​From "North Korea Threatens ‘Physical Action’ in Response to U.N. Sanctions"
New York Times (08/08/17) Sang-Hun, Choe

North Korea escalated its criticism of the United States, as well as its neighboring allies, on Tuesday by warning that it will mobilize all its resources to take “physical action” in retaliation against the latest round of United Nations sanctions. The statement was the strongest indication yet that the country could conduct another nuclear or missile test. Incensed by the North’s two intercontinental ballistic missile tests last month, the United Nations Security Council adopted a new sanctions resolution over the weekend, the eighth since the country conducted its first nuclear test in 2006. Backers of the resolution said the new sanctions would cut North Korea’s meager annual export revenue by about a third, impeding its ability to raise cash for its weapons programs. The sanctions banned member countries from importing coal, iron, iron ore, lead, lead ore, and seafood from North Korea. They also prohibit member nations from hosting any additional workers from the North above their current levels. Washington called the restrictions “the most stringent set of sanctions on any country in a generation.”

​From "Chips Can Fall Out of Chip Credit Cards, Leaving Consumers Vulnerable"
ABC News (08/09/17)

The tiny chip in a credit card can fall out and then be used by someone else to access credit card information, according to Shawn Kanady of the cybersecurity firm Trustwave. "They are on there pretty good, but a lot of wear and tear can cause issues with the underlying glue," he warned. Jason Knowles, a reporter at Chicago Station WLS-TV said that he did not even notice at first when the tiny piece of technology fell out of his own card from JPMorgan Chase bank. He claims he was still allowed to swipe his card at many places with the magnetic strip so he didn't realize the chip was missing for days. "When I called Chase they told me I had to get a new card with a new number because if someone found my chip intact, it could be placed on another card," he said. "You could probably even glue it on a business card," Kanady said. "You just need that chip."

​From "Man Ambushes French Soldiers in Car Attack, Later Arrested"
Associated Press (08/09/17) Charlton, Angela; Satter, Raphael

French police shot and arrested a man suspected of slamming a BMW into soldiers in a Paris suburb on Wednesday, injuring six of them in what appeared to be a carefully timed ambush before speeding away, officials said. The driver’s motive is unclear, but officials said he deliberately aimed at the soldiers, and counterterrorism authorities opened an investigation. Three of the soldiers suffered light injuries while three were more seriously injured, but their lives are not in danger, according to the Defense Ministry. They were from the 35th infantry regiment and served in Operation Sentinelle, created to guard prominent French sites. "We know it was a deliberate act," Interior Minister Gerard Collomb said. Defense Minister Florence Parly called it proof that extra security measures imposed in recent years are "more necessary than ever."

​From "Take Down: Hackers Looking to Shut Down Factories for Pay"
New York Times (08/09/17)

Today's just-in-time manufacturing sector is climbing toward the top of hackers' hit lists for ransomware attacks. Hackers know these manufacturers have a set schedule and know hours are meaningful to what they do, which creates pressure on manufacturers to make the criminals go away by paying the sums demanded. Last August, malware entered AW North Carolina's computer network via email, spreading like a virus and threatening to lock up its transmission plant's production line until the company paid a ransom. The company stood to lose $270,000 in revenue, plus wages for idled employees, for every hour the factory wasn't shipping its crucial auto parts to nine Toyota car and truck plants across North America. Attackers also are increasingly injecting ways to remotely control the robots and other automated systems that control production inside targeted factories. Cyberattacks that reach into industrial control systems have doubled in the past two years in the U.S. to nearly four dozen so far in the federal fiscal year that ends in September, outstripping last year's total, according to data from the Department of Homeland Security (DHS). "I think the emerging threat you're going to see in the future now is really custom ransomware that's going to be targeted more toward individual companies," says Neil Hershfield, the acting director of the DHS team that handles emergency response to cyberattacks on industrial control systems.

New employee onboarding is the process of integrating a new employee with a company and its culture, as well as getting a new hire the tools and information needed to become a productive member of the team.


Onboarding new hires at an organization should be a strategic process that lasts at least one year, staffing and HR experts say, because how employers handle the first few days and months of a new employee's experience is crucial to ensuring high retention.


GETTING STARTED WITH THE ONBOARDING PROCESSFinding the best candidates for positions in your organization is only part of building an effective team. The process of onboarding new employees can be one of the most critical factors in ensuring recently hired talent will be productive, contented workers. 


However, in some organizations, onboarding is often confused with orientation. While orientation might be necessary—paperwork and other routine tasks must be completed—onboarding is a comprehensive process involving management and other employees that can last up to 12 months.


Before implementing a formal onboarding program, employers should answer some key questions to attain team and upper management buy-in, including:

• When will onboarding start?
  
• How long will it last?
  
• What impression do you want new hires to walk away with at the end of the first day?
  
• What do new employees need to know about the culture and work environment?
  
• What role will HR play in the process? What about direct managers? Co-workers?
  
• What kind of goals do you want to set for new employees?
  
• How will you gather feedback on the program and measure its success?
  
  
  

Once these questions have been answered, HR professionals and upper management can devise a plan of action to help new employees quickly assimilate company policies and workflow while getting fully acquainted with the organization's culture.


CREATING AN ONBOARDING PROGRAM"If we don't worry about onboarding before the employee starts, then we're way behind," said Ben Peterson, CEO of BambooHR, an HR technology company. "Rather than having a stack of papers waiting for their signature, send them out to the employee beforehand, for electronic signature. Give them their benefits selection. Find the technology to help you automate the paper-pushing process."


As soon as new employees receive a job offer, they can also receive access to the company's online onboarding portal, said Amber Hyatt, director of product marketing at SilkRoad, a talent management solutions firm. 


"Here they discover content that's designed to engage them, like a friendly note from their manager, first-day information, welcome messages and photos from new teammates, a glossary of company acronyms, a virtual copy of your employee handbook as well as other details about the new hire's department and job responsibilities," she said.
New-hire portals also benefit HR through dashboards that can organize and track tasks that need to be completed and managed electronically, such as W-4 or I-9, benefits and payroll forms, Hyatt said.


In addition to having new employees fill out new-hire paperwork online, consider providing the answers to questions they may have, such as where to go on day one, who to ask for upon arrival and what to wear, she said.


Set up new hires' desk, phone, computer and password logins before they arrive, said Peterson. 


"The worst thing for a new employee is being wooed through the recruiting process and then arriving on the job and the receptionist isn't even expecting you or your office isn't set up," he said.


THE FIRST DAYThe two main goals on the first day should be setting expectations and introducing objectives. Employees need to have crystal clear ideas about what their job duties and responsibilities are on Day 1, Peterson said. 


"New employees need to get to know the job and get to know their new co-workers. Social interaction is critical. You want them back on Day 2, right?" he asked. 


New employees at BambooHR are taken out to lunch on the first day. "We cared enough to hire them, we want them to know we care enough to build rapport," Peterson said.


Aligning expectations is critical. 


"Organizations that don't focus on acclimating new employees to their corporate culture are at a significant disadvantage," said Hyatt. "Employees who know what to expect from their company's culture and work environment make better decisions that are more aligned with the accepted practices of the company."


To keep existing team members from resenting a new employee, make sure roles and responsibilities are outlined for the entire team, Peterson advised. 


"Sometimes existing team members could feel threatened that someone new could take over their responsibilities. So it's a good idea to clarify the position of the new hire as well as [the positions of] other team members whose work is closely related, how they'll interact with each other, and how projects will run," he said.


THE FIRST FEW MONTHSIt's important for HR to have a one-month check-in to make sure that that the new employee is comfortable, happy and engaged, said Peterson. "Reviewing and giving thoughtful feedback on your new hire's early contributions are also important during onboarding," he said.


According to a BambooHR survey, three-fourths of new hires said training during the first week on the job is most important to them. Meanwhile, 41 percent of HR professionals felt they needed to update training in onboarding. 
"If you aren't communicating what new hires are supposed to be doing and arming them with the tools to do it properly, you're setting them up to fail," Peterson said. 


You also don't want to inundate your new hires with too much information. 


"While it's important to get your new hire ramped up and productive quickly, you also need to make sure you provide on-the-job training in a manageable flow," he said.


Hopefully, new hires have picked a mentor by the end of the first month, Peterson added. Fifty-six percent of respondents in the BambooHR study said that having a buddy or mentor at work was very important when getting started.


The Aberdeen Group report found that high-performing organizations are nearly two-and-a-half times more likely than lower-performing employers to assign a mentor or coach during the onboarding process. 
"Mentoring programs can be as simple as assigning a new employee a go-to person or having an elaborate team of mentors for any questions that might arise," Hyatt said.


THE FIRST THREE TO SIX MONTHSPeterson advised HR to conduct another check-in between three and six months, depending on the employee and the role. 


"Unfortunately, only 15 percent of companies continue onboarding after six months," he said. Remember, nearly 90 percent of employees decide whether to stay or go within that first six months. "You have a huge impact on that choice. Sometimes you just have to show that you sincerely care," he said.​


THE FIRST YEAR"An employee's performance at the end of the first year will prove if they're fully productive," said Peterson. "Now you can plan for future development. Show them what their career looks like at the company. Sadly, sometimes they don't belong there," he said.
​

The end of the first year is when traditional onboarding transitions into retention and employee satisfaction. 
"Shift from on-the-job training to continuous development. It's also a great time to have the compensation conversation," Peterson said.


"Your new hires will thank you for setting them up on the path to success and your company will be well on its way to turning those new hires into seasoned employees."


Roy Maurer is an online editor/manager for SHRM. Follow him @SHRMRoy. © 2017, SHRM. This article is reprinted from https://shrm.org with permission from SHRM. All rights reserved. ​

The U.S. House of Representatives is introducing an additional layer or security at parking garages below House office buildings in an effort to ensure 100 percent of the people entering the buildings have been properly screened before entering. The Capitol’s Sergeant at Arms is bringing the House office buildings’ parking garages within its secure perimeter, according to the Committee on Administration. Currently, security procedures allow drivers who park in the garages in the Rayburn, Longworth, and Cannon office buildings to enter the buildings from the garage without having to go through metal detectors or running their bags through x-ray machines. Drivers must have the proper staff identification and parking permits to enter the garage, but employees who park in any of the of the House office building garages are not subject to the same security screening as employees and visitors who enter on foot. On Feb. 22, the first phase of screening will be introduced at Longworth, Cannon, and Ford House Office Buildings. The second phase will begin in the fall and is expected to encompass Rayburn. Upon completion, the staff will be required to utilize any of 7 access points in the garages to access the House Office buildings. The access points will be equipped with metal detectors and a machine to screen bags.

British police have arrested a teenager in connection to multiple high-profile attacks on senior intelligence leaders in the US. The hacker calls himself Cracka and is the apparent leader of a group called Crackas with Attitude. He is 16 years old and claimed responsibility for breaking into the personal accounts of CIA director John Brennan, Director of National Intelligence James Clapper, Secretary of Homeland Security Jeh Johnson, and FBI Deputy Director Mark Giuliano. Cracka portrayed himself as opposed to US foreign policy. He also may be connected to a November hack that exposed information for thousands of law enforcement and military personnel.

​The computers at the Hollywood Presbyterian Medical Center have been down for more than a week as the Southern California hospital works to recover from a Ransomware attack. While HPMC officials are cooperating fully with the Los Angeles Police Department and the U.S. Federal Bureau of Investigation to discover the identity of the attackers, the network is still offline and staff are struggling to deal with the loss of email and access to some patient data. The hospital's President and CEO, Allen Stefanek, said the situation was declared an internal emergency, reportedly saying that the hospital's emergency room systems have been sporadically impacted by the malware. Some patients were transported to other hospitals due to the incident. In other parts of the hospital, computers essential for various functions, including CT scans, documentation, lab work, and pharmacy needs are offline. Registrations and medical records are being logged on paper and staff have been told to leave their systems offline until told otherwise. As of now, the attack has been designated as random.

Wall Street Journal (02/17/16) Spector, Mike

Apple will resist a court order to unlock an iPhone in the name of protecting consumer data. Auto makers, on the other hand, have other ideas. Americans often authorize these companies to collect mass amounts of data when purchasing a car. While the auto makers have developed voluntary privacy principles to protect consumer data, these principles do not necessitate customer permission before sharing data in response to a subpoena or similar inquiry. Permission isn’t required when data is used or shared “as reasonably necessary to comply with a lawful government request, regulatory requirement, legal order, or similar obligation,” according to a letter car company representatives sent to the Federal Trade Commission in November 2014. And a recent report found large cybersecurity gaps in vehicles that raised questions over how car companies treat data. The voluntary principles are in the spotlight, with some contending they do not ensure consumers can prevent data collection. This includes black boxes, which can track crash data and figures relating to air bag deployments, vehicle speed, and other information. Auto makers have recently launched a research initiative aimed at evaluating and sharing information about cybersecurity threats.

Apple CEO Tim Cook said that his company will resist a U.S. judge's order to access encrypted data hidden on a cellphone that belonged to the terrorist couple who killed 14 people in San Bernardino, California, last year. Cook said that such a move would undermine encryption by creating a backdoor that could potentially be used on other future devices. "In the wrong hands, this software — which does not exist today — would have the potential to unlock any iPhone in someone's physical possession," Cook said. The tech industry and the White House have long been at odds over how much access government agencies should be given to private phone data. Recently, Comey, Atty. Gen. Loretta Lynch and other national security leaders met with representatives from Google, Apple and Facebook to try and find common ground that would help investigators gain critical information about possible terror plots without compromising the privacy of the companies' customers. The order, signed by U.S. Magistrate Judge Sheri Pym in Riverside, California, does not ask Apple to break the phone's encryption but rather to disable the feature that wipes the data on the phone after 10 incorrect tries at entering a password. That way, the government can try to crack the password using “brute force” — attempting tens of millions of combinations without risking the deletion of the data. Apple says it has cooperated with the Federal Bureau of Investigation during the investigation, complying with valid search warrants and subpoenas. The company says the government now effectively wants it to create a new version of its iPhone software that bypasses important security measures.