and the process to restore that infrastructure without fear of disclosure to the very threat actors who caused the disruption.
Cyberattacks on a public entity’s computer infrastructure are on the rise. Reports suggest that cyberattacks on the public sector rose 40 percent in 2023. These attacks have real consequences for public entities. Ransomware disrupts City services and often results in personal information leaked to the Internet.
Not only does a cyberattack require a public entity to seek legal expertise about mitigation, notification and labor relations, but the leak often results in litigation. Public entities have legal immunities and particular arguments, unavailable to private businesses, to combat class-action lawsuits. Burke’s expertise in public law and data breach provides governmental entities with a unique perspective to address the wide-ranging issues arising from cybersecurity threats and an attack.
All materials have been prepared for general information purposes only to permit you to learn more about our firm, our services and the experience of our attorneys. The information presented is not legal advice, is not to be acted on as such, may not be current and is subject to change without notice.
Print Article