Happy Father’s Day

June 17th, 2012

Remembering a Great Father

As we celebrate Father’s Day today, I want to share again the words that had appeared in the “Acknowledgments” to the first edition of Prepare for the Worst, Plan for the Best: Disaster Preparedness and Recovery for Small Businesses:

“I hope that my dad, who is retired, will enjoy mentoring those students and sharing with them his enthusiasm for the natural sciences as he did with me! My dad never missed a parent-teacher’s meeting, never missed a science fair or spelling bee, sacrificed his Saturdays to coach my soccer and Little League teams, and offered every possible encouragement to me. I have fond memories of touring college campuses with my parents during my senior year of high school, as we imagined what my future would be. I wish every young woman could have such a wonderful dad to instill in her confidence and optimism.”

Two months before those words were published, my dad was admitted to the hospital for coronary bypass surgery. He looked so frail in the hospital bed, his large eyeglasses making his face and body appear small. I wondered if he had the strength, the stamina or the motivation to participate in cardiac rehab, which would be the next step after discharge from the hospital. Recovering from bypass surgery would be daunting for anyone, but my dad was attempting it after caring for my mother following her traumatic brain injury. He must have felt overwhelmed and I knew that there was something I needed to do.

Sheck Cho, my editor at Wiley, was able to get me a complimentary author’s copy of the book in advance of the official publication date. I brought it to the hospital where I read the “Acknowledgments” to my parents. They were absolutely stunned, as they had been unaware that I had a publishing contract with John Wiley & Sons Inc. or that I had written a manuscript.  I had intended to surprise my dad with the book when it would be published in October 2002, but after seeing his fragile state, I didn’t want to delay two months for the book to be “official”. Tears formed in my dad’s eyes as he heard the words from the “Acknowledgments” and then he drifted off to sleep. I wondered if I had done the right thing, to provoke such emotion when he was weakened.

The next morning I returned to hear the buzz in the hospital: my dad was like a lion that had roared. Every physician, nurse and member of the hospital staff who had entered his room had to read the “Acknowledgments” to my book, as my dad proudly announced to anyone and everyone “my daughter wrote that!” Everyone told me that this was the perfect morale booster at the ideal time. My dad went on to participate with great enthusiasm in cardiac rehab, impressing his physical therapist with his dedication. For the remaining years of his life, he went to the gym three times a week without fail. He was very disciplined.

My dad died last year, just two days before Christmas. I was alone with him in hospice when he took his last breath. I am grateful for our last conversation the day before his death. His obituary (shown here) appeared in the Providence Journal and was my hardest writing assignment ever. This is our first Father’s Day without him. As we celebrate Father’s Day today, I hope everyone takes the opportunity to say what needs to be said, because there may never be another opportunity to say it.

Better Cyber Insurance Products Are Available

June 16th, 2012

A recent survey by Chubb Insurance and Marsh found that businesses fail to appreciate cyber risks or integrate their approach to threats to network security into their overall risk management framework.  I agree with that conclusion and would add the following points:

  • There is no substitute for a robust data security protocol. Cyber insurance may reimburse certain of your losses for data breaches, but it cannot restore your business’ reputation.
  • Cyber insurance offers carefully defined policy benefits that may or may not suit your business, so take care in evaluating the policy. The insurer will typically dictate the way your business responds to a data breach, which may be more in the interest of the insurance company and less in the interest of your business. For example, in the event of a healthcare data breach (let’s say your business provides home nursing services), the policy may cover only credit monitoring services for the patients whose information was compromised, when medical identity monitoring would better meet your needs.
  • Also understand that the defined breaches eligible for coverage are often limited. For example, the cyber insurance coverage may not cover a data breach caused by a third party, such as a cloud computing service provider, even through the primary organization, your business, is liable.
  • Finally, review your existing policies carefully as cyber insurance may be duplicate of certain provisions of your existing business owner’s policy.

Airmic’s Review of Recent Developments in the Cyber Insurance Market reported that cyber insurance is now a more cost-effective risk transfer mechanism than it has been in the past. I look forward to reviewing the new provisions for covering cyber risks when my policy comes up for renewal. Meanwhile, I will be continue to be vigilant on network security.

So Richly Deserved!

June 14th, 2012

It Could Get Worse

JD Power just released its rankings for the airline industry, rating seven key areas of the airline experience (reservation, check-in, boarding, aircraft, staff, service and cost) on a five-point scale. One represents the best; five represents the worst. USAirways tied United Airlines for last place, with an overall score of two.

I am not surprised. My most recent experience with USAirways illustrates the indifference the airline has to its customers. My dad had purchased two nonrefundable, nonexchangeable tickets for himself and my cousin to travel to Fort Myers. This is a trip they enjoy every year, for the Red Sox spring training. Unfortunately, as my dad was hospitalized, he was unable to travel. A doctor’s letter confirmed his inpatient admission.

Tough luck, said USAirways, the tickets were nonrefundable and nonexchangeable and company policy is inflexible on this point.

Eventually, they relented, but it took a lot of effort on my part. USAirways agreed to allow my dad to transfer  vouchers for the value of the two tickets, less a $150 re-booking fee for each, for my use. We had to have his signature notarized to confirm that he approved the transfer to me and supply a doctor’s letter stating that even when my dad would be discharged from the hospital (and the doctor could not guess when that would be), he would be unable to travel. USAirways gave me a time limit within which to use the vouchers.

I planned to use the vouchers to travel to do my programs with the American Red Cross, as this defrays the cost of my volunteer work. I was unable to do so. My dad was admitted to hospice where he died.  I had hoped in view of that development, the airline would extend the deadline for my use of the vouchers and would consider returning to me the $150 per voucher re-booking fee. It seems a gratuitous penalty at a time of great sadness. That was wishful thinking. Once again, USAirways said “tough luck”.

And in case I was thinking of investing the time and effort in trying to persuade them to reverse their position, as I had originally done to get the vouchers in the first place, a representative of the airline sent me an e-mail message in which he wrote “We have found no reason to alter the original resolution as we are unable to make another exception in regard to your unused travel vouchers…We are considering this matter closed and there will be no further correspondence pertaining to this issue.”

In a functioning market economy, companies like USAirways wouldn’t be around for very long. Poor customer service practices don’t build sustainable businesses. But unfortunately, in the U.S., we socialize corporate losses and privatize their gains.  Recall that after the September 11th terrorist attacks, Congress established the Air Transport Stabilization Board, offering $5 billion in cash payments for lost revenue when the airspace was shut down, insurance guarantees and liability protection and a $10 billion loan guarantee program. This act rescued USAirways Group Inc. and facilitated its merger with America West Airlines. Without the loan guarantees, both airlines likely would have been liquidated.

In Prepare for the Worst, Plan for the Best: Disaster Preparedness and Recovery for Small Businesses, I explained at length the nature of corporate welfare masquerading as emergency relief aid for powerful corporations. The airlines were already losing money before the events of 9/11. If they had been subject to the same criteria for small business 9/11 assistance, only those that could show they were profitable and sustainable before the disaster would have qualified for assistance. That would have limited the field of bailout candidates to one: only Southwest Airlines was profitable at that time.

And it is simply outrageous that Congress took cash from taxpayers and gave it to the airlines to compensate them for lost revenues. Business interruption insurance compensates businesses from revenues lost as a consequence of disasters. If USAirways or any other airline had failed to secure appropriate business interruption insurance, their management teams were guilty of gross negligence. Ask any Lower Manhattan small business owner if they received a 9/11 aid package to compensate them for their choice not to purchase insurance. (Or, for that matter, ask small business owners in New Orleans if they received comparable government largesse after Hurricane Katrina.)

USAirways has been working aggressively to acquire American Airlines, while the latter is trying to restructure its operations under the supervision of the bankruptcy court.  The management of American Airlines appears to prefer to remain independent of USAirways. USAirways is reportedly proceeding to file paperwork with antitrust regulators to secure regulatory approval for its merger with American.

Let’s hope the Justice Department acts responsibly and blocks any such anti-competitive maneuverings. American Airlines is a leader in its industry for serving small business customers. Folding it into USAirways would limit consumer choice and force us to endure more bad service.

Little Darth Vader Is a Role Model

June 13th, 2012

A Little Boy With A Big Heart

As I write this blog posting, small business owners and their employees are struggling to recover from disasters, such as severe wildfires in Colorado and New Mexico. The story of Max Page puts things in perspective.

Today Max is undergoing open-heart surgery in Los Angeles. Max is better known as the child who played Darth Vader in Volkswagen’s 2011 Super Bowl commercial. He is a seven-year-old boy born with a congenital heart defect. The surgery will replace his pulmonary valve and fix a hole in his heart. Max uses the celebrity that came from his television commercial to raise money for other children with heart defects, as he is an ambassador for Children’s Hospital in Los Angeles. Click here to support his cause.

The agency that developed the Volkswagen commercial released an e-mail from Max’s mother, Jennifer, which reads in part:

We told Max and Els [Max’s brother] Sunday afternoon. Initially, Max was crying and repeating how scared how he was. We unpeeled the layers by asking what exactly he was afraid of and tackled each issue as he could verbalize it. Blood draws, spending the night in the hospital and hurting are the big three. He was also very sad that summer would be in rest in recovery instead of playing baseball, golf and traveling. Around bedtime he asked if I would stay up with him and talk. He wanted to make a “CAN DO” list. So we wrote out all the things he can do so he could focus on those. Then he said we definitely had to “Fun Up” the house. So we went and got Els out of bed and spent the next hour redesigning each room with a theme, special rules and secret codes. In the Library (Els Room) we have to read with flashlights. On Whisper Lane (the hallway) you have to whisper. Going up the stairs you have to sing “Take me out to the ball game”. The most favorite is the garage—Explode Zone—science experiments and art projects, the messier the better.

Last night, I wanted to make sure he was doing as well as he seemed. He said, “Mom I don’t have a choice. I have to go through it. I don’t like it and it’s still scary—but I have to.  So I think I might as well go through it with a good attitude.” So as we hop on Max’s coattails to go on this ride—we too, shall do it with a good attitude. Though we will still tremble with tears and have our overwhelming moments—we will focus on the “CAN DO” and enjoy our Fun Up House.

Mighty Max wants me to include one more thing—one of the lines he uses when he speaks to groups.

“Kids, if you use your FORCE and dream big, you can achieve anything. We may be small—but we’re mighty!”

Max and his family show humor and courage in not only facing adversity, but are using it to help others. Let’s keep Max in our prayers today and send our best wishes for his speedy recovery.

Tragic Example of Equipment Failure

June 12th, 2012

No Single Point of FailureIn our framework for disaster risk, we place equipment failure in the “high frequency/low severity” category, an example of “everyday” disasters.  But the consequences of everyday disasters can be devastating, even when the source of the failure is trivial. A tragic example of equipment failure occurred when a freezer malfunction damaged one-third of the world’s largest collection of autism brain samples. The loss could set back brain research by decades. The collection was critical to the research of the Harvard Brain Tissue Resource Center.

The Boston Globe reports that the freezer, which was located in the McLean Psychiatric Hospital, a teaching hospital of Harvard Medical School, shut down in late May. The damage was not detected in a timely manner. The freezer is protected by two separate alarm systems and as an additional precaution, staff checked the external thermostat twice daily to verify that the brain tissue samples were stored at minus 80 degrees Celsius. But while the thermostat registered minus-79 degrees, a safe range to store the brain samples, the actual temperature was 7 degrees. The freezer area is securely locked and monitored by surveillance cameras. An internal investigation into the incident is underway.

This tragic loss, despite the multiple layers of protection in place, should prompt all of us to stop and think: can you identify the equipment critical to your small business operations? What measures have you put in place to protect it?

Texting Can Wait!

June 11th, 2012

Texting: It Can Wait!In Prepare for the Worst, Plan for the Best: Disaster Preparedness and Recovery, I advised of the risks to your company when employees use their personal automobiles for business purposes. It is not just company-owned or leased vehicles that expose you to liability risk! Now businesses are focusing on a new emerging threat arising from driving: accidents caused by employees distracted by cell phone use. The National Safety Council estimates that 1.2 million automobile accidents, one-quarter of all yearly accidents, involve cell phone usage. Prudent companies aren’t waiting for legislatures to pass laws banning the use of cell phones (either voice conversations or texting) while driving; they are taking proactive measures to enhance safety.

Consider the policies of AT&T, which is not only a large corporate employer, but also a major cell phone service carrier. It has revised its corporate policies and engaged its nearly 250,000 employees in its “Texting & Driving? It Can Wait” campaign, which includes:

  • Engaging the teenaged children of AT&T employees in a youth advisory council to help refine messaging to be delivered to classmates in their own schools, advising of the hazards of texting or calling while driving.
  • Creating a resource center of information available for download to educate about driver safety with the use of cell phones.
  • Branding more than 2,000 company vans and trucks across 50 top markets with the “It Can Wait” message.
  • Developing a pledge to refrain from texting while driving and promoting it on the company Facebook page where over 11,000 individuals have already signed their commitments.
  • Providing information on product packaging and retail displays in over 2,000 company stores to educate about the “It Can Wait” campaign.
  • Donating $1.25 million to non-profit organizations promoting safe driving practices.

AT&T is to be commended for proactively addressing a risk arising from irresponsible use of its mobile telephones. That risk isn’t limited to driving, however. Employees operating hazardous equipment, such as in certain manufacturing facilities, or performing other functions where concentration and attention are critical, should also be advised to refrain from using their cell phones while working. To protect your small business and your employees, you should create a policy around the use of mobile telephones, particularly those phones that are owned or paid for by the company. It is important to give guidance to your employees and to document that you provided such guidance. You may want to refresh the policy on your company web site or Intranet or e-mailing it to employees as well as updating the company handbook. Emphasize that the message of “It Can Wait” is not just limited to the risks of teens texting while driving!

LinkedIn Security Breach Affects User Passwords

June 7th, 2012

Don't Type the Obvious

The reports of compromised passwords for social networking site LinkedIn remind us of the importance of password security. A Russian hacker’s website has published more than 6 million passwords for LinkedIn (a social media site for business users to make connections) and 1.5 million passwords for eHarmony (an online dating site). The passwords are encrypted, but the hacker site is inviting other hackers to help decipher them. The company announced that the passwords were not necessarily compromised, but there was a risk. In less than a day of the announcement, hackers had broken more than 60% of the passwords. LinkedIn has announced that it will send e-mails to account holders explaining what has happened and how users can reset their passwords. The e-mails will not include links, which is critical for security as fraudsters have already begun sending out phishing e-mails.

As a precautionary measure, LinkedIn users ought to change their passwords by logging into LinkedIn and clicking their name in the top right hand corner, which opens a small drop-down menu, from which “Settings” appears. Click “Setting” and click “Change” next to “Password”. Enter your current password and create a new one. Be sure to select a strong password, one that cannot be easily guessed. Passwords such as “123456” or “qwerty” or “password” are useless for security purposes. Select a combination of letters (both caps and small letters), numbers and other characters to make the password more difficult to guess. Don’t use the same password for multiple sites as it makes life easier for the hackers. Keep your small business secure by staving off complacency. The news of the hacker attack on LinkedIn offers an opportunity to remind your employees of the importance of computer security.

A Small Victory for Productivity

June 6th, 2012

Empowered!

Today I was very pleasantly surprised when I received a call from a major telecommunications company. I had received unsolicited text messages from this company (for which my mobile telephone company charged me). I am not, and have never been, a customer of this phone company and I do not wish to pay for the privilege of being abused by intrusive mobile spam. There is nothing more annoying than the vibration of your cell phone over a meal. You apologize to your companion for the interruption, but since the phone is for emergency use only, you have to check the message.  Then you find out that it is a spammer or robo-dialer harassing you. Does any company really think that this is the way to acquire customers?

So I filed a complaint with the Federal Trade Commission’s online form. Although the process took only five minutes, I thought it a waste of time, as with the volume of complaints they receive, I certainly did not expect a response. But I filed my complaint as a matter of principle. Did you know that you may file a complaint if you received a call that used a recorded message instead of a live person, even if your telephone number does not appear on the Do Not Call Registry?

Calls from companies with which you have an existing business relationships are exempt from the provisions of the Do Not Call list, unless you have instructed them that they are not to solicit you. That was the issue of interest to the telecommunications company that called me. Apparently, the FTC forwarded my complaint to the company for a response. The company was embarrassed to learn that as its service is not allowed in my building, I cannot possibly be a customer. The representative of the company was apologetic and promised to further research the matter.

The National Do Not Call Registry was established to allow us to opt out of receiving telemarketing calls at home. Personally, I don’t agree with the approach. I believe telemarketers should only be able to call those who have “opted in” to receive such calls. That would dramatically reduce the call volume, wouldn’t it? But the government is reporting success with its approach: according to a recent Harris Interactive poll, 92% of people who reported placing a number on the registry said they are receiving fewer calls; 78% said they’re getting “far fewer calls” or none at all.

Companies that violate the provisions of the Do Not Call Registry may be subject to fines of up to $16,000 per offense. With the government desperate for revenues, the FTC may be motivated to follow up on individual complaints. In any event, I feel better for not having tolerated the abuse. As small business owners, particularly those working from home-based offices, these unwanted intrusions are a drain on our productivity and entirely unacceptable.

Weather Headlines

June 5th, 2012

My Weekend!

Today’s headlines on the Weather Channel’s website illustrate the diverse, crazy events across the U.S.:

  • “3 Dead After Strong Storm in Southern Missouri” describes a severe storm that struck the St. Louis area. Local authorities are trying to determine if the storm was a tornado or powerful straight-line winds.
  • “California: Last Rain of the Season” is the headline leading a story about heavy rainfall during California’s traditional dry season.  This headline is followed by
  • “Tender, Dry Conditions Keep West Fires Burning”. The largest wildfire in New Mexico’s recorded history covering 377 square miles required an evacuation of the area. Progress in containing the western flank of the fire gave officials sufficient confidence to allow residents and business owners to return to Mogollon, a small private run ghost town in the area.
  • “Flooding Leaves Midwest Farms Buried in Sand” informs us of the challenges in removing sand, which doesn’t hold water and nutrients as soil does, to clear farmland.

And on the East Coast, we experienced heavy rain and record high tides. I took this photograph over the weekend, showing a tree knocked over by the storm. Fortunately, no one was harmed and the parking space was vacant.  But the message to take to heart is that we must be prepared for any type of weather, as past patterns appear to have limited predictive value.

Hurricane Season 2012 Has Begun

June 4th, 2012

Thankfully, meteorologists predict a relatively mild storm season, but that is no reason for complacency. Unfortunately, complacency is still the norm in the small business sector. Travelers Insurance Company released a survey, on the first official day of the hurricane season, which found that the majority of small businesses are unprepared for business interruptions arising from storms of other disasters. Travelers gathered information from the participants at last month’s U.S. Chamber of Commerce Small Business Summit on their levels of readiness. Just over half of small businesses polled reported that they do not have a written business continuity plan and 57% lacked confidence that their insurance will cover financial losses.  “While their larger counterparts may have the capital to self insure and cover gaps, a smaller enterprise without the same resources may be forced into bankruptcy,” said Marc Schmittlein, CEO of Travelers’ small commercial accounts business. “This has implications for not only small business owners, but also for their communities and our economy at large.”